Privacy Policy

At Progo ("we", "our", "us"), operated by Canvaspx LTD, we are committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy explains how we collect, use, store, and protect information when you use the Progo application and related services.

1. Information We Collect

Personal Information

When you create an account or use our services, we may collect the following personal information:

• Name and email address
• Date of birth and gender
• Profile photograph (if provided)
• Payment and billing information
• Account credentials

Fitness and Health Data

To provide our fitness services, we collect:

• Workout logs and exercise history
• Body measurements and weight data
• Fatigue and recovery metrics
• Performance analytics and progress data
• Device sensor data (if using Progo hardware accessories)

Technical Data

We automatically collect certain technical information:

• Device type, operating system, and app version
• IP address and approximate location
• Usage patterns and feature interactions
• Crash reports and performance data

2. How We Use Your Information

We use your information for the following purposes:

• Providing and personalising our fitness services, including adaptive training programmes and AI-driven exercise recommendations
• Processing payments and managing your subscription
• Monitoring fatigue levels and providing recovery insights
• Communicating with you about your account, updates, and promotional offers (with your consent)
• Improving our services through aggregated, anonymised analytics
• Ensuring the security and integrity of our platform
• Complying with legal obligations

3. Data Storage and Security

We take the security of your data seriously. All personal data is stored on secure servers with industry-standard encryption both in transit (TLS/SSL) and at rest. We implement appropriate technical and organisational measures to protect your data against unauthorised access, alteration, disclosure, or destruction.

Your data may be stored and processed in the United Kingdom, the European Economic Area, or other jurisdictions where our service providers operate. Where data is transferred outside the UK or EEA, we ensure appropriate safeguards are in place in accordance with applicable data protection laws.

4. Cookies

Our website and application may use cookies and similar tracking technologies to enhance your experience. These include:

• Essential cookies: Required for the operation of our services, including authentication and security
• Analytics cookies: Help us understand how users interact with our services so we can improve them
• Preference cookies: Remember your settings and preferences for a better experience

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of our services.

5. Third-Party Services

We may share your data with trusted third-party service providers who assist us in operating our platform. These include:

• Payment processors (for handling subscription payments securely)
• Cloud hosting and infrastructure providers
• Analytics services (using anonymised or aggregated data)
• Email and communication service providers

We do not sell your personal data to third parties. All third-party providers are contractually obligated to handle your data in accordance with applicable data protection laws and our instructions.

6. Your Rights (GDPR)

Under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, you have the following rights:

• Right of access: You can request a copy of the personal data we hold about you
• Right to rectification: You can request that we correct any inaccurate or incomplete data
• Right to erasure: You can request the deletion of your personal data in certain circumstances
• Right to restrict processing: You can request that we limit how we use your data
• Right to data portability: You can request your data in a structured, machine-readable format
• Right to object: You can object to the processing of your data for certain purposes, including direct marketing
• Rights related to automated decision-making: You have the right not to be subject to decisions based solely on automated processing that significantly affect you

To exercise any of these rights, please contact us at contact@trainprogo.com. We will respond to your request within 30 days.

7. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this policy, unless a longer retention period is required or permitted by law. Specifically:

• Account data is retained for the duration of your active account and for up to 12 months after account deletion
• Fitness and workout data is retained for the duration of your active account and can be exported before deletion
• Payment records are retained for up to 7 years to comply with UK tax and accounting regulations
• Technical logs are retained for up to 12 months for security and debugging purposes

8. Children's Privacy

Progo is not intended for use by children under the age of 16. We do not knowingly collect personal data from children under 16. If we become aware that we have collected personal data from a child under 16 without parental consent, we will take steps to delete that information promptly. If you believe we may have collected data from a child under 16, please contact us at contact@trainprogo.com.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will notify you of any material changes by posting the updated policy on our website and, where appropriate, by sending you a notification via email or through the app. We encourage you to review this policy periodically. Your continued use of our services after any changes constitutes your acceptance of the updated policy.

10. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data protection rights have been violated.