Legal

Privacy Policy

Last updated May 20, 2026

Foxyfitness GmbH collects and processes information when users access websites, mobile applications, and related services. This policy does not apply to information processed for enterprise customers. Policy updates are noted by revising the date at the top. Users are encouraged to review the policy regularly for changes.

Collection of Information

Information Users Provide

Data collected includes: name, email, password, fitness goals, street address, payment methods, feedback, survey responses, and message contents.

Usage and Service Data

Usage Information: Sessions accessed, videos viewed, music listened to, screens accessed, and similar activity patterns.

Transactional Information: Product descriptions, pricing, subscription expiration dates, transaction timestamps.

Log Information: Web browser type, app version, access times/dates, pages viewed, IP address, referral pages.

Device Information: Hardware model, operating system version, device identifiers, mobile network details including connection type, carrier, and region.

Recorded Communications: Phone and video calls recorded with user consent, particularly for coaching programs.

Generated Information: IP-derived approximate location, gender estimation from first names, likelihood assessments for continued service use.

Cookies and Tracking: Cookies and web beacons collect data; see Cookie Policy at foxyfitness.app/cookies.

Apple HealthKit Integration: With explicit consent, the app accesses date of birth, height, weight, and sex to populate profiles and calculate workout calories. Users can approve sharing calories burned and workout data with Apple Health. Data read from HealthKit is used solely within the app locally and not collected externally or shared with third parties.

Apple ARKit Integration: Uses ARKit and TrueDepth camera to detect user presence and distance during exercises for repetition tracking in poor lighting and fair leaderboard competition. No facial features or gestures are processed. Data from TrueDepth is not stored locally, sent to servers, or shared with third parties.

Information from Other Sources

When users create or log into accounts via social media services, the company accesses name and account information per that service's authorization procedures.

Use of Information

Information is used to:

  • Provide, maintain, and improve Services including debugging and development
  • Process transactions and fulfill orders
  • Send transactional messages, receipts, notifications, and administrative communications
  • Communicate about products, services, events, request feedback, and share newsletters
  • Monitor trends, usage, and activities
  • Detect and prevent fraudulent transactions and illegal activities; protect company rights and property; enforce agreements
  • Comply with legal requirements including tax filings
  • Personalize online experiences and advertisements based on preferences and browsing behavior
  • Facilitate contests, sweepstakes, and promotions

Sharing of Information

Information is shared with:

  • Service providers including email providers, payment processors, and fraud prevention vendors: Google Ireland Limited, Revenuecat Inc (San Francisco, US), and Amazon Web Services EMEA SARL (Luxembourg)
  • Legal authorities when required by law, court orders, subpoenas, or public authority requests for national security/law enforcement
  • Other parties when user actions violate agreements or law, or to protect company/others' rights, property, and safety
  • Parties involved in mergers, asset sales, financing, or business acquisitions
  • Current and future parents, affiliates, subsidiaries, and commonly-controlled companies
  • Third parties with user consent or direction, such as social media platforms

Aggregated information not subject to data protection obligations is shared with third parties including research organizations.

Apple Data Sharing: By using the app and making in-app purchases, users consent to sharing usage and consumption data with Apple to resolve refund requests. This includes details about how purchased content was accessed and used to help Apple evaluate refund requests, complying with Apple's policies.

Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Analytics uses cookies and similar tracking technologies to collect and report information about how visitors use this site.

Data Collected

Google Analytics collects information including: your IP address (anonymised), browser type and version, operating system, referral source, pages visited, time spent on pages, and approximate geographic location. This data is used solely to analyse website usage and improve our service — it is not used to personally identify you.

Legal Basis

We process this data only on the basis of your freely given, specific, and informed consent in accordance with Art. 6(1)(a) GDPR. You may withdraw your consent at any time (see below). Google Analytics is not activated until you click "Accept" on the cookie banner.

Data Transfer to the United States

Google processes data on servers located in the United States. This transfer takes place on the basis of Standard Contractual Clauses (SCCs) adopted by the European Commission pursuant to Art. 46(2)(c) GDPR, which provide appropriate safeguards for the transfer of personal data to third countries. For more information, see Google's Privacy Policy.

Data Retention

Data collected via Google Analytics is retained for 2 months, after which it is automatically deleted from Google's servers.

Withdrawing Consent

You may withdraw your consent at any time by clearing your browser's localStorage (key: wk_cookie_consent) or by installing the Google Analytics Opt-out Browser Add-on. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

Advertising and Analytics

Third-party entities provide analytics and serve advertisements using cookies, web beacons, device identifiers, and technologies to collect information about service use, including IP address, device identifiers, browser type, mobile network information, pages viewed, time spent, links clicked, and conversion data.

This information helps analyze data, determine content popularity, deliver targeted advertising, and understand online activity. For opting out of interest-based ads: visit www.aboutads.info/choices (EU: www.youronlinechoices.eu). Mobile devices include features to opt out of behavioral advertising collection.

Data Transfer

Foxyfitness is based in Austria and processes information there, which may not provide equivalent data protection as users' home jurisdictions.

Your Choices

Account Information

Users may update account information (password, name, email) by logging in or contacting the Help Center at help@foxyfitness.app. To disable accounts, contact help@foxyfitness.app. The company retains certain information when required by law and maintains cached/archived copies for specific periods.

Promotional Communications

Users may opt out of promotional emails by following email instructions or logging into accounts. Non-promotional emails about accounts and business relations may still be sent.

Mobile Push Notifications/Alerts

With consent, promotional and other push notifications are sent. Users can deactivate anytime through mobile device settings.

Information for Switzerland, UK, and EEA Individuals

Legal Basis for Processing

Personal data processing occurs only when:

  • Necessary to perform contract responsibilities (payments, requested products/services)
  • Legitimate interests exist (communicate about service changes, secure/improve services, prevent fraud, analyze usage)
  • Required by legal obligations
  • User consent is obtained

Data Retention

Personal data is retained only as long as necessary for processing purposes, unless law requires longer storage.

Data Subject Requests

Subject to legal limits and conditions, users have rights to:

  • Access personal data and request corrections, erasures, or portable formats
  • Object to processing (direct marketing) or request restrictions (like retaining but not processing pending claim resolution)
  • Withdraw consent at any time when consent was requested
  • File complaints with supervisory authorities

Supervisory Authority Contacts:

Information for California Residents

This section addresses California Consumer Privacy Act (CCPA) requirements.

Categories of Personal Information Collected (Last 12 Months)

  • Identifiers: Name, phone number, email, social media handles, unique identifiers (IP address) tied to browsers/devices
  • Protected Classification Characteristics: Gender, age
  • Commercial Information: Payment information, Foxyfitness purchases
  • Approximate Geolocation Data
  • Internet/Electronic Network Activity: Browsing behavior, usage and interaction information
  • Audio/Visual/Similar Information: Profile photos, customer support call details and recordings
  • Other Personal Information: Opinions, preferences, goals, product reviews, surveys, communications
  • Inferences: Product interests, purchasing insights

Business/Commercial Purposes for Information Use

  • Perform/provide services: maintain accounts, customer service, process orders/transactions, verify information
  • Improve/maintain Services: enhance Services, develop new products
  • Debug: identify and repair errors and functionality issues
  • Communication: marketing and transactional/relationship messages
  • Analyze usage: monitor trends and service use activities
  • Personalize experience: tailor content and ads on Services and other platforms based on preferences, interests, browsing behavior
  • Legal reasons: detect/protect against security incidents, malicious/deceptive/fraudulent/illegal activity

Parties Receiving Information

  • Service providers: customer support, subscriptions, order fulfillment, advertising measurement, communications, surveys, analytics, fraud prevention, cloud storage, bug management, logging, payment processing
  • Third parties with user consent: social media services, academic researchers
  • Advertising/marketing partners: determine content popularity, deliver targeted ads, understand online activity
  • Government entities/third parties for legal reasons: comply with law or other legal circumstances

CCPA Rights

The company does not "sell" personal information and will not do so without providing opt-out rights. The company allows advertising partners to collect certain device identifiers and electronic network activity via Services for targeted interest-based ads on other platforms. California consumers may request rights by emailing privacy@foxyfitness.app. The company verifies requests by asking for matching information. Authorized agents may submit requests through the same channels but must prove authorization; the company may still require direct identity verification.

Accessibility

Foxyfitness strives to make this policy accessible per World Wide Web Consortium Web Content Accessibility Guidelines, version 2.1.

Contact Information

Email: privacy@foxyfitness.app

Foxyfitness GmbH

Böhmerwaldstrasse 18

4020 Linz

Austria

Help: help@foxyfitness.app

Austrian Data Protection Authority (Lead Supervisory for EEA)

Österreichische Datenschutzbehörde

Hohenstaufengasse 3, 1010 Wien, Austria

Telephone: +43 1 531 15 / 202525

Fax: +43 1 531 15 / 202690

Email: dsb@dsb.gv.at

EEA residents may also file complaints with local data protection regulators.

© 2026 Foxyfitness GmbH. All rights reserved.