Who is responsible
Agonos is the data controller for the Agonos mobile app. Write to contact@agonos.app about anything on this page.
One thing to understand first: your coach decides what happens inside their own practice. They choose what to record about you, and they control their organisation's data. We hold it for them, and we hold your account for you.
What the app collects
Your account. Name, email address, an optional phone number, an optional profile photo, and the language your phone is set to.
Your coaching. The programmes your coach assigns you, the sessions on your calendar, and everything you log in a session — sets, weights, reps, times, distances, and notes.
Your body data. Date of birth, sex, height, and any measurement you or your coach records: weight, waist, and custom measurements. Your coach may also record goals and injuries or limitations you have told them about.
This is health data. Under the GDPR it is a special category, and we process it only because you have given explicit consent by using a coaching app to record it, and because your coach needs it to do the job you asked them to do.
Your messages. The text, photos and videos you exchange with your coach, and with anyone else in a group thread.
Your device. A push notification token, which platform it belongs to, and the app language — so a notification arrives on the right phone in the right language. Plus ordinary technical logs: request times, error traces, IP address at the moment of a request.
What the app does not do
- No advertising, no ad networks, no advertising identifiers.
- No third-party analytics or tracking SDKs, and no cross-app tracking. The app does not ask for tracking permission because it does not track you.
- We never sell your data and never share it for anyone else's marketing.
- The app takes no payment. If you pay your coach, that happens outside the app and we only ever see what your coach types in as a record.
Apple Health and step counts
If you allow it, the Stats screen reads your daily step count from Apple Health.
That number is read on your phone, shown on your screen, and goes nowhere else. It is not uploaded to our servers, not stored, and not visible to your coach. Health data is never used for advertising or shared with anyone. Revoke access in Settings → Health → Data Access & Devices → Agonos and the rest of the app is unaffected.
Why we process it, and on what basis
| What | Why | Legal basis |
|---|---|---|
| Account, programmes, sessions, logs | To provide the coaching service you signed up for | Performance of a contract |
| Body measurements, goals, injuries | So your coach can programme and adapt safely | Explicit consent (Art. 9(2)(a)) |
| Messages and attachments | To carry the conversation with your coach | Performance of a contract |
| Push token and language | To deliver notifications you asked for | Consent, withdrawn by turning notifications off |
| Technical logs | Security, abuse prevention, fixing faults | Legitimate interest |
Who can see it
Your coach, and the coaches and assistants in their organisation. That is the point of the app.
Other clients, only in a group thread you are a member of, and only the messages in it.
Us, when we need to: investigating a fault you reported, a security incident, or a legal obligation. Access is restricted to the people who need it, and every table in the database is protected by row-level security, so an account can only read the rows that belong to its own organisation.
Nobody else. We do not disclose your data to anyone outside these categories unless the law compels us, and we will tell you if that happens unless we are forbidden from doing so.
Who processes it for us
| Processor | What for | Where |
|---|---|---|
| Supabase | Database, authentication, file storage | European Union (Frankfurt) |
| Apple (APNs) | Delivering push notifications to iPhones | Apple's infrastructure |
| Google (FCM) | Delivering push notifications to Android phones | Google's infrastructure |
Your data is stored in the European Union. A push notification is the one thing that leaves it: the title and body of an alert pass through Apple's or Google's servers to reach your phone, which is the only way any app on either platform can notify you. We keep those notifications short for that reason.
How long we keep it
For as long as your account exists. When you delete your account, your profile, logs, measurements and messages are deleted with it.
Your coach's own record of you — the roster entry they created before you had an account — belongs to their organisation and stays until they delete it or close the organisation. Ask them, or ask us and we will pass it on.
Ordinary technical logs are kept for a short operational window and then rotated out.
Your rights
Under the GDPR you can ask us to give you a copy of your data, correct it, delete it, restrict or object to how it is processed, or hand it to another provider. You can withdraw consent at any time; that does not undo processing that already happened.
Delete your account from inside the app: You → Delete my account. It is immediate and permanent.
For anything else, email contact@agonos.app from the address on your account and we will answer within one month. If you think we have got it wrong, you can complain to your national data protection authority — in France, the CNIL.
Children
Agonos is not for children under 16. We do not knowingly create accounts for them. If a minor has an account, tell us and we will remove it.
Security
Traffic is encrypted in transit. Data is encrypted at rest by our hosting provider. Access to production data is limited to the people who need it, and the database enforces per-organisation isolation in the database itself rather than in application code.
No system is perfect. If you find a vulnerability, write to contact@agonos.app before disclosing it publicly and we will work with you.
Changes
If we change what we collect or why, we update this page and move the date at the top. A change that materially affects you gets told to you in the app rather than left here to be found.
Contact
contact@agonos.app — or the support page if the question is really about the app working.