Privacy Policy
1. Who is responsible
The controller of your data is LCK Ecommerce SL (Tax ID B23827843), based at Calle Ronda Vall d'Uxó, 21, 03206 Elche (Alicante), España (“Reset90”, “we”). Contact for any privacy matter: info@reset90.app.
2. What data we process
| Data | Details |
|---|---|
| Account | Email address and password (stored encrypted; we never see it). |
| Profile and body data | Age, height, weight, neck and waist circumference, body-fat estimate, goal and target weight, activity level. This is health-related data. |
| Activity | Logged workouts and sets (weight, effort), cardio, daily weigh-ins, weekly measurements, protein and macro logs, calendar. |
| Photos | Progress photos and motivation photos you upload. They are kept in private storage and are only accessible from your account. |
| Preferences | Language, units of measurement and local reminders. |
| Waitlist | Your email address and the consent you give on the website to be notified of the launch. |
We do not use analytics or advertising cookies, or third-party trackers, on this website or in the app.
3. Why, and on what legal basis
- Providing the service (creating your account, generating your plan, storing your logs): performance of a contract (Art. 6(1)(b) GDPR).
- Processing your health data (weight, measurements, body fat) to calculate your calories, macros and goals: your explicit consent (Art. 9(2)(a) GDPR), which you can withdraw at any time by deleting that data or your account.
- Notifying you of the launch if you join the waitlist: your consent (Art. 6(1)(a)).
- Security and fraud prevention: legitimate interest (Art. 6(1)(f)).
- Legal obligations (tax and accounting): Art. 6(1)(c).
We do not make automated decisions with legal effects on you. Calorie and goal calculations are indicative.
4. Who we share data with
Only with providers acting as processors under contract:
- Supabase (database, authentication and photo storage). Project region: London, United Kingdom (an adequacy-decision country under the GDPR).
- Netlify (hosting of the website and the web version of the app; it receives your IP address when serving pages and handles the waitlist form).
- Apple and Google (app stores): they handle the purchase and your payment details. We do not receive or store your card data.
We do not sell your data or use it for advertising. If a provider processes data outside the European Economic Area, we do so with appropriate safeguards (standard contractual clauses or an adequacy decision).
5. How long we keep it
- As long as your account is active. You can delete it from the app (Profile → Delete my account): your account, data and photos are erased.
- Provider backups may retain data for a limited period after deletion, after which it is removed.
- Waitlist: until launch, or until you unsubscribe (email info@reset90.app).
- Billing data: for the periods required by law (handled by Apple and Google).
6. Your rights
You can exercise your rights of access, rectification, erasure, restriction, objection and portability, and withdraw your consent, by writing to info@reset90.app. Many can be done yourself in the app (edit your profile, delete your data, delete your account). We will reply within the legal deadline (one month). If you believe we are not handling your data properly, you can complain to the Spanish Data Protection Agency (AEPD) (aepd.es) or your local supervisory authority.
7. Children
Reset90 is intended for people aged 18 or over. We do not knowingly collect data from minors; if we find a minor’s account, we will delete it.
8. Security
We apply reasonable technical and organisational measures: encrypted connections, encrypted passwords, per-user access control at database level (each user can only read and change their own data) and private photo storage.
9. Changes
If we change this policy in a material way, we will say so in the app or by email. The current version is always on this page.