Data controller
The data controller is Jaime Villalba Gil. For any matter regarding your data you can write to jaimevillalbagil@gmail.com.
What data we collect and where it comes from
We only process the data needed for the application to work. Each category is collected in the context indicated:
| Identity and account | Email, name, user ID and profile photo. Sign-up and sign-in (email and password, Google or Apple) and profile editing. |
| Optional profile data | Phone number, date of birth, gender, nationality and username, only if you fill them in. You decide whether other members of your center can see them. |
| Camera | Scanning the attendance QR code and taking photos for your profile, the center or the chat, only when you ask for it. |
| Microphone | Recording voice notes in the center chat, only while you are recording. |
| Photos and files | Attachments you send in the center chat and in admission requests, and profile or center photos you upload. |
| Approximate and precise location | Nearby gym search, only when you open it and ask for it. Used at that moment and then discarded; it is not saved in our database. |
| Health and fitness data | Weight, height and target weight, and the log of injuries, illnesses or skin problems (area, dates, impact and notes). These are special-category data and are only processed if you enter them. |
| Messages | Messages and voice notes in the chat of the center you belong to, and the messages you exchange with the center staff. |
| Attendance and sports activity | Class bookings, attendance records, sparring rounds and achievements within your center. |
| Center follow-up | Notes your center staff write about your sessions and a follow-up indicator calculated from your activity. Only your center staff can see it. |
| Payments and purchases | Fees and class passes the center records, orders from its shop, and the center subscription purchased on the App Store or Google Play. Never your card details. |
| External profiles | Links to your Smoothcomp or Instagram profiles, if you choose to link them. |
| GIF searches | What you type in the chat GIF search. |
Location
The application requests your approximate and precise location only when you open the nearby gym search and expressly ask for it. There is no background collection and no continuous tracking. The location is used at that moment to sort gyms by proximity and is discarded afterwards: it is not stored in our database. To resolve the search, the location leaves the device towards Google Maps and Google Places, subject to Google's privacy policy.
Explicit notice on health data
Weight, height and body episodes (injuries, illnesses or skin problems) are health data. They are processed solely on the basis of your explicit consent, given when you enter them voluntarily in the app, and you can stop logging them or request their erasure at any time. Your center staff only see your episodes if you choose to share them, and for as long as you choose.
Sign in with Apple
If you sign in with Sign in with Apple, Apple gives us a unique identifier for your Apple Account, your email —or a private Apple relay address, if you choose to hide it— and, only on the first sign-in, the name you choose to share. When you delete your Strife account, the app asks you to confirm with Apple and we revoke Strife's access to your Apple Account. You can also remove it at any time from your Apple Account settings.
Center subscription
Keeping a center active in Strife requires a monthly subscription per center, which its administrator purchases and pays for inside the app; students pay nothing in the app. Payment is processed by Apple (App Store) or Google (Google Play), depending on the device, under their own terms. We store the subscription status, the transaction identifier, the product purchased, the period dates and which administrator pays for it. We never receive or store your card details. The fees a center charges its students do not go through the app: the center only records them.
Student follow-up by the center
To help center staff look after their students, the app calculates a follow-up indicator from attendance, cancelled or unused bookings, fee status, coach notes, reading of the chat and announcements, time since the last rank and time at the center. Only center staff with follow-up permission can see it. It is an indicative aid: it makes no automated decision about you; any action is decided by a person at the center.
Who processes the data
Data is stored in Supabase (database, authentication and file storage), hosted on Amazon Web Services infrastructure in the eu-central-1 region (Frankfurt, Germany, European Union). In addition, depending on the feature you use, these third parties receive data: Google (Google Sign-In when you sign in with Google; Google Maps and Places when searching for gyms; Google Play for purchases on Android), Apple (Sign in with Apple and App Store purchases), Giphy (the terms you search in the GIF picker and your IP address) and, only if you choose to link your profiles, Smoothcomp and Instagram. Each processes data under its own privacy policy, and the third parties with whom data is shared provide the same or equal protection as described in this policy. Some of them may process data outside the European Economic Area, in particular in the United States; in that case the transfer relies on the safeguards provided for in the GDPR, such as European Commission adequacy decisions or standard contractual clauses.
Legal basis
We process your data on the following bases: performance of the service you request when you create your account and take part in a center (identity, messages, bookings, attendance) and, for the administrator who purchases it, the center subscription contract; your consent for optional data (optional profile data, microphone, health, external profiles), which you can withdraw at any time; and the legitimate interest of the sports center in keeping its operational history (attendance and payments) and in following up on its students.
Retention periods
Your data is kept while your account is active. When you request account deletion, your identity is erased as described on the account deletion page; the center's operational history (attendance, bookings and payments) is kept in anonymized form based on the center's legitimate interest and possible legal obligations.
Your rights
Under the GDPR you can exercise at any time your rights of access, rectification, erasure and portability, as well as restriction of or objection to processing, by writing to jaimevillalbagil@gmail.com. You also have the right to lodge a complaint with a supervisory authority: the one in the European Economic Area country where you live, the Spanish Data Protection Agency (AEPD) or Datatilsynet in Norway, the country where the controller lives.
Minors
Strife is aimed at people who can have their own account, that is, from the age of 13; below that age no accounts are created. Children in the kids' classes (the 4-8 and 9-11 groups) are enrolled by their father, mother or legal guardian, or by the center itself: they have no account and do not use the application. The data of an enrolled minor is processed on behalf of whoever enrolls them —the parent or guardian, or the center—, who is responsible for having the necessary legal basis and consent. To exercise the minor's rights (access, rectification, erasure, restriction, objection and portability), their parent or guardian, or the center that enrolled them, can write to jaimevillalbagil@gmail.com.