Privacy policy

Data controller

The data controller responsible for the processing of your personal data is:

BRP Systems AB
Organization no: 556658-2770
Address: Tanneforsgatan 8, 582 24 Linköping, Sweden

Email: info@brpsystems.com

Definitions in this policy:

BRP Systems AB

This refers to the services based on a system from BRP Systems AB. The system allows you to log in to multiple health applications with the same credentials and bring your data between these services. Login with such an account is available in multiple services and apps under different brands and trademarks (gyms, coaches, personal trainers, health providers, etc.) that are based on the same system from BRP, and these are also covered by this policy. The service from which you were referred to this policy is covered by the above definition and by this policy, and uses login with an account in the Service or an equivalent solution from BRP.

The service

The service from which you were referred to this policy is {APP_NAME} (hereinafter referred to as the Service). The Service is based on a platform from BRP Systems AB and uses a common standard for login and data storage.

About this privacy policy

Your privacy, and your understanding of how your data is made available and used, is important to BRP Systems AB (hereinafter referred to as BRP), which operates services such as {APP_NAME}, Twiik, Twiik Coach and other services associated with BRP's system. This privacy policy describes how we process your personal data when you use the Service or other systems associated with this platform.

The Service is an open and social service, and much of the information you enter into the Service is therefore often visible to others. For example, your compiled data, name and image are visible in leaderboards and challenges, your contact information and logged data are available to the coaches and programs you choose to connect to, and your activity feed is visible to those who follow you or visit your profile. Much of this can be controlled in your profile settings.

Other BRP websites and services that do not contain a link to this privacy policy, but contain a link to another privacy policy, are covered by that privacy policy.

"Personal data" is any information relating to an identified or identifiable natural person.

Personal data processed when you create an account in the Service:

When you create an account in the Service, you are asked to enter your email address and choose a username. Your username does not need to refer to your real name or identity if you do not wish it to. Other information you are asked to enter in your profile in the Service is usually optional, unless it is required for a particular service to be technically delivered to you (read more about this below).

Purpose and legal basis:

1. BRP has a legitimate interest in maintaining the security of your account, distinguishing between user accounts and giving the right user access to the right data. We therefore process your email address, since you use your email address and password to log in to your account. The legal basis for processing your email address for this purpose is BRP's legitimate interest.
2. BRP also processes your email address to send you important information about your BRP products, apps or accounts, such as important security information or significant changes to this privacy policy. The username you provide is associated with your account profile and is displayed to your contacts when you participate in challenges, leaderboards, groups and segments, and when you leave comments, etc. The legal basis for processing your email address and username for these purposes is the Service's legitimate interest in providing important security information or other information about the Service, apps or accounts, or significant changes to this privacy policy, and in allowing you to interact with other users of the Service or of other service providers based on the BRP platform.
3. If you consent to receiving marketing from the Service, the Service will also process your email address to send you marketing about the Service or BRP's related apps and services. The legal basis for processing your email address for this purpose is your consent. You can withdraw your consent at any time by changing the settings of your account in the Service, or by using the unsubscribe link at the bottom of our marketing emails and other mailings. The marketing emails you receive from the Service are based on the settings of your account in the Service, the location indicated by your Internet Protocol (IP) address, the types of services, programs or activities you have added to your account in the Service, and the subscriptions associated with your account in the Service. The legal basis for processing this data for this purpose is the Service's legitimate interest in reducing the number of marketing emails sent to each customer, by selecting which customers receive a particular marketing email instead of sending all marketing emails to all customers who have consented to receiving marketing emails.
4. If you give your consent, the Service processes your email address to send you notifications (for example when you participate in a challenge, receive messages from friends or your coach, or when someone comments on or interacts with your logged activities). The legal basis for processing your email address for this purpose is your consent. You can withdraw your consent at any time by choosing not to receive such notifications.
5. The Service also processes your email address to associate it with your account in the Service when you communicate with our customer support staff. The legal basis for this processing is our legitimate interest in providing high-quality customer support.
6. Coaches you have given access to your account and profile can also access your contact and profile information. The same applies to gyms, companies and providers you actively connect to in the Service. The legal basis for this is the legitimate interest of the Service and of the individual coach in providing direct support to, and contact with, connected customers.

Additional personal data processed if you choose to enter it in your account in the Service:

You can add additional information to your profile, such as location, gender, date of birth, profile picture, height, weight and a description of yourself.

Purpose and legal basis:

This information is used to calculate the calories you burn during an activity and, if you wish, to show information about yourself to your contacts. The legal basis for processing this information for these purposes is your consent. You can withdraw your consent by removing this information from your account profile.

Personal data processed when you log in to your account with a social media login (optional):

You can choose to log in to your account in the Service with your social media login credentials (such as your Facebook credentials). If you choose to do this, you will be asked at the first login whether you agree that the social media provider shares certain information with the Service, such as name, email address, profile picture, posts, comments and other information associated with your social media account. All of this information is made available by the social media provider due to the way social media login works. However, the only information the Service stores and processes is your email address, time zone, gender and name. Your profile picture is linked directly from the social media provider and is not stored by the Service.

If you do not want the social media provider to continue sharing your information with the Service, you can log in to your account in the Service with your email address and password instead of your social media login credentials. You can also remove the connection to the social media provider in the settings of your account in the Service.

Purpose and legal basis:

The Service associates the email address provided by the social media provider with your account in the Service, so that you can use your email address to log in to your account in the Service if you no longer want to log in with your social media account. The legal basis for processing this information for this purpose is the Service's legitimate interest in providing you with an alternative login method and maintaining the security of your account.

Personal data processed when you choose to transfer data or activities with associated data to the Service:

You can choose to add activities (such as running, walking, strength training or cycling) to your account in the Service by entering them manually on BRP's websites or in BRP's apps. You can also import data from third-party services such as exercise apps and devices (such as Runkeeper, Garmin, Fitbit and Polar), and activity data (e.g. steps, distance, pace, activity time, calories burned, heart rate and GPS data) from your connected devices (such as activity trackers, GPS watches and motion data from mobile phones) to your account in the Service. This may be done through a direct connection to the third-party service, or by manually uploading data or files created by third-party services or devices.

If you choose to transfer data or activities to the Service, they are saved to your account and set to "show all" by default. This means that anyone who visits your profile can access the information you save in your account. You control whether others can view your activity data, and what information you want to share, through the privacy settings of your account in the Service.

Purpose and legal basis:

(a) If you choose to transfer activity data to the Service, the Service processes it to enable you to analyze your activity data, view your routes or movement patterns on maps, view heart rate related data such as training load, and keep track of your training goals and calories burned. If you live in the European Economic Area or in Switzerland, the legal basis for this processing is your explicit consent, which you can withdraw at any time in your account in the Service.

(b) If you choose to transfer activity data (such as steps, distance, pace, activity time, calories burned, heart rate, sleep, etc.) to your account in the Service, you will receive recommendations, motivational messages, information and links to articles and programs that may be of interest to you based on your activity data, as well as comparisons of your activity data with aggregated activity data from other users of the Service. If you live in the European Economic Area or in Switzerland, the legal basis for processing this data for this purpose is your explicit consent, which you can withdraw at any time in your account in the Service.

Personal data processed when looking for challenges or coaches:

When you look for challenges and coaches from your account in the Service, we may ask you for additional information, such as gender, height, weight, date of birth, activity level, health conditions, interests, goals, and the times when you usually go to sleep and wake up or prefer to perform planned tasks in the Service.

Purpose and legal basis:

This information is processed to give you better advice and suggestions on action plans, programs and coaches that can help you achieve your goals. The legal basis for processing this information for this purpose is your consent. You can withdraw your consent at any time by removing this information from your profile.

Personal data processed when you use the Service or other services from BRP:

When you log in to or use your account, we log data such as the IP address used to log in, the date and time of use of the account, crash and diagnostic logs, the type of platform used (mobile, web, etc.) and the type of browser used.

Purpose and legal basis:

We process this information to identify and correct errors and problems. The legal basis for processing this information for this purpose is the Service's legitimate interest in addressing errors and problems and providing high-quality product support.

Personal data processed when you communicate with the Service:

When you interact with our customer support staff via email, phone, online or in person, we collect personal data such as name, postal address, phone number, email address and other contact information, as well as information about your use of the Service and of connected coaches, programs and challenges. We may also create event logs that help us diagnose performance issues with the product or app and collect information about support or service issues. To improve our customer service, we may also record and review conversations with customer support staff, in accordance with applicable laws, and analyze the feedback we receive through voluntary customer surveys. With your consent, our customer support staff may log in to your account in the Service, if applicable, to help you troubleshoot and resolve your issue. Passwords are always encrypted and cannot be read by support staff or technicians.

Purpose and legal basis:

We use this information to provide customer and product support and to monitor the quality and types of customer and product support we provide. The legal basis for processing this information for these purposes is the Service's legitimate interest in providing high-quality product support. The legal basis for logging in to your account in the Service, if applicable, to help you troubleshoot and resolve your issue is your consent, which you can withdraw at any time.

Categories of recipients of personal data

Other users of the Service:

Your activities and activity data associated with your account in the Service are set to "show all" by default. You can choose not to allow others to view your activities and activity data by changing the privacy settings of your account in the Service.

You can join groups and connect with other users of the Service. You can also choose to participate in challenges and leaderboards together with other users of the Service. When you interact with others in this way, your data related to the challenge or leaderboard (e.g. your total number of steps during a challenge or for a leaderboard) will be visible to other participants, even if the privacy settings of your account in the Service are set to "private".

Coaches, programs, online personal trainers and their suppliers:

Through the BRP platform and in the Service, several third-party coaches can offer you services through the Service's mobile apps and websites. These coaches are independent operators who run their own businesses and use the Service only as a marketplace and tool. If you connect to a coach, program or other coaching service, the provider of the service (the coach) will have access to your profile and to the data you have entered and add to your account for as long as you are connected to the coach. Your contact details, your purchase history for that particular service and information about you as a customer, such as email, name, city, username, height, weight, goals and test values, will be available to the coach. This also applies to data you entered into the Service before you connected to the service or coach. Some of this data remains available to the coach after you end your connection with the coach.

The legal basis for this is that connected coaches need to be able to carry out their assignment satisfactorily, provide support and help, keep records for sales, refunds and accounting, and offer suggestions for other services even after the user has ended the service.

Challenges and Teamboost company challenges:

Services and challenges that use the BRP platform to collect data about your exercise habits will compile your data and display it in the challenges and competitions you have chosen to join. In these services, information such as your total training for different periods, points, goals achieved based on the challenge goals, and other aggregated exercise data and trends is displayed. Your name, username and picture, to the extent you have entered them, are also shown in participant lists and leaderboards. This information is often displayed on public web pages, where only the page URL is required to access the data.

The legal basis for processing and displaying this information is the Service's legitimate interest in providing the challenge service and presenting the participants' results in a simple and accessible way, together with the consent you give by joining a challenge whose purpose is to create these summaries and lists. To withdraw this consent, you can leave the challenge.

Content or feature providers and other third parties:

We sometimes share or sell anonymized and aggregated activity data with or to companies that provide the Service and our customers with content or features, in order to improve the quality of the content or features they provide, and with or to other third parties for research or other purposes.

Third-party providers of apps, platforms or services that you ask the Service to share your data with:

If you allow a third party, such as your healthcare provider, or an app, such as MyFitnessPal, Runkeeper or Garmin, to access the activity data in your account in the Service, we will share that data with the third party. We will not do this without your explicit consent. When you ask us to share data with a third party, that third party is responsible for how it handles your personal data, and you should carefully review the third party's privacy policy. You can at any time stop sharing data with a third-party provider of apps, platforms or services from your account in the Service.

Other service providers:

The Service uses third-party cloud services such as Amazon and Mailchimp, including for email. These services track activity related to our emails, for example whether they were opened, whether recipients clicked links in the email and whether purchases were made after clicking those links. The Service uses this data to analyze the engagement our emails generate. The Service also uses third-party service providers to help us better understand how the Service's websites and apps are used, and for similar purposes.

Other disclosures:

The Service or BRP may disclose your personal data to other parties: (a) if we have your consent, given explicitly or by accepting another user agreement; (b) if the Service or BRP is required to provide such information in a police investigation, by a court order, legal process or equivalent legal obligation; (c) to enforce our Terms of Service, rules and policies; (d) if necessary to take legal action, or to defend ourselves against claims, in criminal or civil disputes.

We may also transfer your personal data to an affiliated company or a third party in the event of a reorganization, merger, sale, joint venture, assignment, transfer or other disposal of all or part of the Service's or BRP's business, assets or shares, including, without limitation, in connection with bankruptcy or similar proceedings. The organization to which we transfer personal data may not process your personal data in any way other than as stated in this privacy policy without notifying you and, where required by applicable law, obtaining your consent.

Transfers of personal data

The Service and systems from BRP are available in several countries worldwide. In order to offer our products, apps and services, we may need to transfer your personal data to other companies within, or closely linked to, the BRP brand in other countries. Personal data relating to persons residing in a country in the European Economic Area or in Switzerland is controlled by BRP Systems AB.

All BRP companies are required to comply with the privacy practices described in this privacy policy.

Cookies and similar technologies

Website:

To help us analyze how you and other visitors navigate the Service's websites and apps, compile aggregated usage statistics and response rates, diagnose issues with the Service's servers and administer the Service's websites, we and third-party analytics providers collect certain information when you visit our website. This information includes IP address, the device's geographic location, browser type, browser language, the date and time of the request, the time of your visits, page views and the page elements (such as links) that you click. We may use cookies, pixel tags, web beacons, clear GIFs and similar tools on our website or in our emails to help us collect and analyze such information. We use this information to provide better and more relevant content on our website, to identify and fix issues and to improve your experience on our website.

If you do not want information to be collected with these technologies, most browsers offer a simple way to automatically reject many of them, or to choose whether to reject or accept them.

If you are a resident of the European Union or another jurisdiction where we are required to obtain your consent to use cookies on our websites, you can manage your cookie settings on the websites, except for cookies that are required to enable core features of the website, which cannot be disabled.

Below are examples of third-party providers of analytics and similar services that we currently use:

Analytics services:

Google: Google Analytics is used to track website statistics, app statistics, and users' demographics, interests and behavior on websites and apps. We also use Google Search Console to better understand how visitors find our website and to improve our search engine optimization.

Crashlytics (Fabric): Crashlytics is used to help us better understand how the Service's apps are used, in order to improve the user experience and identify and fix the root causes of app crashes. The data is anonymous.

Firebase: Used to track website statistics, app statistics, and users' demographics, interests and behavior on websites and apps. The data is anonymous.

Facebook: If you use the Facebook connection, Facebook can follow your general navigation on the Service's websites and your use of the Service's apps. Exactly what is logged is described in Facebook's terms of service and policies.

Performance monitoring:

The Service uses Amazon's server systems. Amazon provides tools for analyzing and monitoring the performance of our systems. These tools log traffic, including IP addresses, which is necessary for detecting and diagnosing errors and abnormal response times.

Children

Our websites and apps are not directed at individuals under the age of 16. If we learn that we have collected personal data about a child under the age of 16, we will take steps to delete the information as soon as possible.

Updates to this privacy policy

We may update this privacy policy when we add new services and apps, expand our current offering, or when technology and laws change. You can see when the privacy policy was last revised by checking the "Last updated" date at the top of this page. All changes take effect when we publish the revised privacy policy.

We will notify you if the changes are significant and, where required by applicable law, obtain your consent. Such notice will be given by email or by announcing the changes on the Service's websites and in the apps that link to this privacy policy.

Retention of personal data

We keep your personal data for as long as your account in the Service is considered active. More information about your right to deletion can be found under "Your rights".

Data controller and Data Protection Officer

The personal data collected by the Service is controlled by BRP Systems AB, Tanneforsgatan 8, 582 24 Linköping, Sweden.

Your rights

If you are a resident of the European Union, you have the right under the General Data Protection Regulation (GDPR) to request access to, rectification or erasure of your personal data, data portability and restriction of processing of your personal data. You also have the right to object to the processing of your personal data and to lodge a complaint with a supervisory authority. If you reside outside the European Union, you may have similar rights under local laws.

If you wish to request access to, rectification, portability or deletion of your personal data, or to delete your account in the Service, please contact BRP at appsupport@twiik.me.

If you are a resident of the European Union and wish to exercise your right to restriction of processing or your right to object to processing, please contact

BRP Systems AB
Attn: Data Protection Officer
Tanneforsgatan 8
582 24 Linköping
Sweden

or by email info@brpsystems.com