Privacy Policy
In the event of any discrepancy, the French version available on go-nordik.com shall prevail.
Version 1.1 — 19/09/2026. Data controller: the publisher of Go-NordiK (EU). Rights/privacy contact: contact@go-nordik.com.
1. Principle: local-first
The app is 100 % account-free. Your data stays on your iPhone and your Apple Watch. Nothing leaves the device without your action: cloud synchronisation is opt-in (account creation), never imposed.
2. Data collected (with an account: also on the EU server)
| Data | Usage | Legal basis |
|---|---|---|
| Profile (goal, level, frequency, age range, weight, constraints from a closed list) | plan generation | explicit consent |
| Sessions: GPS, distance, duration, D+/D−, steps, avg/max HR | progress, stats | explicit consent (health data, art. 9) |
| SpO2, respiratory rate, HRV | shown after the session (spot/background readings, never live) | explicit consent |
| Wrist movements (watch) | poling rate/regularity (raw CSV deleted after analysis) | explicit consent |
| Sleep (7-night average, if enabled) | plan adjustment | explicit consent |
| Email + password (opt-in account) | authentication | contract |
The following are never collected: mandatory full name, contacts, advertising
identifiers, cross-app tracking (NSPrivacyTracking = false).
3. Artificial intelligence (plans)
Two modes, with no name/email/GPS/HR/tracks ever sent — only categories (goal, level, age range, constraints from a closed list):
- Server key (subscribers, 1 free plan): your categories pass through our VPS (EU) to OpenRouter (United States) and the GLM model (Zhipu, China). Requests limited to 8,000 characters, no logs kept on the server side.
- Personal key (BYOK, Lifetime offer): direct exchange between your device and the provider — we see nothing.
4. Subprocessors (all EU except AI)
Supabase hosting (VPS, EU), encrypted S3 offsite storage (EU), Apple (on-device HealthKit, encrypted WCSession watch↔iPhone). AI: see §3.
5. Retention periods
Active account: data retained. Account inactive for 3 years: anonymisation. Server backups: 14-day rolling window (deletion is final within 14 days). Coach consent log: deleted with the account (admissible evidence during the relationship via server timestamps).
6. Your rights (access, rectification, portability, erasure, objection)
- Export: Profile → “Export my data” (JSON: profile, plans, sessions + health, routes + GPX).
- Erasure: Account → “Delete my account and data” (server + local, then sign out); Profile → local reset.
- Other requests: contact@go-nordik.com, response within 1 month.
7. Security
TLS 1.3 + HSTS, JWT + Keychain, revocable devices, encrypted backups (restic AES-256), opt-in end-to-end encryption (plans + GPX), coach consent log, breach register with CNIL notification within 72 h in case of high risk.
8. Coach / Club
A coach only sees what you consent to (progress / plans / health data), changeable and revocable at any time from the app. Every consent and revocation is logged.
Concretely, your coach and their co-coaches see your name and, depending on your sharing, your weekly aggregates (sessions, volume, distance, elevation gain, perceived RPE, attendance) and your health data (constraints, resting heart rate, VO₂max, comfort pace) — never your GPS tracks. The club administrator sees the list of their members (name, group, sharing level) with no training data.
Your coach prepares a club plan: a group template supplemented with individual adaptations that you can accept or decline (a refusal = you follow the group template). Nothing is shown to you before the coach's approval, and every decision is tracked. The club plan then replaces your personal plan, archived on your device and restorable when you leave the club — and it is free for members, whatever your subscription.
Coaches and administrators accept a commitment charter in the app (use limited to training, no export, incident reporting), kept with a timestamp. Go-NordiK handles the technical management of all of this data (EU hosting, security, consent log, exercising your rights) and remains your single point of contact: contact@go-nordik.com.
Reminder SMS: logistics only, 1-click opt-out.