Privacy Policy

1. Data Controller

FIT MASS COACHING – SAS registered in Lyon under number 950 762 765. Location: 45 quai Docteur Gailleton, 69002 Lyon, France. Correspondence: support@epilog.fit.

2. Personal Data Collected

The launch waitlist collects first name, email address, selected mobile platform, segment, locale, landing/referrer, campaign parameters, consent version and timestamp. The application may collect account, training and service data described in the relevant screens. For Epilog emails, the account’s first name, language, sign-up date, number of workouts and date of the last one, current program, subscription type and whether you accept these emails are used.

When you contact support through the website form or by email, we process your email address, your name if you provide it, the content of your request and the exchanges needed to follow it up. Your name is optional in the form. Your email address and message are required so that we can handle your request and reply to you.

To protect the form against abusive submissions, we also process technical data: an IP address associated with the request, a request counter and its reset time.

We record your choice concerning commercial emails, when you made it and through which channel. If transmission of that choice to our email provider remains pending, we retain the technical information needed to retry it and check the outcome.

3. Purposes

Waitlist data is used to record and confirm registration, announce launch, send the appropriate platform information, measure campaign attribution, prevent abuse, and provide support. Account data supports application access and service delivery. It is also used to send account holders Epilog emails: tips to get started, a weekly recap, what’s new and offers, adapted to how they use the app. A small share of accounts, drawn at random, does not receive some of these messages so that we can measure whether they help.

The content of your support exchanges and your contact details are used to handle your request and reply to you. Technical data used to protect the form helps prevent abusive submissions and maintain its availability. Email preference information is used to record and apply your choice.

4. Legal Basis

Waitlist and launch marketing messages rely on explicit consent, which can be withdrawn at any time. Service and account processing relies on contract performance or compliance with applicable legal obligations, depending on the purpose. Commercial emails to individuals require prior consent unless a legal exception applies. The existing-customer exception concerns contact details collected in connection with a sale or provision of services, for similar products or services supplied by the same company; it may rely on our legitimate interest. Creating an account alone does not establish this exception, and a preselected box is not consent. For Epilog emails, you can refuse them when you create your account by unchecking the box shown there, through the one-click unsubscribe link in every email, or at any time in the app under Profile & settings, Privacy. Promotional push notifications are only sent with permission given in the app.

The legal basis for handling your request depends on its purpose:

Our legitimate interest in answering questions addressed to Epilog, for general enquiries. Steps necessary to enter into a contract, when you ask us to take those steps. Performance of the contract, when handling the request is necessary to provide the service you have subscribed to. Compliance with our legal obligations, including responding to requests to exercise your data protection rights.

Protecting the form against abuse is based on our legitimate interest in maintaining its security and availability.

Recording and applying your objection to direct marketing is based on our legal obligation to respect that right.

5. Data Retention

Waitlist data is retained until the launch communication cycle ends or consent is withdrawn, then deleted or minimized subject to legal proof requirements. Account and billing data follow their own contractual and statutory retention periods. The Epilog email contact is kept while the account exists and deleted with it; after an unsubscribe, the address is kept only as a blocked contact to respect your objection to commercial emails.

Support messages and the contact details accompanying them are kept for as long as necessary to handle your request, then deleted, no later than three years after our last exchange.

Counters used to limit abusive form submissions are temporary and held in server memory. If no further request is made, they are removed during periodic cleanup, normally within thirty minutes. This period applies to the protection counters and does not describe hosting providers’ technical log retention.

Technical information used to retry transmission of your email preferences is deleted once transmission is confirmed or when the account is permanently deleted. It is not kept as a history of your choices.

6. Data Sharing

Data is never sold. For the waitlist, our form tool, hosted by Vercel and Upstash, processes the form and resilience records, while Brevo stores the contact and sends confirmation or launch emails. For account holders, Brevo also stores the email contact and the data listed in section 2, and sends Epilog emails. UserJot hosts our public feedback board: the username and email address linked to feedback you post there are kept by UserJot even after your Epilog account is deleted, and can be removed on request via the contact address below. Other technical providers receive only the data needed to operate Epilog.

Requests are intended for authorised members of Epilog support. The form is processed by our website hosted by Vercel and our server hosted by Amazon Web Services. Messages are sent to support@epilog.fit through Amazon SES. The support mailbox and its email exchanges are hosted in Google Workspace, our business email service.

Service providers and transfers outside the European Union

To operate Epilog, FIT MASS COACHING uses service providers that process data on its behalf and only on its instructions: MongoDB Atlas (database), Amazon Web Services (file storage), Vercel (website hosting), Stripe (payments), RevenueCat (subscription management), Brevo (emails), UserJot (feedback board) and Bunny (exercise video delivery). Some of these providers, or their own subprocessors, are located outside the European Union, in particular in the United States. These transfers are governed by the standard contractual clauses adopted by the European Commission or, for certified companies, by the EU–U.S. Data Privacy Framework.

7. Data Security

Technical and organizational safeguards protect against unauthorized access or disclosure.

8. User Rights

Subject to the conditions set out in the GDPR, you may request access to your data, rectification, erasure or restriction of processing. You can exercise these rights by writing to support@epilog.fit.

Data portability. Where data you provided is processed by automated means on the basis of your consent or a contract, you can receive it in a structured, commonly used and machine-readable format to transmit it to another organisation. You can also request direct transmission where technically feasible.

Withdrawal of consent. Where processing is based on your consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing before it was withdrawn. Controls for the relevant processing are described in this policy; you may also contact support.

Objection. Where processing is based on our legitimate interests, you may object at any time on grounds relating to your particular situation. We will stop that processing unless we demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing is needed to establish, exercise or defend legal claims.

You may object at any time, free of charge and without giving a reason, to the use of your data for direct marketing, including profiling related to that marketing. For Epilog emails, you can use the unsubscribe link in the message, the app’s privacy settings under Profile & settings, or contact support. This choice concerns direct marketing; messages strictly necessary for a service you requested or for a legal obligation have their own purposes.

Once your choice is recorded, it is transmitted to our email provider, Brevo. If transmission remains pending, the preferences page tells you and we retry it automatically. You do not have to submit a new objection. If this status persists or you continue to receive commercial messages, you can contact support.

Handling your request. We inform you of the action taken on your request without undue delay and no later than one month after receiving it. This period may be extended by two months because of the complexity or number of requests; we inform you of the extension and its reasons within the first month. If we refuse a request, we explain why and the remedies available. If we have reasonable doubts about your identity, we may request the additional information necessary to confirm it.

Instructions after death. Under the conditions provided by French law, you may give instructions concerning the retention, erasure and disclosure of your data after your death. You may contact support about this.

Complaint. You may lodge a complaint with the CNIL, the French data protection authority, or another competent supervisory authority, particularly in the country of your habitual residence, workplace or the place where you consider an infringement occurred.

9. Policy Changes

We update this policy to reflect changes to Epilog, its processing of personal data and applicable rules. The update date identifies the version presented. We inform you of significant changes through an appropriate channel; where a change of purpose requires prior information, we provide it before the new processing begins.

Continued use of the service does not, on its own, constitute consent to processing that requires your agreement. Where fresh consent is required, it must be obtained before that processing starts.

Health data in the app

The app stores the information you enter about your body, such as your weight and body measurements, as well as your workouts. If a coach works with you through Epilog, that coach and, if they have one, their team see your workouts and their notes, your weigh-ins and your body measurements, including those recorded before the coaching began, for as long as it lasts. On iPhone, and only if you allow it, Epilog connects to Apple Health: the app saves your workouts and their calories there, and reads your date of birth, which stays on your device, to estimate your maximum heart rate and your heart rate zones.

Syncing of your weigh-ins is off by default, and connecting Apple Health does not turn it on: you turn it on yourself in the app settings, which triggers the request for access to your weight in Apple Health, and you can turn it off at any time. Once it is on, your weigh-ins from Apple Health, going back up to 90 days, join your Epilog account. They are stored on our servers and, if a coach works with you, that coach and, if they have one, their team can access them. A day already filled in on Epilog is not replaced, and a value very far from a nearby weigh-in is not imported. Weigh-ins you add to your measurements in Epilog are also saved to Apple Health; those entered in a check-in are not. Changing or deleting a weigh-in on one side does not change or delete it on the other. If you remove Epilog’s access to workouts or its permission to save your weight in Apple Health, no weigh-in moves any more. The sync then turns off: restoring access does not restart it, you have to turn it back on. This setting is kept only on your phone: reinstalling the app turns it off and, if you then turn it back on, a weigh-in less than 90 days old that you had deleted may come back.

On Apple Watch, during a workout and only if you allow it, the Epilog app reads your heart rate and active energy burned to display them live during the session; it also reads your date of birth to estimate your maximum heart rate, and your workouts recorded in Apple Health, and saves the workout there.

This data is processed on the basis of your explicit consent, given when you allow access to Apple Health, turn on the syncing of your weigh-ins or enter this information; you can withdraw it at any time in the Apple Health settings and in the app. Turning syncing off does not erase weigh-ins already imported: they stay on your account until you delete them. This data is used only to run Epilog and for your own tracking: it is never sold, never used for advertising and never shared with advertisers. Data kept by Epilog is included in your data export and deleted with your account; what is saved in Apple Health stays there and is managed from that app.

In-app advertising measurement (Meta)

The app uses Meta’s measurement tools (its software development kit and the Conversions API, through our subscription provider RevenueCat) to measure how well our ads on Facebook and Instagram perform. Meta receives information about the installation and use of the app, account creation, trials and subscriptions, technical data about the device, and your device’s advertising ID (on iPhone, only if you allowed tracking). Your workouts, health data, measurements and photos are never sent to Meta.

On iPhone, you make this choice when Apple asks for tracking permission, and you can change it in Settings › Privacy & Security › Tracking. On Android, you can reset or delete your advertising ID in your phone’s settings.

Legal basis: your consent on iPhone; FIT MASS COACHING’s legitimate interest in measuring its campaigns on Android, which you can object to at any time. For Meta’s processing and any international transfers, see Meta’s privacy policy.

Advertising cookies (Meta)

With your consent, the Meta pixel measures visits on public landing and offer pages, successful account registrations, clicks on the App Store and Google Play buttons, trial starts and confirmed payments and supports advertising measurement and personalized advertising on Facebook and Instagram. Meta receives technical browser/network data, the page URL, event names, the amount and currency of a confirmed payment, and advertising cookie identifiers (_fbp and, when applicable, _fbc). RevenueCat also forwards confirmed web payments to Meta via the Conversions API using consented advertising identifiers. Account information and questionnaire answers are not sent by this integration; automatic matching and automatic event detection are disabled. Your choice is stored in your browser for 180 days. To withdraw or change your choice, open this Privacy Policy from the footer: the same Accept and Decline controls appear again. Declining keeps the service available and disables this integration. For Meta’s processing and possible international transfers, see Meta’s Privacy Policy.

Where a sign-up comes from

When a visit reaches epilog.fit through a campaign link (utm_source, utm_medium, utm_campaign and utm_content parameters) or a referral link, the site keeps those parameters, the landing page and the time of arrival. This information stays in the browser for the life of the tab and disappears when the tab is closed. It is not placed in a cookie, except during a sign-in with Google, where it passes through a technical cookie that lasts ten minutes at most and is erased on return. If an account is created during that visit, it is saved with that account, to know which channels make Epilog known. It contains no IP address and no advertising identifier. The site sends it to our servers and carries it onto the Google Play link when that link is used. For a visitor who has accepted Meta cookies, the page address, parameters included, is also sent to Meta, as the previous section indicates. Legal basis: FIT MASS COACHING’s legitimate interest in measuring the effectiveness of its communication. It is deleted with the account.

In the app, the following are also saved with the account, for the same measurement: the optional answer to the question “How did you hear about Epilog?”, the country (reported by the app store through our subscription provider, or inferred from the device’s time zone), and the language and region set on the phone.

10. Coaching onboarding questionnaire (health data)

Clients following a coach's programme through Epilog fill in an onboarding questionnaire that collects health data within the meaning of Article 9 GDPR: injuries and pain, eating disorders, body measurements, and body photographs when the client chooses to send them. These answers are processed on the client's explicit consent, given before any answer is saved, and recorded with its date and the version of this policy in force. They serve one purpose: building and following the client's training and nutrition programme. Only the linked coach and their team can read them; injuries and eating-disorder answers never appear in any list or team-wide view. Consent may be withdrawn at any time through the contact address below, and the questionnaire is included in account deletion and in data portability exports. Retention: submitted answers are kept for the duration of the coaching and of the associated Epilog account, and are erased with it, photographs included. A questionnaire started but never submitted is erased automatically after thirty days without activity, along with its photographs. A submitted questionnaire that no Epilog account ever joined is erased after twelve months: long enough for a late sign-up, short enough that health data is not left waiting indefinitely.

Progress photos

The app offers a photo library to track how your physique changes: before/after photos and a side-by-side comparison. It keeps the photos you take or import and, for each one, the view (front, back, side or other), the side shown and the date the photo was taken, which you can correct. Before upload, the app re-encodes every photo into a new JPEG file, which the server re-encodes again: GPS location, device make and model and the other metadata of the original file are not kept. Epilog does not analyse the content of the photos. They are stored with Amazon Web Services in Paris (eu-west-3 region), encrypted at rest (SSE-S3). They are never public: the server only delivers them after authentication, with no public address and no caching, and a display link, when one is needed, is signed and expires after one hour at most.

These photos stay private and are used only for your own tracking. Other members never have access to them. If you follow a coach's programme through Epilog, only the photos you attach yourself to a check-in are sent to them: your coach and their team can view them in the check-ins you sent them with, and nowhere else. Adding photos and comparing them requires Epilog Pro; without a subscription you keep all your photos and can view, export, correct and delete them. Legal basis: performance of the service you request by adding a photo. Photos sent with the coaching onboarding questionnaire remain governed by section 10.

You can delete any photo from the app. It disappears at once from your photo library and from the check-ins you had sent it with; its files are erased from storage by a clean-up task that runs every hour and tries again until the erasure succeeds. Storage keeps no earlier versions of the files. A record without the image (date, view and technical references) remains until the account is deleted, so that check-ins already sent show that the photo was removed. A copy you exported outside Epilog is not affected. A photo whose upload never completed is erased after 24 hours, and a photo attached to a check-in that was never sent after seven days. When you delete your account, the photos and all their information are erased at the end of the thirty-day period that follows the request. Your data export (portability) includes the information of each photo and lets you download each image in full size.

11. Coach survey

The survey for coaches at epilog.fit/coachs collects their answers about their coaching activity, tools and expectations, the campaign source of the visit, and the start and end times of the survey. The IP address is only used to limit abusive submissions, for 24 hours at most, and is not stored with the answers. Contact details (first name, email, phone or WhatsApp, Instagram account or professional website) are only requested from coaches who ask to be contacted again: survey results, early access, beta testing or a call. Purposes: guiding the development of Epilog Coach and, for those who asked, sending a confirmation email and then contacting them by email, phone or WhatsApp. News about Epilog Coach is only sent to coaches who ticked the dedicated box. Legal basis: FIT MASS COACHING's legitimate interest in improving its products for the answers, the person's own request for the follow-up contact, and consent, which can be withdrawn at any time, for news. Providers: our form tool, hosted by Vercel and Upstash, records the answers; a copy is kept in an internal Google spreadsheet; Brevo stores the contact details. Retention: answers and contact details are kept for 24 months at most after the answer, at each of these providers; contact details are deleted sooner on request via the contact address below.

12. Contact

For inquiries: support@epilog.fit.