Privacy policy
Version 1.3 · 1 September 2026
This policy explains how BLACK GALGOS processes athlete, trainer and visitor data. To contact us, exercise your rights or request further information about the controller, email support@blackgalgos.com.
Data we process
| Data | Purpose | Legal basis |
|---|---|---|
| Name, email, phone, country and date of birth | Create and secure the account, verify adulthood and provide the service | Performance of the contract |
| Gender, level, goals, availability and preferences | Personalise training | Performance of the contract |
| Height, weight, injuries, limitations, declared medication, perceived exertion and mood | Adapt the plan to the information provided | Explicit consent for health data |
| Plans, completed sessions, loads, progress and comments | Provide coaching and progress tracking | Contract and, where health is revealed, explicit consent |
| Subscription status, product and dates | Manage paid access | Contract and legal obligations |
| Device token, security and administrative logs | Operational notifications, security and audit | Contract, consent or legitimate interest, as applicable |
Your trainer
Your assigned external professional may access only your profile, questionnaire, declared injuries, plans and progress to prepare and adapt your training. Trainers act as processors under BLACK GALGOS instructions and confidentiality obligations.
Providers and international transfers
- Google Ireland (Firebase): authentication, database, files, functions and notifications.
- Google Analytics: if you accept it, measurement of landing-page use (pages visited, interactions and technical device data). The legal basis is your consent, which you may reject without losing any functionality.
- RevenueCat: technical management of subscription status.
- Google Play and Apple: distribution and payment as independent controllers. BLACK GALGOS does not receive or store card details.
Google and RevenueCat may allow access from the United States under applicable safeguards, including the EU‑US Data Privacy Framework and, where relevant, Standard Contractual Clauses.
Retention
Your profile, plans and progress are kept while the account is active. Health-dependent data is deleted when health consent is withdrawn. Account deletion removes personal data except information that must be restricted for statutory periods or a minimal pseudonymised consent record needed to handle legal claims.
Your choices and rights
You can change or withdraw consent at any time through “Analytics settings” in the footer. If you reject it, we remove analytics cookies from blackgalgos.com.
You may withdraw health consent and request access, rectification, erasure, restriction, objection and portability. Health consent can be withdrawn under “Settings → Legal documents → Health data consent”. You can edit data and delete the account in the app, or email support@blackgalgos.com for assistance or to exercise your other rights. We generally reply within one month. You may lodge a complaint with the Spanish Data Protection Agency or your local supervisory authority.
Cookies and technical storage
The coach panel uses a secure session cookie and Firebase local storage to authenticate, protect and maintain access, plus a local preference that remembers the exercise catalogue view. These are technical elements needed to provide the requested features and are not used for advertising or tracking. The landing page only enables Google Analytics if you expressly accept it.
Security and adults only
We apply role-based access, trainer separation, encryption in transit and at rest, administrative logs and session revocation. BLACK GALGOS is exclusively for people aged 18 or over and does not offer a parental-authorisation flow.
Changes
Each version is identified so we can prove which information applied. If a change requires renewed acceptance, the app will request it before you continue.