Who is responsible for your data
The data controller for your personal data is the studio, the studio you are a member of.
The Weliqo platform, which runs the website and the app, processes the data on the studio's behalf as a data processor, and only on its instructions.
What data we collect
- Account details: name, email and password (stored encrypted). If you sign in with Google, the name and email of your Google account.
- Profile details you provide: phone, address, date of birth, gender, emergency contact phone.
- Health notes, only if you choose to fill them in, so instructors can take them into account.
- Activity: reservations, attendance, waitlists and the workouts you log.
- Voice logging: when you log sets by voice or with phrases, we keep the text of each phrase, never the audio. Turning your voice into text is done by your device or browser (e.g. Apple, Google), under their own terms.
- Subscriptions and payments: plans, amounts, dates and receipts.
- Technical data: sign-in cookies, which are needed to keep you signed in, and your language and theme preferences. We don't use advertising or tracking cookies.
Why we use it
- To run your membership: reservations, schedule, attendance and notices about your classes (performance of a contract).
- To issue receipts and send them to the Greek tax authority (AADE myDATA), as the law requires (legal obligation).
- Health notes, with your explicit consent, which you can withdraw by clearing them from your profile.
- So the studio can reach out when you've been away for a while or your subscription is ending (legitimate interest).
- To log the sets you say (performance of a contract) and, from the text of the phrases without anything that identifies you, to improve how they're recognised (legitimate interest).
- The platform's AI tools for studio managers only use aggregated, anonymous figures (such as member counts or class occupancy), never anything that identifies you.
Who we share it with
We don't sell your data. Only these have access:
- The studio's staff (admins, front desk, instructors), as far as their work needs it.
- The Greek tax authority (AADE), for payment receipts.
- Providers that serve us: app and database hosting, email delivery (SendGrid) and, if you choose it, Google sign-in. Some are outside the EU; where so, transfers rely on the European Commission's standard contractual clauses.
How long we keep it
- Account and profile details, for as long as you're a member or until you delete your account.
- The text of voice-logging phrases, for 90 days. It is then deleted automatically, and at once if you delete your account.
- Payments, receipts and subscriptions, for as long as tax law requires (usually 5 years from the end of the fiscal year), even after your account is deleted, without your other contact details.
Your rights
- Access and correction: see and change your details on your profile.
- Deletion: delete your account yourself from your profile, as described below.
- Portability, restriction and objection: contact the studio.
- Withdraw consent for health notes at any time.
- Complain to the Hellenic Data Protection Authority (www.dpa.gr).
Security
- Connections are always encrypted (HTTPS) and passwords are stored encrypted.
- Each studio only sees its own members, and staff only see what their role allows.
Deleting your account
You can delete your account at any time from Profile → Delete account, on the website or in the app. The account is deleted straight away and your personal details are erased. Only the payment records the studio must keep under tax law remain, anonymised.
Contact
For any question or request about your data, contact the studio using the details above.