90 Day Challenge: Privacy Policy

Last Updated: September 18, 2023

Introduction

Welcome to the 90 Day Challenge app. We respect your privacy and are committed to protecting your personal data. This privacy policy will inform you about how we look after your personal data while using our mobile application (regardless of whether you use it on Android or iOS) or engaging with our services, and it tells you about your privacy rights and how the law protects you.

This privacy policy pertains to the 90 Day Challenge app, a product of 90 DC B.V. Any reference to "90 DC B.V." in the following articles refers to the 90 Day Challenge app.

This policy applies to all users of the 90 Day Challenge app and its associated services. It is intended to comply with the laws and regulations in the place where the user lives. Our goal is to create a relationship with our users based on trust, and we are dedicated to ensuring that we earn that trust by following all legal requirements related to privacy.

Information We Collect

In order to provide our services, we collect several types of information from our users. Our primary method of collecting information involves your active provision of details during the sign-up process and subsequent updates to your account. This includes personal identifiers such as your name, email address, date of birth, and fitness-related information. Additionally, should you opt to sign in using external services like Apple, Google, or Facebook, we access and store the email address associated with these accounts, facilitating a seamless sign-in process while verifying your identity. The types of information we collect are as follows:

Personal Identification Information: This includes your first name, last name, and date of birth. We use this information to personalize your experience and communicate with you effectively.
Contact Information: We collect your email address for account setup, notifications, and for sending information related to our services. If you provide an additional email address, we may use that for secondary communication or as a recovery email.
Account Information: Your password is collected and stored securely to protect your account. We use strong encryption methods to ensure the safety of your account.
Fitness Information: We gather information related to your fitness goals, such as your workout goal, weight goal, fitness level, the number of days per week you wish to train, your height, weight, and preferred measurement system. This helps us tailor your fitness program according to your individual needs and preferences.

You can choose not to provide certain information, but this might limit your ability to take full advantage of our services. We take your privacy seriously and strive to collect only the necessary information needed to provide you with our services.

Please note that all information shared remains private and is not made public in any way unless you give us explicit permission to share your progress.

We also collect communications exchanged between you and 90 DC. B.V., such as Service-related emails (e.g., account verification, updates to features, technical and security notices). Please be aware that you cannot opt out of receiving Service-related emails.

The Purposes of Processing

We primarily gather your information to enhance our service delivery and craft a personalized fitness experience for you. We use your personal identifiers to tailor your user experience and validate your age, ensuring you meet the age requirements for our services. Your contact information facilitates account setup, management, and correspondence about service-related updates or addressing any concerns. The fitness information you provide guides us in creating personalized fitness plans according to your specific goals, fitness level, and preferences.

Application of Collected information

We leverage your provided information in several ways to enhance your experience and our service delivery. Personal identifiers help us to personalize your interactions with our service. We use your contact information for account setup, management, addressing your queries, and service-related communication. Fitness information is utilized to curate personalized fitness plans that align with your goals and preferences, enabling us to deliver a comprehensive and customized fitness service.

Place

The Data is processed at the Owner's operating offices and in any other places where the parties involved in the processing are located. Depending on the User's location, data transfers may involve transferring the User's Data to a country other than their own.

Retention Time

We hold your personal data as long as it is essential for service provision, legal obligations, dispute resolution, or policy enforcement. Personal identifiers and contact information are retained throughout your relationship with us. Account information, specifically your password, is held as long as you maintain an account with us. Your fitness information is preserved for the duration of your active account for progress tracking and fitness program adjustments. Note that anonymized or aggregated data may be held indefinitely, as it can no longer personally identify you.

Security measures

At the 90DC B.V. we take your data security seriously and implement a range of measures designed to protect your personal information from unauthorized access and disclosure.

We use HTTPS for all communications between your devices and our services. This protocol ensures that all data transferred remains encrypted in transit, reducing the risk of interception by unauthorized parties. We also store your password using strong encryption methods. In fact, the encryption is so secure that even we can't access your password. If you forget your password, it can't be retrieved—it must be reset. We implement protections against Cross-Site Request Forgery (CSRF) attacks. This means that we verify the source of each request to ensure it's made from a legitimate user session, providing an additional layer of security. Our system has robust controls in place to determine who can send requests to our backend endpoints. These constraints add another layer of security and further protect your information from unauthorized access.

Despite these extensive security measures, we must remind you that no method of transmission over the internet, or method of electronic storage, is 100% secure. While we strive to use commercially acceptable means to protect your personal information, absolute security cannot be guaranteed.

We strongly encourage you to protect against unauthorized access to your password and your computer by signing off once you have finished using a shared computer and to use unique passwords for your 90 Day Challenge account.

How to exercise rights

If you wish to exercise any of your rights as described in this privacy policy, please contact us via the following methods:

In-app: You can access, review, and update much of the information you've submitted to the 90 Day Challenge app by logging into the app and accessing your account profile. You may also make a request for the deletion of your personal data through the app.

You may send an email to support@the90dc.com if you wish to access, correct, or delete your personal information held by us, object to the processing of your personal data, or request data portability. Please include your confirmed email used in the the 90 Day Challenge app so we can verify your identity.

Please note that we may request certain information from you to help us confirm your identity and ensure your right to access your personal data or to exercise any of your other rights. This security measure ensures that personal data is not disclosed to any person who has no right to receive it.

Once we receive your request, we will review it, determine whether we can comply under applicable law, and respond within a reasonable timeframe.

Legal Basis of Processing

The Owner may process Personal Data relating to Users if one of the following applies:

Users have given their consent for one or more specific purposes.
Provision of Data is necessary for the performance of an agreement with the User and/or for any pre-contractual obligations thereof.
Processing is necessary for compliance with a legal obligation to which the Owner is subject.
Processing is related to a task that is carried out in the public interest or in the exercise of official authority vested in the Owner.
Processing is necessary for the purposes of the legitimate interests pursued by the Owner or by a third party.

In any case, the Owner will gladly help to clarify the specific legal basis that applies to the processing, and whether the provision of Personal Data is a statutory or contractual requirement or a requirement necessary to enter a contract.

Further Information about Retention Time

Unless specified otherwise in this document, Personal Data shall be processed and stored for as long as required by the purpose they have been collected for and may be retained for longer due to applicable legal obligation or based on the Users’ consent. Therefore:

Personal Data collected for purposes related to the performance of a contract between the Owner and the User shall be retained until such contract has been fully performed.
Personal Data collected for the purposes of the Owner’s legitimate interests shall be retained as long as needed to fulfill such purposes. Users may find specific information regarding the legitimate interests pursued by the Owner within the relevant sections of this document or by contacting the Owner.
The Owner may be allowed to retain Personal Data for a longer period whenever the User has given consent to such processing, as long as such consent is not withdrawn. Furthermore, the Owner may be obliged to retain Personal Data for a longer period whenever required to fulfill a legal obligation or upon order of an authority. Once the retention period expires, Personal Data shall be deleted. Therefore, the right of access, the right to erasure, the right to rectification, and the right to data portability cannot be enforced after expiration of the retention period.

Children's Privacy

90 DC B.V. does not knowingly collect or solicit information from individuals under the age of 13, nor do we permit such individuals to register for the Service. Our Service and its content are not directed at children under the age of 13. If we become aware of collecting personal information from a child under 13 without parental consent, we will promptly delete that information. If you suspect that we may have collected information from or about a child under 13, please contact us.

Your Data Protection Rights Under GDPR

If you reside in the EEA, you have the following data protection rights:

Access, correct, update, or request the deletion of your personal information by emailing support@the90dc.com.
Object to the processing of your personal information, request restrictions on its processing, or seek the portability of your personal information. These rights can be exercised by emailing support@the90dc.com.
For marketing opt-out requests, please contact us at support@the90dc.com.

Lodge a complaint with your local data protection authority regarding our collection and use of your personal information. We promptly respond to requests regarding data protection rights, in accordance with applicable data protection laws.

Other Websites and Services

We are not responsible for the practices employed by websites or services linked to or from our Service, including their information or content. When you navigate from our Service to another website or service via a link, our Privacy Policy no longer applies, and you are subject to the rules and policies of the third-party site or service. You acknowledge that we have no control over any third parties you authorize to access your User Content. Your use of third-party websites or services and your grant of access to your User Content to them are at your own risk.

Contact Us

For any inquiries about this Privacy Policy or the Service, please refer to the appropriate support channel in the 90 Day Challenge app settings or contact us at support@the90dc.com.

Changes to Our Privacy Policy

We may update this Privacy Policy from time to time in response to changing legal, technical, or business developments. When we update our Privacy Policy, we will take appropriate measures to inform you, consistent with the significance of the changes we make.

For instance, we will notify you of any changes to this Privacy Policy through the 90 Day Challenge app, via email, or other communication. Your continued use of our services after our communication of any changes will constitute your acceptance of such changes.

The date of the last update to the Privacy Policy will be indicated at the top of this page. If there are any significant changes in the way we handle your personal information, we will provide a prominent notice through our services or we will send you a direct notification.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data.