Beta web  App Privacy Policy

Last updated: 20 October 2025
Effective date: 20 October 2025

Welcome to Fitness Reward (“we”, “us”, “our”).
This Privacy Policy explains how we collect, use, and protect your personal data during a 3-month university trial conducted as part of an academic exercise.

This project is not operated by a legal entity or commercial business. It is a student research and educational project, designed to evaluate engagement and reward mechanisms in a fitness-related context.

The policy applies when you use our website: https://www.fitnessreward.nl/ (the “Site”) and related services (the “Services”).

If you are located in the European Union, this policy also explains your rights under the EU General Data Protection Regulation (GDPR).

1. Data Controller Information

Project Contact Email: fitnessrewardnl@gmail.com
Affiliation: University exercise (educational research trial)
Duration: 3-month limited pilot (October 2025 – January 2026)
Country of operation: The Netherlands

There is no separate legal entity. The data controller for this project is the student or research team responsible for the Fitness Reward trial under university supervision.

We are not required to appoint a Data Protection Officer (DPO) under the GDPR, but you can contact us at the email above for any privacy-related questions or requests.

2. Information We Collect

We may collect and process the following categories of data:

a. Information you provide directly

• Registration data: email address (required for account creation)

• Reward redemption data: details necessary to process and issue rewards

• Customer support communications: messages you send via email or contact form

b. Automatically collected data

• Device & usage data: IP address, browser type and version, operating system, and general usage metrics

• Log data: pages visited, time spent on pages, clicks, referring/exit pages

• Cookies & tracking: cookies or similar technologies for analytics and site performance

c. Data from third-party services

• Analytics: Google Analytics (to analyze site performance and usage trends)

We do not collect sensitive personal information or data from children under 18.

 All data collected is used solely for the purposes of evaluating this educational project and will not be used for commercial or marketing purposes.

3. How We Use Your Data

During the 3-month trial, personal data will be used exclusively for educational and research-related evaluation purposes.
The data will not be shared, sold, or reused after the project ends, except in anonymized or aggregated form for academic reporting.

We use collected data for purposes such as:

• Providing and maintaining our services

• Allowing you to register and manage your account

• Processing and delivering rewards

• Offering customer support and responding to inquiries

• Improving site functionality and user experience (analytics and debugging)

• Sending service communications (where applicable)

• Preventing misuse or fraud during the study

• Complying with ethical or university reporting requirements

We will only use your personal data for the purposes for which it was collected or as otherwise permitted by law.

4. Legal Basis for Processing (GDPR)

If you are located in the EU, we process your data under the following legal bases:

You may withdraw consent or object to processing where applicable by contacting us (see Section 12).

5. Sharing & Disclosure of Data

We may share data only when necessary to operate our services or fulfill the academic purposes of this project:

• Service providers: trusted third parties who help operate our site (e.g., hosting, analytics, email systems).

  • Example: Google Analytics — for site usage statistics.

• Legal or ethical obligations: when required by law, university policy, or to protect participants’ rights.

• Academic reporting: only anonymized or aggregated results may be shared as part of project outcomes.

We do not sell or rent your personal information to third parties for any commercial purpose.

6. International Transfers

We currently do not transfer personal data outside the European Economic Area (EEA).
If this changes, we will ensure that any transfer is protected by appropriate safeguards, such as EU Standard Contractual Clauses or adequacy decisions.

7. Cookies and Tracking Technologies

We use cookies and similar technologies for essential site functionality and analytics.

• Analytics: Google Analytics helps us understand how visitors use our site.

• You can control or delete cookies through your browser settings. Disabling cookies may limit certain features.

We do not use third-party advertising cookies or behavioral tracking.

8. Data Retention

All personal data collected during this trial will be retained only for the duration of the 3-month study.
After the trial concludes, all identifiable data will be securely deleted or anonymized within 30 days, unless short-term retention is required for academic review or compliance documentation.

9. Security Measures

We use appropriate technical and organizational measures to protect your personal data, including:

• TLS/HTTPS encryption for all communications

• Access control for authorized project team members only

• Regular system monitoring

As this is a temporary academic project, safeguards are appropriate for an educational environment.
However, no system is completely secure. Please also protect your login information.

10. Automated Decision-Making

We do not use automated decision-making or profiling that produces legal or significant effects on users.

11. Children’s Privacy

Our services are intended only for users aged 18 and over.
We do not knowingly collect personal information from children under 18.
If you believe a child has provided us data, please contact us immediately for deletion.

12. Your Rights (EU / GDPR)

You have the following rights regarding your personal data:

• Access and obtain a copy of your data

• Correct or update inaccurate information

• Request deletion (“right to be forgotten”)

• Restrict or object to processing

• Withdraw consent at any time

• Data portability

• Lodge a complaint with a data protection authority

To exercise any of these rights, contact us at fitnessrewardnl@gmail.com.
We may verify your identity before processing your request and will respond within 30 days.

13. Supervisory Authority

If you are in the Netherlands, you may contact the Autoriteit Persoonsgegevens regarding data protection concerns:
https://autoriteitpersoonsgegevens.nl

14. Changes to This Policy

This Privacy Policy applies for the duration of the 3-month university trial.
If updates are made during the trial, we will:

• Update the “Last updated” date above

• Notify registered participants if relevant

After the trial concludes, this policy will no longer apply, and all data will be deleted or anonymized.

Contact us:
For any privacy-related questions, please contact:
 fitnessrewardnl@gmail.com