Privacy Policy

This privacy policy explains how the SkillTree mobile application (the "App", package com.skilltree.app) collects, uses and protects your personal data, in accordance with the General Data Protection Regulation (GDPR, EU 2016/679) and the French Data Protection Act.

1. Data controller

The data controller is Erwan CATEL, publisher of the App.
Contact: contact@fitnessskilltreeapp.com
Postal address: [address to be completed].

2. Data we collect

We only collect the data necessary for the App to function:

• Account data: email address (via email sign-up or Google Sign-In).
• Fitness profile: nickname, age, sex, height, weight, goals, training days, diet, allergies.
• Activity tracking: workout history.
• Progress tracking: body measurements and progress photos.
• Gamification: experience points (XP), level, skill-tree progression.
• Preferences: interface theme and language.
• Advertising data: device advertising identifiers and associated data, processed by Google AdMob (see section 5), subject to your consent.

The App does not collect health data in the medical sense, nor payment card data (any purchases are handled by the Google Play Store, from which we do not receive your payment details).

3. Purposes and legal bases

Purpose	Data involved	Legal basis
Create and manage your account	Email, authentication identifiers	Performance of the contract (Terms)
Generate your AI training and nutrition programs	Fitness profile, goals, diet, allergies	Performance of the contract
Track your progress and gamification	Workouts, measurements, photos, XP/level	Performance of the contract
Remember your preferences	Theme, language	Legitimate interest
Display advertising	Advertising identifiers	Consent (collected via the Google UMP consent screen)

4. AI generation (Google Gemini)

To generate your training and nutrition programs, the relevant information from your fitness profile (goals, level, diet, allergies, etc.) is sent to the Google Gemini service. This data is used solely to produce personalized recommendations within the App.

5. Advertising — Google AdMob

The App displays advertising through Google AdMob. As such, AdMob may access your device's advertising identifier and associated technical data in order to serve ads and measure their performance.

In accordance with the GDPR, your consent is collected through Google's User Messaging Platform (UMP) before any advertising processing that requires consent. You can change your choices at any time from the App settings.

To learn more about how Google uses data for advertising: Google advertising policies, AdMob privacy information and Google Privacy Policy.

6. Processors and recipients

Your data is neither sold nor rented. It is processed by the following processors acting on our behalf:

• Google Firebase — Authentication (email and Google sign-in), Cloud Firestore (database for your profile and progress) and Cloud Storage (storage of your progress photos).
• Google Gemini — AI program generation.
• Google AdMob — advertising delivery.

These services are provided by Google (Google Ireland Limited and/or Google LLC). Their involvement is governed by data processing agreements compliant with Article 28 of the GDPR.

7. Hosting and transfers outside the EU

The App's data is hosted on the Google Cloud / Firebase infrastructure, within the European Union (Ireland / europe-west region). Some ancillary processing carried out by Google may involve a transfer outside the EU; in that case, Google relies on appropriate safeguards (European Commission standard contractual clauses).

8. Retention period

• Account and profile data: kept for as long as your account is active.
• If your account is deleted: your data is deleted or anonymized, unless a legal retention obligation applies.
• Inactive accounts: may be deleted after a prolonged period of inactivity of [period to be specified].
• Advertising data: retained by Google according to its own periods, described in its privacy policy.

9. Security

We implement appropriate technical and organizational measures (authentication, Firestore/Storage security rules, encryption in transit) to protect your data against unauthorized access, loss or alteration.

10. Your rights

In accordance with the GDPR, you have the following rights:

• Right of access: obtain a copy of the data concerning you.
• Right to rectification: correct inaccurate data (editable directly in the App).
• Right to erasure: delete your data. You can delete your account and the associated data directly from the App, using the "Delete account" feature.
• Right to portability: receive your data in a structured, machine-readable format.
• Right to object and to restriction: object to certain processing, in particular for advertising.
• Right to withdraw your consent at any time (e.g. for advertising), without retroactive effect.

To exercise these rights, contact us at contact@fitnessskilltreeapp.com. We respond within one month. You also have the right to lodge a complaint with the French supervisory authority, the CNIL.

11. Protection of minors

The App is not intended for children under 15. If you believe a minor has provided us with data without the consent of their legal guardians, please contact us so that we can delete it.

12. Changes

This policy may be updated. In the event of a substantial change, we will inform you by an appropriate means within the App. The last update date appears at the top of this page.

13. Contact

For any question about this policy or your personal data: contact@fitnessskilltreeapp.com.