Privacy Policy
Last updated: September 30, 2026
This policy covers the go-gain.com website and the GoGain Fit app. Website-specific processing is described in section 11. The app privacy policy is also available at app.go-gain.com/privacy-policy.
1. Data Controller
The data controller is A&J CORPORATE, a French SAS company registered under SIREN 939 384 863, headquartered at 40 Avenue Bosquet, 75007 Paris, France.
DPO Contact: privacy@gogain.pro
2. Data Collected
When using GoGain Fit, we collect:
- Identification data : first name, last name, email address
- Fitness profile data : goals, fitness level, training frequency, available equipment, declared medical conditions
- Health data (with consent, read-only): daily steps, calories burned, distance walked/run, workouts, sleep, heart rate, weight and body fat via Apple Health or Health Connect
- Usage data : training history, loads lifted, programs followed, interactions with the AI coach
- App usage statistics (only with your explicit consent): screens viewed, sessions, sign-up steps and feature interactions, described below
- Payment data : managed exclusively by Apple (App Store) and Google (Play Store) — we do not store any banking information
- Body mass index (BMI) : calculated in the app from your weight and height.
App usage statistics
With your explicit consent, we collect app usage statistics (screens viewed, sessions, sign-up steps and feature interactions) to understand how the app is used and improve it. These statistics are linked to your account by an internal identifier: they are not anonymous. They do not contain the content of your health data or your conversations. They are used for our internal analysis, are not shared with third parties for their own purposes and are not used for advertising tracking.
Sharing is off by default until you accept it. You can turn it on or off at any time in Profile → Privacy, with the “Share usage statistics to improve the app” setting. Turning it off immediately stops the app from sending statistics and deletes events still waiting to be sent. Your choice is saved to your account and read again when you sign in. The server ignores events without explicit consent, including those sent by other app versions or devices. If saving fails, the app shows an error and lets you try again; your choice must be synced to apply to your other devices and future sign-ins.
Events are kept for 25 calendar months, then deleted by a daily purge. Turning sharing off applies to future collection: events already recorded remain subject to this retention period.
3. Purpose of Processing
Your data is used to:
- Create and manage your user account
- Personalize your training programs and nutrition plans
- Operate the AI virtual coach (Hugo)
- Track your progress and physical activity
- Manage subscriptions and promotional codes
- Send proactive coaching notifications
- Improve our services and user experience
4. Legal Basis
- Consent : health data (Apple Health / Health Connect), app usage statistics
- Contract performance : account management, service delivery
- Legitimate interest : service improvement, coaching notifications
5. Data Sharing
Your personal data is never sold. It may be shared with:
- Azure OpenAI (Microsoft) : AI coach conversation processing — data hosted in France (France Central region)
- Hosting : Microsoft Azure (France Central) for data storage
- Sentry (Functional Software, Inc., United States) : a processor used to detect and fix mobile app crashes and errors and monitor performance. Reports include technical device and error data (model, operating system, app version, stack traces and diagnostic context), as well as performance traces sampled at 20%. The SDK may generate technical identifiers; no GoGain account identifier is explicitly configured in Sentry. Automatic transmission of optional personal data is not enabled. The IP address may nevertheless be processed to deliver these reports. Data is hosted in the European Union, in Frankfurt (Germany, de.sentry.io region).
- Payments : Apple / Google for subscription management
- RevenueCat : management of subscription access rights, using your account identifier and store purchase and subscription information.
No transfer of data outside the European Union is made for primary storage.
Sentry is a US company. For any transfers outside the EU, its Data Processing Addendum (DPA) provides for the Data Privacy Framework and, where it does not apply, the European Commission’s Standard Contractual Clauses.
This statement concerns the app’s primary storage at Azure; it does not extend to all providers. RevenueCat states that it hosts customer data in the United States. See its privacy policy.
6. Data Retention
- Account data: retained while the account is active, then deleted as soon as the account is deleted (in the app, or on request within 30 days)
- Health data: retained during use, deleted upon request
- Training history: retained during use
- AI coach conversations: each message is kept for 12 months and then deleted automatically; everything is deleted immediately with the account
- App usage statistics: kept for 25 calendar months, then deleted by a daily purge; turning them off applies to future collection, events already recorded remain subject to this period
- Sentry diagnostic events: retained for 30 days on the free Developer plan, in accordance with Sentry’s retention terms.
7. Your Rights (GDPR)
Under the General Data Protection Regulation (GDPR), you have the following rights:
- Right of access : obtain a copy of your personal data
- Right to rectification : correct inaccurate data
- Right to erasure : request deletion of your data
- Right to data portability : receive your data in a structured format
- Right to object : object to the processing of your data
- Right to restriction : restrict the processing of your data
To exercise your rights, contact us at privacy@gogain.pro. We will respond within 30 days.
8. Security
We implement appropriate technical and organizational measures to protect your data: encryption in transit (TLS), secure authentication (Better Auth), encrypted token storage (Secure Store), and role-based access control (RBAC).
9. Cookies
The GoGain Fit mobile app does not use cookies. The web admin portal uses session cookies necessary for service operation (authentication).
10. Complaints
If you believe that the processing of your personal data constitutes a violation of the GDPR, you have the right to lodge a complaint with the CNIL (French Data Protection Authority): www.cnil.fr.
11. Data from the go-gain.com website
Contact, appointments and business enquiries
The contact form collects your name, email address, phone number if provided, and the subject and content of your message. The time of receipt, IP address and browser information are also recorded. This data is used to handle your enquiry, including requests for a business offer or account deletion, and to follow up on correspondence. Depending on the enquiry, processing is based on pre-contractual steps or our legitimate interest in responding to requests.
Form messages are stored for 90 days in the website’s Redis storage, then expire automatically. They are accessible to authorised administrators. Vercel hosts the website and its server functions.
Appointment booking uses Calendly. The embedded calendar only loads when you click “View available times”; you can also open it in a new tab. Calendly processes the information you provide there to arrange the appointment. See Calendly’s privacy notice for its retention and transfer terms.
Website cookies and audience measurement
Google Analytics and Google Tag Manager load after you accept audience measurement. This processing is based on your consent; you can reject or change your choice through “Cookie preferences” in the footer. Your choice is stored in your browser’s local storage until you change or clear it.
The gogain-language cookie remembers your language choice for one year. Without this choice, the website uses the country provided by Vercel to suggest a language; /fr, /en and /es addresses remain directly accessible. Website administration uses a necessary session cookie lasting 8 hours.
Retention rules and transfers specific to audience measurement and hosting are described in the privacy policies of Google and Vercel. The 25-month period in section 6 applies to GoGain Fit app usage statistics.
12. Account deletion and withdrawal of consent
To delete your GoGain Fit account, see the account deletion procedure, available with or without the app. Deleting your account does not cancel your Apple App Store or Google Play subscription: also cancel it through the relevant store to stop renewal.
You can withdraw consent to health data access in Apple Health or Health Connect settings. To request deletion of data already collected, contact the DPO at privacy@gogain.pro. Turning off usage statistics stops future collection, as described in section 6.