Privacy Policy

1. Who is responsible for your data

Babylon Optima B.V. is the controller for personal data processed through Every Single Session, referred to as ESS in this policy.

Babylon Optima B.V., Aelbrechtskolk 45B, 3025 HB Rotterdam, the Netherlands. Chamber of Commerce number 91102421. You can contact us at [email protected].

2. Data we process

• Account data: email address, encrypted authentication credentials and account identifiers.
• Profile data: your name and optional details such as date of birth, height, weight, country and profile photo.
• Training data: routines, folders, exercises, workouts, sets, repetitions, weight, RPE, duration, notes, personal records and training history.
• Product analytics: events such as onboarding completion, routine changes and workout completion, linked to an internal user identifier when analytics is enabled.
• Diagnostics: crash, error, performance, device, operating system and app-version information. We configure diagnostics not to send default personal information and scrub common personal-data patterns from error text.
• Support data: information you choose to include when you contact us.

ESS does not use advertising identifiers for product analytics. We do not sell personal data and do not use your training data for third-party advertising.

3. Why we process data

• Provide the service: create your account, save and sync training data, calculate progress and provide exports. This is necessary to perform our agreement with you.
• Keep ESS reliable and secure: prevent abuse, investigate errors, protect accounts and maintain the service. We rely on our legitimate interests in operating a safe and dependable product.
• Improve the product: understand feature use and improve flows through limited product analytics. We rely on our legitimate interests, balanced against the limited nature of the data.
• Meet legal obligations: retain or disclose information when applicable law requires it.
• Respond to you: handle support and privacy requests. This may be necessary to perform our agreement, meet a legal obligation or serve our legitimate interests.

4. Service providers

We use specialist providers to operate ESS:

• Supabase: authentication, database, server functions and file storage.
• Amplitude: limited product analytics when configured.
• Sentry: crash, error and performance monitoring when configured.
• Expo and EAS: app build, update and distribution infrastructure.
• Cloudflare: delivery and security for this website.

Providers process data under their own security and retention controls and our contractual arrangements. Some processing may take place outside the European Economic Area. Where required, we rely on an adequacy decision or approved safeguards such as Standard Contractual Clauses.

5. Retention

Core account and training data is kept while your account is active. If you delete your account in ESS, the active account, training records and uploaded profile image are scheduled for permanent deletion. Device-side ESS data is cleared as part of that flow.

Limited records may remain temporarily in protected backups, security logs or processor systems until their normal retention cycle ends, or longer if required by law. Product analytics and diagnostic providers may retain historical events under their configured retention periods. Those events are no longer associated with future use after account deletion.

6. Your choices and rights

Depending on your location, you may have rights to access, correct, export, restrict or delete personal data, object to certain processing and lodge a complaint.

• Edit profile and training records directly in ESS.
• Export completed workout data as CSV or JSON from your profile.
• Delete your account from Profile, Settings, Delete account. Re-entering your password is required and the action cannot be undone.
• Email [email protected] for any other privacy request.

In the Netherlands, you can also complain to the Dutch Data Protection Authority.

7. Security

We use encryption in transit, access controls, row-level database policies, authenticated server operations and monitoring to protect data. No online service can guarantee absolute security, so please use a unique password and keep your device secure.

8. Children

ESS is not intended for children under 16. We do not knowingly create accounts for children under 16. Contact us if you believe a child has provided personal data.

9. This website

This marketing website does not use advertising or analytics cookies. When you follow an email link, your email application handles the message and shares only the information you choose to send.

10. Changes and contact

We may update this policy when ESS or applicable law changes. The effective date above shows the latest revision. Material changes will be communicated in the app or by another appropriate channel.

Questions or requests can be sent to [email protected].