Privacy Policy – Clinch App

1. Data Controller Information

Data Controller:

Eigil T. (Developer of the Clinch App)

📧 Contact Email: support@clinchapp.dk

We currently do not have a designated Data Protection Officer (DPO).

2. Types of Personal Data Collected

We collect the following personal data when you use the Clinch App:

Directly from users:

• Full name
• Email address
• Age, weight, and height
• Martial arts practiced
• Training attendance
• Gym joined
• Profile photo (optional)

Automatically collected:

• Firebase UID
• Timestamps of actions
• Live GPS location (only with your explicit permission, for calculating distance between users and gyms)
• Location (only when the user selects a city/country via Google Places API — not GPS)
• No GPS/Location data is collected, unless you explicitly grant permission

All data that is collected is used explicitly for processing and analytics purposes to make the app better, and enhance Gym experiences.

We do not use cookies or third-party tracking scripts in the mobile app.

3. Purpose of Data Processing

We collect and process your data to:

• Create your user profile
• Match you with relevant gyms
• Track gym attendance
• Generate weekly and monthly PDF reports for Gym owners
• Generate analytics for Gym owners
• Help gym owners monitor participation trends and retention
• Notify gym owners of new users and sessions
• Improve app features via internal analytics

4. Legal Basis for Processing

Under GDPR, our processing is based on:

You may withdraw consent for optional data at any time by contacting us.

5. Data Sharing and Third Parties

Your data is stored and processed using:

• Google Firebase (Firestore, Storage, Authentication)
• Google Cloud Functions (for backend logic and PDF generation)
• Google Places API (for selecting city and country)
• Zoho Mail via Nodemailer (for report delivery to gym owners)

Data Location: Your data may be stored or processed outside the EU (e.g., Google Cloud servers in the US).

Safeguards: All transfers follow the Standard Contractual Clauses (SCCs).

6. Data Retention

We retain your data for as long as your account is active.

If your account is inactive or deleted:

• After 12 months, your data is either deleted or anonymized in analytics and reports.

You can request earlier deletion at any time (see Section 7).

7. Your Rights Under GDPR

You have the right to:

• Access your data
• Correct incorrect data
• Delete your data ("Right to be Forgotten")
• Restrict or object to processing
• Data portability
• Withdraw consent at any time

You have the right to object to any processing based on our legitimate interests. If you object, we will stop the processing unless we can demonstrate compelling legitimate grounds.

To exercise your rights, email us at support@clinchapp.dk

8. Cookies and Tracking

The Clinch mobile app does not use cookies or tracking scripts.

If this changes, we will notify you and update this section.

9. Data Protection Measures

We take data security seriously:

• Data stored in Firebase is encrypted at rest and in transit
• PDF reports are generated on-demand and uploaded to secure Firebase Storage
• Access is controlled by Firebase Authentication and Firestore rules
• Only verified gym owners receive report emails

10. How to File a Complaint

If you believe your rights have been violated, you can contact:

11. Updates to This Policy

We may update this privacy policy to reflect changes in law or our services.

You'll be notified in-app or via email if any significant changes are made.

Questions?

Email us any time at support@clinchapp.dk, we will do our best to answer quickly.