Privacy Policy
Last updated: 7 October 2026 · Version 1.0
This policy explains which personal data is processed when you use the StenX app and the stenx.app website, why, who it is shared with and how to exercise your rights.
1. Applicable framework
The Service is mainly intended for users located in France, Belgium, Switzerland and, more broadly, in Europe. Depending on where you live, the processing of your data is governed in particular by:
- the General Data Protection Regulation (GDPR), for users located in the European Union and the European Economic Area;
- the Swiss Federal Act on Data Protection (FADP), for users located in Switzerland.
As the publisher of StenX is registered in Georgia, Georgian personal data protection law may also apply to its processing, without reducing the rights you have under the rules of your country of residence.
2. Data controller
The data controller is Marian Bonhomme, an Individual Entrepreneur registered in Georgia, identification number 305873944, whose registered address is Bakhtrioni st. 22, apt 75, Tbilisi, 0183, Georgia ("we" or "us").
For any question about your personal data: contact@stenx.app.
3. Data we process
- Account: email address, password (stored in encrypted form), name, profile photo, date of birth.
- Profile and goals: answers given at sign-up (level, goals, equipment, training context).
- Training: programmes followed, sessions completed, sets, loads, measurements, times, notes, performances and records.
- Community: sessions, records and photos you choose to post, comments, Boosts, discussion messages, leaderboard position.
- Purchases: history of your programme purchases on the website. Payment data for these purchases (card, payment method) was processed by Stripe and PayPal; we have never had access to your card numbers.
- Support: the emails and contact form messages you exchange with us.
- Technical data: connection data needed for the Service to work and remain secure.
4. Purposes and legal bases
- Creating and managing your account, providing programmes and showing your progress: performance of the contract.
- Operating the community (posts, comments, Boosts, leaderboards): performance of the contract.
- Managing lifetime access to purchased programmes and keeping the history of these purchases: performance of the contract and compliance with our legal obligations (accounting, tax).
- Answering your support requests: performance of the contract or our legitimate interest in replying to you.
- Keeping the Service secure and preventing fraud and abuse: our legitimate interest.
- Improving the Service: our legitimate interest.
- Any other processing that requires it: your consent, which you can withdraw at any time.
5. Recipients and service providers
Your data is accessible to authorised members of our team and to the following service providers, solely for the services they provide:
- Supabase: database and account management;
- Cloudflare (R2) and Bunny.net: storage and delivery of images and videos;
- Vercel: website hosting;
- OVH: email service for the support address;
- Resend: sending internal notifications to our team (reviews, contact messages, end-of-cycle reviews);
- Apple and Google: distribution of the App through the App Store and Google Play.
Stripe and PayPal processed payment data for programmes purchased on the website, under their own privacy policies.
Content you post in the community, together with your name and leaderboard position, is visible to other members.
We do not sell your personal data.
6. Where your data is processed
The publisher of StenX is established in Georgia: your data is therefore processed by a business located outside the European Union and Switzerland. Some of our service providers are also located outside the European Union, the European Economic Area and Switzerland, in particular in the United States.
Where required by law, these transfers are covered by appropriate safeguards, such as an adequacy decision or the standard contractual clauses adopted by the European Commission. You can obtain information about these safeguards by writing to us.
7. Retention
Your data is kept for as long as your account exists and is then deleted (see the Account Deletion page).
Data that the law requires us to keep is an exception, in particular accounting records, kept for the applicable statutory period. Support emails are kept for as long as needed to handle your request.
8. Security
We implement appropriate technical and organisational measures to protect your data, including encrypted connections (HTTPS), passwords stored in encrypted form and access to data restricted to the people and service providers who need it.
9. Your rights
Depending on the rules that apply to you, you have in particular the following rights:
- to access your data and obtain a copy;
- to have inaccurate data corrected;
- to have your data erased;
- to restrict processing;
- to object to processing based on our legitimate interest;
- to data portability for the data you provided to us;
- to withdraw your consent at any time, where processing is based on it.
To exercise your rights, write to contact@stenx.app. We reply within one month, which may be extended in the cases provided for by law. We may ask you for information to verify your identity.
You can also lodge a complaint with the data protection authority of your country: in France, the CNIL; in Belgium, the Data Protection Authority; in Switzerland, the Federal Data Protection and Information Commissioner (FDPIC).
10. Minors
The Service is reserved for people aged 15 or over. If you believe that a younger person has provided us with data, please write to us so that we can delete it.
12. Changes to this policy
We may update this policy, in particular if the Service or the regulations change. The date of the last update is shown at the top of this page; if we make a material change, we will inform you by email or in the App.
13. Contact
Email: contact@stenx.app