Privacy
Privacy policy
Last updated: 21 September 2026
1. Who is responsible for your data
The data controller is M.A.N.O.N., a simplified joint-stock company (SAS), 4 allée des Sources, 64990 Saint-Pierre-d'Irube, France, company number (SIREN) 792 649 030. For any question about your data: contact@goodmorningtraining.com.
2. What stays on your phone
Without an account, your training data stays on your phone: your profile, your workouts, your programmes and your settings.
Your pain or injury areas never leave your phone, even with a subscription.
The app does not ask for the microphone, the camera, your location or your contacts.
3. The data we receive
| Data | When | Why, and on what basis |
|---|---|---|
| Email address, password (stored in an unreadable form), language | When you create an account | To create and secure your account. Performance of the contract. |
| Device name, platform, app version, installation identifier | At each sign-in | To show your signed-in devices and let you sign one out. Performance of the contract. |
| IP address, app version and platform | At each launch of the app, even without an account | To send the app its configuration and protect the service. Legitimate interest. |
| Sex, age, height, weight, level, equipment, workouts, programmes, notes, calculations and settings | Only with a subscription and a signed-in account | To back up your data and synchronise it between your devices. Performance of the contract. |
| Sign-in history: date, device, and for an attempt on an email address with no account, a fingerprint of that address | At each sign-in or attempt | To detect abuse and protect accounts. Legitimate interest. |
| Subscription status, purchase receipt, your account identifier | At purchase and at each renewal | To open and close access to the subscription. Performance of the contract. |
| Technical errors: cause, screen, language, theme, device model, technical identifiers | When the app crashes or meets an error | To fix the app. Legitimate interest. |
| IP address and name of the requested file | When you watch a video | To deliver videos and protect the service. Legitimate interest. |
We do not sell your data.
4. Who receives your data
We use providers that process data on our behalf.
| Provider | Role | What it receives |
|---|---|---|
| OVHcloud (France) | Server hosting | The data in §3 for accounts |
| Brevo (France) | Sending emails | Your email address and the content of each email sent |
| RevenueCat | Subscription management | An anonymous identifier at launch, your account identifier after sign-in, the purchase receipt, the IP address |
| Expo | App updates | Platform, version, update channel, IP address, at each launch |
| Sentry | Error reports | The technical errors in §3. Data stored in Germany |
| Backblaze | Backup copies | Copies of the database, encrypted: only we hold the key |
| Apple, Google | Subscription payment, phone backup | What they receive under their own rules |
RevenueCat, Expo, Sentry and Backblaze are US companies. These transfers are covered by the Data Privacy Framework or by the European Commission's standard contractual clauses, depending on the provider.
5. How long we keep it
| Data | Duration |
|---|---|
| Account and synchronised data | As long as the account exists. You can delete it at any time. |
| Sign-in history of an account | 12 months |
| History of attempts on an email address with no account | 6 months |
| Server error logs | 14 days |
| Server access logs (IP address, requested page) | About 3 months |
| After the account is deleted | See §6 |
Each provider in §4 also keeps its own logs, under its own rules.
6. Deleting your account
Your account, your email address and the data stored on our servers are deleted immediately. For security and disaster recovery, a technical record is kept for 30 days, and encrypted backup copies for about 2 months. What is stored on your phones stays there.
In the app: Your space, then Delete my account. Without the app: Delete my account.
Your customer record at RevenueCat is deleted too, at the latest 37 days after your request. Deleting your account does not cancel your subscription: cancel it in the App Store or Google Play.
7. Your rights
You can ask for access to your data, its correction, its erasure, its portability, the restriction of its processing, and you can object to processing based on our legitimate interest. Write to contact@goodmorningtraining.com: we answer within one month.
If you believe your rights are not respected, you can complain to the CNIL, the French data protection authority: www.cnil.fr.
8. Minimum age
The app is for people aged 16 and over.
9. Security
Exchanges between the app and our servers are encrypted. Your password is never stored in clear. Backup copies are encrypted before they leave our server.
10. Cookies
This site uses no cookies and no audience measurement.
11. Changes
The date of the last update is at the top of this page.