Draft for review: This policy describes the current results.social website and app based on their implemented features. The controller identity and operational retention periods must be completed before publication.
1. Controller and contact
The controller is the operator identified in the Imprint. For privacy requests, email privacy@results.social.
2. Data we process
Depending on the features you use, results.social may process:
- Account data such as email address and authentication identifiers when you sign in using Supabase Auth.
- Training profile information, including training level, goals, schedule, selected equipment, and optional age or weight.
- Workout history, class reservations, community posts, reactions, friendships, invitations, and visibility preferences when you use those features.
- Subscription status and transaction identifiers returned by the app stores and RevenueCat. Payment card details are handled by the relevant store, not by results.social.
- Technical data needed to deliver the website and app, prevent abuse, and diagnose failures.
3. Purposes and legal bases
We use account and activity data to provide the service you request, under GDPR Article 6(1)(b); to secure and maintain the service and respond to support requests, under Article 6(1)(f); and, where required, to meet legal obligations under Article 6(1)(c). Optional analytics or marketing technologies are not enabled by this website without your consent under Article 6(1)(a).
4. Processors and recipients
Service providers may process data on our behalf, including Supabase for authentication and database hosting, RevenueCat and Apple or Google for subscription status, Brevo for website sign-in emails, and infrastructure or media providers needed to serve the service. Their exact roles, locations, and transfer safeguards must be confirmed by the operator before launch.
5. Storage and retention
Some training data is stored locally on your device. If you sign in, selected profile, workout, class, and community data is synced to the service. Data is retained only for as long as needed to provide the service, meet legal requirements, or resolve disputes. The operator must publish its specific retention periods and deletion procedure before launch.
6. Cookies and local storage
The website uses browser local storage to remember your optional-cookie choice. Essential technical storage may be used for sign-in sessions and site security. Optional analytics are off unless you opt in. You can reopen your choice using “Cookie preferences” in the site footer. The app stores workout and preference data locally on your device.
7. Transfers outside the EEA
Some providers may process data outside the European Economic Area. Where this occurs, the controller must ensure an applicable transfer mechanism and safeguards are in place and provide details on request.
8. Your rights
Subject to applicable law, you may request access, correction, erasure, restriction, portability, or object to processing. Where processing relies on consent, you may withdraw it at any time. You may also lodge a complaint with the Austrian Data Protection Authority (Datenschutzbehörde).
9. Children and fitness information
The service is not designed for children under 16. Fitness content is general information and is not medical advice. Do not enter sensitive health details into community features.
10. Updates
We will update this policy when the service or its data practices change. Last updated: 13 October 2026.