Privacy Policy
GDPR and consent management
This policy explains what data Sweatly collects, why it is processed, and how you can exercise your rights. Active version: 2026-03-18.
DPO Contact
Data Protection Officer: dpo@sweatly.app
You can also exercise your access, export or deletion rights from the settings page.
Data collected
- Account data: email, technical session identifiers and profile information.
- Onboarding data: goals, body profile, fitness and nutrition habits.
- Optional sensitive data: body photos and cycle information only with explicit consent.
- Analytics: analytics scripts are loaded only after analytics opt-in.
Purposes
- Create and secure your account.
- Personalize your onboarding, preview and program.
- Run the automations associated with your subscription.
- Measure product usage only if you accept analytics.
Your rights
- Withdraw your consents from the settings page.
- Export all your data in JSON format from /settings.
- Request complete account and data deletion from /settings.
- Contact the DPO for any question, rectification or complaint.
Consent logs
Sweatly logs every consent event with the consent type, its granted or revoked status, timestamp, available IP address and associated policy version.