Privacy Policy

Who is responsible for your data

Zend is responsible for the data we need to run the service: your account, how the app is used, and the security of the platform.

When you train at a gym, that gym also decides how it uses the information its staff can see about you, such as your plans, progress and the notes its staff write. Questions about how a particular gym uses your data can go to that gym or to us.

Data we collect

If you are a member, we collect:

• Account details: your name, email address, phone number (optional), profile photo (optional) and preferred language.
• Profile details you choose to give: date of birth, gender, height, weight and fitness goal.
• What you log in the app: workouts (exercises, sets, repetitions, weights, duration and how hard it felt), personal records, InBody scan results, body measurements, water intake and calories eaten, including any meal descriptions you type.
• Your gym relationship: the gyms you are invited to or subscribed to, your trainer, and your subscription dates.
• What your gym’s staff add about you: workout, nutrition and supplement plans, targets (for example a goal weight or daily water), measurements they record, notes about their contact with you, and files they upload, such as meal sheets or forms.
• Technical data: when you sign in and last used the app, the push-notification token of your device, and which notifications you have read.

If you are a gym owner, trainer or administrator, we collect your name, email address, phone number, profile photo, role, gym, language and when you last signed in. For gyms we also keep the gym’s name, contact details, address, logo and billing information.

If you request a demo on zendfit.com, we keep your name, your gym’s name (if you give it) and the phone number, WhatsApp number or email address you want us to use.

Health and body data

Some of what you log is health data: weight, body composition, measurements, food and water intake and training. We use it only to show you and your gym your progress and to run the features described in this policy. We do not sell it and do not use it for advertising.

On iPhone the app can read data from Apple Health (heart rate, steps, distance, active energy and workouts), and on Android from Health Connect (steps, heart rate, active calories, distance and workouts), but only if you allow it. This data is shown to you on your device and is not sent to our servers. You can withdraw access at any time in your phone’s settings.

How we use your data

• To provide the service: create your account, sign you in, show your plans and progress, and connect you with your gym and trainer.
• To let your gym coach you: your gym’s staff see your plans, logs and progress so they can support you.
• To keep you engaged with your training: we calculate an activity and health score and may send reminders (see the next section).
• To communicate with you: verification and password-reset emails, invitations, and notifications from your gym.
• To keep the service secure and working: preventing abuse, limiting repeated sign-in attempts, investigating errors and making backups.
• To improve the product: understanding, in aggregate, which features are used.
• To reply to demo requests and support messages.

We rely on providing the service you signed up for, on our legitimate interest in running and improving a secure service, and, where the law requires it (for example for health data or access to Apple Health and Health Connect), on your consent.

Activity score and reminders

Every night Zend calculates a score from 0 to 100 for each member, based on how recently and how regularly you have trained and used the app, and estimates how likely you are to stop using the app in the next 30 days. These estimates come from patterns in app activity; they are not a medical assessment.

Your gym’s owner and your trainer can see your score, the main reasons behind it and a suggested next step, so they can check in with you. The weekly summary email they receive may list members who could use a check-in.

When your score suggests you are drifting away, the app may send you a friendly reminder, at most once every 14 days, and we note whether you came back within a week so we can tell whether reminders help.

These estimates never decide anything about your membership, price or access. They only help your gym decide whom to contact.

Who can see your data

• You: everything in your account, in the app.
• Your gym: the owner of each gym where you have, or have had, a subscription can see your profile, your logs and progress, your plans and your activity score. Ending a subscription does not remove that gym’s access to the history from when you were its member; ask us if you want it removed.
• Your trainer: the trainer assigned to you can see your profile, logs, progress and the plans and files they created for you.
• Zend administrators: our staff can access data when needed to run, support and secure the service.
• Service providers who process data for us, listed in the next section.

We do not sell personal data and do not share it with advertisers. We may disclose data if the law requires it or to protect the rights and safety of our users or of Zend.

Service providers

We use these providers to run Zend. Each receives only what it needs for its task:

• Contabo (Germany): hosts our servers and database, and makes server backups.
• Cloudflare: delivers our websites securely and stores uploaded files and encrypted database backups.
• Google Firebase: delivers push notifications, and in the apps measures usage (Firebase Analytics), reports crashes (Crashlytics) and checks for app updates (Remote Config).
• Sentry: error reports from our servers and the dashboard, set up to leave out personal details such as your name, email and the content you submit. When an error happens in the dashboard, the report includes a recording of the screen from the minute before it, with all text, form fields and images hidden.
• Resend: sends our emails, such as verification codes and password resets.
• Apple and Google: distribute the apps and, if you allow it, provide Apple Health and Health Connect data on your device.

Notifications and emails

Members receive push notifications for gym invitations, announcements from their gym and the reminders described above. You can turn push notifications off in your phone’s settings. The app can also schedule workout, meal and supplement reminders on your device.

We email members only for account security: email verification and password reset. Gym staff receive account emails and a weekly summary, which they can turn off in their account settings.

Cookies and similar technologies

The dashboard uses cookies to keep you signed in and to remember your language and time zone; it cannot work without them. We do not use analytics cookies on the website or the dashboard.

How long we keep data

• Your account and what you logged: for as long as your account exists, so your history is there when you return.
• When you delete your account in the app, we erase it at once, together with everything stored about you: your profile, logs, measurements, subscriptions, and the notes and files your gym added. Plans your trainer wrote stay with the gym without your name. You can also ask us to erase your account by emailing [email protected]; we do so within 30 days.
• Demo requests: for up to 24 months after our last contact, unless you become a customer.
• A record of important account and administration events (staff sign-ins and failed sign-in attempts, and changes to staff accounts, gyms, billing and subscriptions), which our administrators use for security and support: 180 days. Entries about a member are erased with their account.
• Encrypted database backups: up to 35 days. Erased data disappears from backups as they expire.

Your rights

Depending on where you live, you may have the right to:

• access the personal data we hold about you and receive a copy;
• correct data that is wrong (most of it you can edit in the app);
• have your data erased;
• object to, or ask us to limit, certain uses, including the activity score;
• withdraw a consent you gave, such as access to Apple Health or Health Connect;
• complain to your data-protection authority.

To use any of these rights, email [email protected] from the address on your account. We reply within 30 days. If your request concerns what a gym does with your data, we will help you reach that gym.

Security

We protect data with encrypted connections (TLS), hashed passwords, short-lived sign-in tokens, limits on repeated sign-in attempts, encrypted backups and access restricted to the staff who need it. No system is perfectly secure; if a breach affects you, we will tell you as the law requires.

Children

Zend is not meant for children under 16. If a younger person trains at a gym that uses Zend, a parent or guardian must agree to their use of the app. If you believe a child has given us data without that agreement, email [email protected] and we will delete it.

International transfers

Our servers are in the European Union (Germany). Some providers listed above may process data in other countries, including the United States. Where the law requires it, we rely on safeguards such as the European Commission’s standard contractual clauses.

Changes to this policy

We may update this policy as Zend changes. The date at the top shows the latest version. If a change significantly affects how we use your data, we will tell you in the app or by email before it takes effect.

Contact us

For questions about this policy or your data, email [email protected].