Privacy Policy

Last updated: 26 September 2025

1. Controller

Media Nordic ApS is the data controller. Address: Belvedere 43, 5700 Svendborg, Denmark. Contact: [email protected].

2. What we collect

• Account data: email, password hash, profile info.
• App data: weight, goals, preferences.
• Integrations: if you connect Strava, Oura, etc., we process your sleep, activity, HR/HRV, readiness.
• Device/usage: app version, crash data, identifiers.

3. Why we process data

• To provide the App (contract).
• To personalize insights (your explicit consent for health data).
• To improve performance/security (legitimate interest).
• To comply with legal obligations.
• To send marketing (consent, optional).

4. Your choices

• Withdraw health-data consent anytime in Settings (may limit features).
• Disconnect integrations in Settings.
• Opt-out of marketing anytime.

5. Sharing

• Service providers (cloud hosting, analytics) under contract.
• Third-party integrations (only if you connect them).
• Legal authorities if required by law.

6. International transfers

If data is transferred outside the EU/EEA, safeguards (e.g. SCCs) are used.

7. Retention

• Account data: while account is active.
• Health data: until consent is withdrawn or account deleted.
• Legal requirements may extend retention.

8. Your rights

Access, rectify, erase, restrict, portability, object (where applicable), withdraw consent. Complaints: Datatilsynet (DK) or your local authority.

9. Security

We use encryption, access controls, and monitoring, but no system is 100% secure.

10. Children

Not for under-16s without parental consent.

11. Changes

We may update this Policy; changes will be notified in-app.

12. Contact

[email protected] | Media Nordic ApS, Belvedere 43, 5700 Svendborg, Denmark