Privacy policy
Last updated: 23 October 2026
Who is responsible for your data
The data controller is Hugo Duriez, sole trader (micro-entrepreneur, SIREN 941 269 607), 214 rue du Front de Mer, 76860 Quiberville-sur-Mer, France. Contact: crownfitcontact@gmail.com.
The data we process
- Account: first name, email address, password (stored only in encrypted form, never in clear text).
- Profile: sex, age, weight, height, sport practised, activity level, goal, budget, store, diet, allergies and excluded foods.
- Activity in the app: sessions, XP, rank, nutrition plans generated, achievements, gym check-ins, posts, follows and likes.
- Usage settings: generation quota, ads watched, Premium status.
- Location: only if you use “My location” on the map, after your permission. It is used to show nearby gyms.
- Ads: only if you accept them (see below).
Why, and on what legal basis
| Purpose | Legal basis |
|---|---|
| Create your account, calculate your plan, record your sessions, run the app | Performance of a contract (the Terms) |
| Process your health data (weight, height, goal, allergies) for your plan | Your explicit consent, given at sign-up |
| Show the community and the posts you choose to share | Performance of a contract |
| Show personalised ads | Your consent (cookie banner) |
| Manage Premium subscriptions, prevent abuse and fraud | Performance of a contract, legitimate interest |
Health-related data
Your weight, height, goal (muscle gain, cutting), diet and allergies can reveal information about your health. We use them only to calculate your plan and personalise the app, and only if you consent when creating your account. You can withdraw your consent by deleting your account. Crownfit does not replace the advice of a doctor or dietitian.
Cookies, local storage and ads
Crownfit uses the local storage of your browser or phone. Here is what is saved:
| Name | Purpose | Duration | Consent |
|---|---|---|---|
cf_users | Local copy of your account and data (synced with the server) | Until deleted | No, necessary |
cf_s | Keep your session open | Until you log out | No, necessary |
cf_consent | Remember your cookie choices | 6 months | No, necessary |
cf_lang | Remember your language (French or English) | Until deleted | No, necessary |
| Ads (Google AdMob, in the mobile app) | Show rewarded ads, personalised or not | As set by Google | Yes for personalisation |
You can change or withdraw your consent at any time with the “Manage my cookies” link at the bottom of every page. Refusing is as easy as accepting and does not block any basic feature.
Sharing and transfers
We do not sell your data. It is hosted by Supabase (database and authentication), in the Ireland region, within the European Union. It is sent elsewhere only in these cases: city and gym search (sends the city name or your approximate position to OpenStreetMap) and, if you accept them, audience measurement and ads. If data is transferred outside the European Union, appropriate safeguards are in place.
The posts you share in the community are visible to other members according to the audience you choose (friends or “For you”).
Retention period
Your account data is kept as long as your account exists. Your cookie choices are kept for 6 months. [TO BE COMPLETED: retention period after inactivity]
Your rights
You can at any time ask for access to your data, its correction, erasure or portability, the restriction of or objection to its processing, and withdraw your consent. You can also set directions for what happens to your data after your death. Write to us at crownfitcontact@gmail.com. You can also export your data and delete your account yourself from “My account” in the app.
Security
Passwords are never stored in clear text: they are encrypted by our authentication provider. Each user can only access their own data (database-level security rules) and exchanges are encrypted over HTTPS. No security is perfect: choose a unique password and do not share it.
Minimum age
Crownfit is reserved for people aged 15 or over. If you are under 15, do not create an account.
Contact and complaints
For any question: crownfitcontact@gmail.com. If you believe your rights are not being respected, you can lodge a complaint with the CNIL (the French data protection authority): cnil.fr, or with the supervisory authority of your country.