Privacy Policy

1. Who we are and scope

Ignition Physique Ltd, company number 17383662, Unit 2, Martins Court, Stephenson Industrial Estate, Coalville, United Kingdom, LE67 3HD, is the controller where we decide why and how your personal data is used. Contact support@ignitionphysique.com. This policy covers our website, account, dashboard, public FAQ, Tyler AI, Quick workout and optional voice service. UK GDPR and the Data Protection Act 2018 apply.

The current service operates on the Development platform, with live UK subscription billing. Privacy rights apply to real personal information even in test mode. WhatsApp coaching, routine human coach reviews, advertising trackers and progress-photo/video libraries are not current features. Separate providers’ own notices apply when you interact with their services.

2. Information we collect and where it comes from

You provide identity and account details, including name, email, authentication information and age/date of birth where requested; profile, goals, training experience, available equipment, dietary preferences and restrictions; health information you choose to supply; measurements, check-ins, workout completion, corrections and coaching messages. We also receive support enquiries, complaints and privacy requests.

Health information can include injuries, medical conditions, medication, pregnancy, symptoms, allergies, limitations and health inferences from your answers. Provide only relevant information and do not submit someone else’s sensitive details.

For Quick workout you may choose to send an equipment photo. Avoid people, identifying documents and unnecessary surroundings. This is equipment identification, not a progress-photo or video archive. Voice playback uses generated speech from a coaching response; it does not record your microphone or clone your voice.

Subscription and transaction records include the chosen offer, amount, payment/provider references, payment status, access period, renewal or cancellation status and webhook records. Stripe handles checkout and card details; our application does not receive or store full card numbers or CVCs. Klarna receives information when you select its payment option. Current transactions are sandbox simulations.

Servers and infrastructure providers process technical information such as IP addresses, browser/request information, timestamps, errors and security events. The public FAQ keeps a pseudonymous visitor reference, redacted questions, reviewed answers and interaction events, separate from private member coaching. Redaction cannot guarantee removal of every personal detail, so do not include health or contact information in public FAQ questions. We receive payment status from providers and generate coaching, safety and usage records as you use the service.

3. Purposes and lawful bases

Account creation, authentication, subscription administration, saved profiles, coaching and support related to your membership: performance of our contract or steps you request before entering it (Article 6(1)(b)). A free or test service may still involve an agreement to provide features.

Security, abuse prevention, service reliability, proportionate usage analysis and responding to general enquiries: legitimate interests in running and protecting the service (Article 6(1)(f)), balanced against your rights. Legal, tax, accounting and required regulatory disclosures: legal obligation (Article 6(1)(c)). Complaints and legal claims: legitimate interests and/or legal obligation as applicable.

Health data requires an additional Article 9 condition. For personalised health-related coaching we rely on your separate explicit consent (Article 9(2)(a)), alongside the relevant contract basis. If strictly necessary for legal claims, Article 9(2)(f) may apply. Accepting Terms is not health-data consent.

Use the health-data consent controls offered in onboarding, or contact support@ignitionphysique.com to withdraw consent. Withdrawal does not make earlier lawful processing unlawful. We will explain which personalised features cannot continue without that information. If we cannot continue a paid subscription, the Terms provide for ending it and refunding unused prepaid time without a withdrawal penalty.

We do not treat signup, a purchase or an FAQ question as permission for marketing. Any marketing must have the consent or other permission required by law and an easy opt-out. You can object to direct marketing at any time. Identifiable testimonials, publicity photos and unrelated AI training are not authorised by your membership. New purposes involving health data need their own appropriate basis, notice and consent where required.

Product improvement and optional activity measurement

Authorised administrators use restricted reports of signup, membership, live invoice receipts and recorded product actions to operate and improve the service. Identifiable member information is separately restricted and access is audited. Product AI analysis receives aggregate metrics, not names, email addresses, health answers or coaching text. AI recommendations are hypotheses for review, not automated decisions about your access, prices or health.

You may opt in to first-party page-category and estimated active-time measurement using the optional preference on your dashboard. It is off by default. We do not record screens, keystrokes, typed answers, raw page URLs or raw IP addresses for this feature. Your choice is stored against your signed-in account, not in a new tracking cookie. Turn the same preference off to stop measurement and remove your stored activity. Declining does not affect your membership.

Activity older than 90 days is excluded from reports and deleted when the measurement service is next used. Account erasure also removes linked measurement preferences and activity. Stored aggregate analysis may remain without member identifiers. Contact support to exercise your data rights.

4. AI, profiling and your choices

OpenAI processes relevant consented profile/intake information, saved progress, selected conversation context and prompts to generate Method-based coaching. Equipment photos are sent for equipment suggestions only after your explicit action and feature notice. Confirm or correct the detected equipment before using the workout. The public FAQ sends a minimised question to select from reviewed product answers, without access to your private coaching history.

Tyler AI is not Tyler personally, a clinician or a continuously monitored human support channel. Coach reviews are AI-led. Automated processing can propose guidance, flag concerns or restrict a feature; it cannot reliably diagnose illness or assess every risk. Do not follow unsafe guidance. In an emergency call 999 or 112.

For optional Tyler Voice, ElevenLabs processes the response text selected for speech. The feature has its own notice/acceptance, on/off control and audio-clearing action. Turning voice off stops future playback/generation requests from that control; it does not by itself erase your text coaching records.

Our application requests AI responses without provider response storage where supported. That does not mean providers retain no operational or security records. We do not authorise unrelated training on your private coaching data.

Coaching uses automated personalisation rather than human clinical judgement. We do not intend to make solely automated decisions with legal or similarly significant effects. If a restriction or automated result materially affects you, contact support to challenge it, correct information and request consideration by a person. This contact right does not imply an included human coaching service.

5. Who receives information

Current service providers include Supabase (authentication/database/storage), Railway (API and worker hosting), Vercel (website delivery), OpenAI (AI processing), ElevenLabs (optional generated voice), Resend (transactional email), and Stripe (payment processing). Klarna is involved only where you choose it in checkout. Our business email/domain services use IONOS. Each receives information relevant to its role, not blanket access to every category.

Payment and finance providers may act as independent controllers for fraud prevention, regulatory obligations and their direct relationship with you. Read Stripe’s Privacy Policy and the Klarna privacy information shown for your country at checkout. Provider terms do not remove our own responsibilities.

Authorised technical personnel, advisers, insurers, courts, regulators and law-enforcement bodies may receive information where necessary and lawful. Processor access must be limited to documented purposes with appropriate contractual protection. Any business transfer must use proportionate confidentiality and data-protection safeguards. We do not sell personal data. Contact us for details of recipients relevant to your request.

Optional feedback about your experience

You can choose to tell us whether Ignition is useful to you. Sending an answer is optional and does not enable page-time measurement or change your membership. We store your selected answer against your account and the current UTC week, replacing it if you change your answer that week. No free-text coaching or health details are requested. We use your consent to collect this optional feedback to improve the service. You can withdraw it using “Remove all my feedback” on your dashboard, which deletes your stored responses.

Restricted Intelligence reporting uses each current member’s latest answer in the last 30 days. The entire response breakdown is withheld if any non-empty answer group has fewer than five members. Only privacy-filtered aggregate counts may be sent to the analysis model, never individual answers or identities. Responses have a 90-day retention window with cleanup on use of the feedback service; this is not exact-time scheduled deletion. Account erasure also covers these records. Voluntary responses are not a representative satisfaction survey or evidence of health results.

6. How long information is kept

We retain information only as necessary for the feature, account, support, security, legal obligation or claim involved. Account closure, subscription expiry and an onboarding reset are different actions. A reset archives prior subscriber records privately; it is not erasure and does not cancel payments. You can request erasure separately, including archived records.

Current feature-specific periods: unfinished onboarding drafts expire after 90 days; public FAQ records use a 90-day retention window with cleanup on service activity; generated voice audio is available for replay for up to seven days and associated voice records use a 30-day cleanup window. Activity-triggered cleanup is not a promise of deletion at an exact second. The voice clearing action removes the member’s stored generated audio without waiting for normal expiry.

Equipment photos are processed for the request and are not retained as an application photo library. The confirmed equipment choices and resulting workout/progress can remain as account records. Provider operational retention can differ from application retention.

Other profile, health, coaching, progress, reset-archive and account records currently remain while needed to provide your account and handle requests. There is no blanket automatic deletion at subscription expiry. We review necessity when an account closes or you request erasure, considering the relationship, sensitivity, dispute/claim needs and applicable legal duties. We will explain any specific legal reason for retaining information instead of deleting it.

Contracts, transactions and accounting evidence may need retention for up to six years or a longer legally required period. This does not justify keeping unrelated health or chat details for that period. Support and technical logs are retained according to their purpose, incident status and provider arrangements. Backup and provider deletion cycles may differ; access should be restricted once active use ends. Contact us for the retention position for your records.

7. International processing and security

Providers may process information outside the UK, including in Europe and the United States. A European application region does not mean every provider operation, support activity or log stays in Europe. Where a restricted transfer occurs, we must use an applicable UK adequacy decision or appropriate safeguards such as the UK IDTA or UK Addendum to EU Standard Contractual Clauses, with the required risk assessment. Contact us for the countries and safeguards relevant to a particular provider and a copy where available.

We use access controls, protected authentication, encrypted transport and restricted private records to reduce risk. No online service is completely secure. Report suspected account compromise promptly without sending passwords or card details. We will investigate suspected breaches and provide legally required notifications.

8. Your rights and complaints

Depending on the circumstances, you can request access and a copy, correction, erasure, restriction, portability of information you provided, or object to processing based on legitimate interests. You can withdraw consent and object to direct marketing at any time. Rights relating to solely automated significant decisions may also apply. Legal conditions and exemptions can limit some requests.

Email support@ignitionphysique.com and describe what you want us to do. We may ask for proportionate identity verification. Requests are normally free and answered within one month; where law permits an extension for complexity or multiple requests, we will explain within that first month. Do not send passwords or unnecessary health evidence.

You can complain to the Information Commissioner’s Office, telephone 0303 123 1113, without first completing our complaints process.

9. Children, cookies and updates

Our coaching service is for people aged 18 or over. If you believe a child’s information has been submitted, contact us so we can take appropriate action.

Read our Cookie Policy for actual browser storage and controls. We do not infer permission for advertising or optional tracking from continued browsing.

This policy replaces the draft placeholders for the current service. We show its version and date above and will bring material changes to your attention through the service or email where appropriate. A changed notice is not retrospective consent for a new purpose.