Last updated: 235 September 2026
English version. The German version is the authoritative one; in the event of any discrepancy the German text prevails.
For comparison, the currently published German version is at www.flixfit.me/privacy-policy
1. Controller
FlixFit® AG, Mosacher 25, 8126 Zumikon, Switzerland. Email: support@flixfit.me
3. Scope
This privacy policy applies to the FlixFit app (iOS/Android) and to the website flixfit.me. For users in Switzerland the revised Swiss Federal Act on Data Protection (revFADP) applies; for users in the EEA the GDPR applies in addition.
Part A: FlixFit app
4. Account and account management
Processor: Supabase (server location: Zurich, Switzerland)
Data processed:
Purposes: provision and administration of the user account, personalisation of training content, storage of training progress.
Legal basis: Art. 6(1)(b) GDPR (performance of a contract); for details of injuries and fitness level additionally Art. 9(2)(a) GDPR (explicit consent to the processing of health data); Art. 31 revFADP.
Retention: until the user deletes the account. Deletion is possible directly in the app.
5. Personalised training (FlixFit Premium)
Processor: Supabase (server location: Zurich, Switzerland)
Data processed: the details you enter yourself in the health questionnaire: fitness and activity level, current or past complaints and injuries including the body region affected (e.g. knee, back, shoulder, hip), limitations on load-bearing, training goals, plus age and, where given, gender. Your training progress recorded in the app also feeds in.
We do not read any data from Apple Health or Google Health Connect and request no such permissions.
Purposes: automated compilation of an exercise programme matched to your details, and its adaptation based on your progress and any updated answers.
Legal basis: your explicit consent under Art. 9(2)(a) GDPR in conjunction with Art. 6(1)(b) GDPR, and Art. 6(6) revFADP. We obtain this consent separately, before the first question of the health questionnaire is asked.
Voluntary nature and withdrawal: providing these details is voluntary. Without them we cannot provide the feature; all other features of the app remain fully usable. You can withdraw your consent at any time with effect for the future in the app settings. After withdrawal we discontinue the feature and delete the underlying health details; the lawfulness of processing carried out beforehand is unaffected.
Automated decision-making: the programme is compiled automatically and on the basis of fixed rules; no profiling for advertising or scoring purposes takes place.
Recipients: your health details are stored solely in our database at Supabase (Zurich). They are not passed on to third parties, in particular not to Apple, Google, RevenueCat or advertising networks, and are analysed neither for analytics nor for marketing purposes. Our product analytics (PostHog) and our error logging (Sentry) receive no health data either.
Retention: until you withdraw your consent, until your account is deleted or until you request deletion, and in any event no longer than 24 months after you last used the feature. If your subscription ends, the details are initially kept so that you can use the feature again without re-entering them should you resubscribe; you can delete them at any time in the settings.
6. Subscriptions and payment processing (FlixFit Premium) NEW
Payment processing
Paid subscriptions are handled exclusively through the Apple App Store or Google Play. Payment is made via your account there. We receive neither card details nor bank details nor your billing address. Apple’s and Google’s own privacy notices apply to their processing of your data.
Management of subscription status
Processor: RevenueCat, Inc., 1100 Bellevue Way NE, Bellevue, WA 98004, USA
Data processed: your app user ID (the account identifier from our own database, which is how we match subscription status and account), your email address, store receipts and transaction IDs, the product purchased, purchase and expiry dates, trial status, renewals, cancellations and refunds, country and currency, device type, operating system and app version.
Purposes: unlocking the features you have paid for, matching the subscription to your account, validating purchases and preventing abuse, restoring purchases on other devices, handling support requests, and aggregated analysis of subscription metrics.
Legal basis: Art. 6(1)(b) GDPR (performance of a contract) and Art. 31(2)(a) revFADP; for the aggregated analysis, Art. 6(1)(f) GDPR (legitimate interest in the commercial management of our offering).
Processing agreement and third-country transfer: a data processing addendum is in place with RevenueCat. Processing takes place in the USA. The transfer relies on the European Commission’s Standard Contractual Clauses (Implementing Decision (EU) 2021/914) with the amendments required for Switzerland. RevenueCat in turn uses sub-processors in the USA (including Amazon Web Services, Google and Cloudflare); the current list forms part of the data processing addendum.
No health data: no health details are transmitted to RevenueCat; special categories of personal data under Art. 9 GDPR are expressly excluded from the data processing addendum. No advertising identifiers (IDFA, Google Advertising ID) are collected and no attribution or advertising integrations are used.
Retention: for the duration of the subscription and thereafter for as long as this is necessary to handle it, to process refunds and to meet statutory retention obligations. On request we delete your record at RevenueCat.
7. Smart Notifications
Processor: Expo (server location: USA, Microsoft Azure)
Data processed: push token and device information; settings for language, time zone and reminder times; metadata on the dispatch of notifications. Expo forwards notifications to Apple APNs or Google FCM.
Purpose: sending personalised push notifications.
Legal basis: consent (Art. 6(1)(a) GDPR, Art. 31(1) revFADP), given by activating Smart Notifications. Withdrawable at any time by deactivating them in the app settings.
Third-country transfer to the USA: transfer on the basis of the EU–US Data Privacy Framework or the EU Standard Contractual Clauses.
8. Product analytics (PostHog)
Processor: PostHog (server location: Frankfurt, Germany)
Data processed: operating system, app version, language, time zone, technical user ID (only for users with an account). No collection of name, email address or IP address.
Purpose: analysis of app usage in order to improve the product.
Legal basis: legitimate interest (Art. 6(1)(f) GDPR, Art. 31(2)(d) revFADP).
9. Error logging (Sentry)
Processor: Sentry (server location: Frankfurt, Germany)
Data processed: technical error messages, login status, technical user ID (only for users with an account). No collection of name or email address.
Purpose: detection and correction of technical faults.
Legal basis: legitimate interest in the stability and security of the app (Art. 6(1)(f) GDPR, Art. 31(2)(d) revFADP).
10. Support communication
If you contact us by email, we process your email address and the content of your message in order to deal with your enquiry.
Legal basis: legitimate interest in dealing with the enquiry (Art. 6(1)(f) GDPR); where the enquiry relates to a contract, Art. 6(1)(b) GDPR.
Retention: until the enquiry has been dealt with conclusively, at the longest until the expiry of statutory retention periods.
Part B: Website flixfit.me
11. Website hosting (Webflow)
Processor: Webflow, Inc. (server location: USA)
Data processed: IP address, browser type, operating system, time stamp, URL accessed.
Purposes: provision of the website, IT security.
Legal basis: legitimate interest (Art. 6(1)(f) GDPR, Art. 31(2)(d) revFADP).
Third-country transfer to the USA: transfer on the basis of the EU–US Data Privacy Framework or the EU Standard Contractual Clauses.
12. Cookies
The website uses strictly necessary cookies only. No analytics, tracking or marketing cookies are set.
Legal basis: Section 25(2) no. 2 TDDDG (German Telecommunications Digital Services Data Protection Act, formerly the TTDSG); Art. 6(1)(f) GDPR.
Changed against the published version, which still cites the TTDSG. That act was renamed the TDDDG with effect from 14 May 2024; Section 25 itself is unchanged. The German version should be corrected in the same way.
13. Launch newsletter (MailerLite)
Processor: MailerLite (server location: EU)
Data processed: email address, time of sign-up.
Purpose: notification about the launch of the FlixFit app.
Legal basis: consent (Art. 6(1)(a) GDPR, Art. 31(1) revFADP), given by double opt-in. Withdrawable at any time via the unsubscribe link in every email or by writing to support@flixfit.me.
Retention: until consent is withdrawn.
Part C: General provisions
14. Recipients of the data
Your data is passed on only to the processors named in this policy. Beyond that, data is passed on only where we are legally obliged to do so or where you have consented. No data is passed on to third parties for marketing purposes.
When you take out a paid subscription, Apple and Google process the payment under their own responsibility; in that respect they are independent controllers and not our processors.
15. Third-country transfers
Transfers of data to the USA (Expo, Webflow) take place on the basis of the EU–US Data Privacy Framework or the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR). The transfer to RevenueCat relies on the EU Standard Contractual Clauses with the amendments required for Switzerland. For Switzerland, an adequacy decision of the European Commission is in place.
16. Your rights
You have the following rights:
A message to support@flixfit.me is enough to exercise them.
17. Data security
We take appropriate technical and organisational measures to protect your data. Transmission is TLS-encrypted.
18. Changes
The current version of this privacy policy is available in the app and at flixfit.me.
19. Contact
FlixFit® AG, Mosacher 25, 8126 Zumikon, Switzerland. Email: support@flixfit.me