Who to ask
This is the question that decides everything else, and it has two answers.
Your own data — your account, your login, your invoices. We are the controller. Ask us: contact@agonos.app.
Your clients' data — their programmes, logs, measurements, photos and messages. Your coaching organisation is the controller and we are only the processor. A client asking about their data should ask their coach. If they ask us first we will point them to you rather than act behind you, and we will tell you that they asked.
If you are a client and your coach has closed their account or will not respond, write to us anyway and we will help you get to the right place.
Your rights
Access. A copy of the personal data we hold about you, and an explanation of what we do with it.
Rectification. Correction of anything wrong. Most of it you can edit yourself in the product, which is faster than asking.
Erasure. Deletion of your data. Note the limits: we must keep invoices for the period tax law requires, and deleting your coach account does not delete the records your clients hold with other coaches.
Restriction and objection. Ask us to pause a processing activity, or object to one we run on legitimate interests. We will stop unless we have compelling grounds that override yours, and we will explain which.
Portability. Your data in a structured, machine-readable format, for you or for another provider.
Withdraw consent. Wherever consent is what we relied on. It takes effect from the moment you withdraw and does not undo what already happened.
Complain. To your national supervisory authority. In France that is the CNIL; if you are elsewhere in the EEA it is your own country's regulator.
How to make a request
Email contact@agonos.app from the address on your account, and say what you want rather than which article you are invoking — "send me everything you have about me" is a perfectly good access request.
If you write from another address we will have to verify you first, which is slower and is the only reason we would ask for anything extra. We will never ask for a copy of an identity document to satisfy a routine request from an account address.
We answer within one month. For a genuinely complex request the law allows a two-month extension, and if we ever need it we will tell you inside the first month rather than let the deadline pass quietly.
It is free. We do not charge for a request unless one is repetitive to the point of being an abuse of the right, which has not happened yet.
What we do to make this easy
Export from inside the product. You can get your organisation's data out while the account is live, without asking anyone.
Deletion that means deletion. A client can delete their own account from the mobile app — You → Delete my account — and it is immediate and permanent.
No dark patterns on consent. There is nothing on this website to consent to: no analytics, no advertising, no tracking, two functional cookies. That is why you have never seen a banner here.
Data in the EU. The database, authentication and file storage run in the European Union. The processor list and the transfer safeguards are in the DPA.
For coaches: your own obligations
Using Agonos does not make you compliant on its own. You are the controller of your clients' data, which means you need a lawful basis for holding it, an Article 9 condition for anything health-related, and a privacy notice of your own telling clients what you record and why.
The DPA is the Article 28 contract you need with us and applies automatically — you do not have to sign anything for it to bind us. If your insurer or a corporate client wants a countersigned copy, ask and we will send one.