Controller:
Hello Products GmbH
Bachstr. 22, 52066 Aachen, Germany
Email: app@plankpad.com
We process personal data (name, email, country, age, gender, height, weight, training progress, and usage data) solely to provide and improve the app. Data is stored in our CMS (Strapi), hosted on DigitalOcean servers in the EU. Device data and usage statistics (e.g. completed workouts, challenges) may also be collected.
Push notifications are provided via OneSignal (USA). No advertising or third-party analytics tools are used.
We use Firebase Authentication by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) or Google LLC (USA) for user registration and login. Name and email address are processed and stored on Google servers. Data may be transferred to countries outside the EU (e.g., USA). Processing is based on Art. 6(1)(b) GDPR (contract performance). More information: https://policies.google.com/privacy
We use the “SendGrid” service by Twilio Inc., USA, to send certain transactional emails (e.g., registration confirmations, system notifications). Only the user’s name and email address are transmitted to and processed on SendGrid’s servers. Processing is based on Art. 6(1)(b) GDPR (contract performance) or Art. 6(1)(f) GDPR (legitimate interest in secure email delivery). Data transfers to the USA are carried out based on the EU Commission’s Standard Contractual Clauses. More information: https://www.twilio.com/legal/privacy
All data is encrypted via HTTPS and access is limited to our internal team. Authentication uses secure JWT tokens. Passwords are stored in encrypted form. Backups are made regularly.
Subscriptions and in-app purchases are handled exclusively via the App Store. The respective platform’s terms and cancellation policies apply.
You can view and edit your profile in the app. To request data deletion or exercise your GDPR rights (access, correction, deletion, objection), contact us at app@plankpad.com.
Children under 16 may use the app, but parental consent is required for data processing in accordance with Art. 8 GDPR. We recommend that parents supervise their child’s use of the app.
For more information about how to use the app, please see our Terms of Use.
By registering, you agree to this privacy policy. To withdraw consent, please contact support.
Last updated: July 2025