Privacy policy
This is a translation for convenience; the Spanish version is the legally binding one.
1. Data controller
- Controller: Francisco José Fraile León
- Tax ID (NIF): 27313175P
- Postal address: Apartado de Correos 1313, 41012 Sevilla (Spain)
- Email for data matters: info@reverfit.com
2. What data we collect and why
a) Subscribing to the service. When a center signs up on the platform we ask for: the center’s name, contact person, phone number, address, email and password (which is stored encrypted), and optionally a logo and brand color. We use them to set up and provide the subscribed service, to invoice and to give you support. Legal basis: performance of the contract (art. 6.1.b GDPR) and legal invoicing obligations (art. 6.1.c).
b) Payments. Payment is made through Stripe. Your card details are collected and processed directly by Stripe on its own systems; Reverfit never sees or stores them.
c) Contact. If you write to us by WhatsApp or email, we use your contact details to reply. Legal basis: taking pre-contractual steps at your request (art. 6.1.b) and our legitimate interest in answering inquiries (art. 6.1.f).
3. Data of each center’s members
Each sports center that uses Reverfit manages its own members’ data on the platform (profile, fees, attendance and, if it subscribes to those modules, training and nutrition). For that data, the controller is the center; Reverfit acts as processor (art. 28 GDPR): it hosts and processes the data only to provide the service to the center, following its instructions, and does not use it for its own purposes or pass it on to third parties. If you are a member of a center and want to exercise your rights over that data, contact your center.
The Reverfit Member app. In addition to the above, inside the app there are three things the member decides on their own, for which the controller is Reverfit, not the center (Francisco José Fraile León, info@reverfit.com):
- Their own account, optional: email and password to keep a copy of their data, with their explicit consent for health data (checkbox when creating it) and, if they tick it, the news checkbox. See the apps’ policy.
- Pro, if they buy it: it is paid through Apple or Google Play, which hold the card details; we never see them. RevenueCat (United States, standard contractual clauses) receives the purchase and its identifier (their account’s or their member code) to know whether Pro is active.
- The meal photo, the sentence and the menu, which go through Anthropic’s artificial intelligence without being stored, and the general ranking with an alias, if they join it. They are explained in the Reverfit Diet policy and in the Reverfit Workout policy.
4. Where your data is stored
The platform’s database is hosted on Supabase, on servers located in Frankfurt (Germany, European Union). The website is served through Vercel, which also gives us the visit statistics of the public website (see the cookies section), and payments are processed by Stripe; where these providers involve transfers outside the European Economic Area, they rely on safeguards recognized by the regulations (standard contractual clauses or adequacy frameworks in force).
5. How long we keep it
For as long as the contractual relationship lasts and, afterwards, for the limitation periods of the legal obligations (for example, tax obligations). The data a center manages about its members is kept for as long as the center keeps the service and in accordance with its instructions.
6. Your rights
You can exercise the rights of access, rectification, erasure, objection, restriction and portability by writing to info@reverfit.com and proving your identity. You can also lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, aepd.es).
7. Cookies
This website only uses technical cookies, which are necessary for the service to work: the theme preference cookie (light/dark), session cookies to keep you signed in, and, on each center’s subdomain, the cookies that identify the member’s access to their apps. We do not use third-party advertising or analytics cookies; that is why no cookie banner is shown: strictly necessary cookies are exempt from consent.
Visit statistics. On the public pages of reverfit.com (not in the centers’ dashboard or in the member apps) we use Vercel Web Analytics to know how many visits each page gets, which website people come from, the country and the type of device. It does not use cookies or store anything in your browser, it does not allow us to identify you, and the data is only seen in aggregate. We remove from the addresses any parameter that could contain your data. The legal basis is our legitimate interest in knowing which content is useful (art. 6.1.f GDPR).