What the app doesn't know about you

Controller

Marvin Kouamé DeschampsSole proprietor (micro-entrepreneur), trading as 3DWorksPrints

SIRET

103 069 837 00013

Address

23A rue Verte, 67560 Rosheim, France

Contact

mylevel.lift@gmail.com

There is no data protection officer: the business is a sole proprietorship and the processing described here does not require appointing one.

No data is collected, and none leaves your device. This is a consequence of the architecture, and no marketing promise: there is no server behind the app, so there is nowhere to send anything.

What stays on your device

• Your sessions, exercises, sets, weights and reps
• Your XP, your per-exercise levels, your mastery tiers, your rank
• Your quests, badges and titles
• Your settings: theme, goal, units
• Your Premium license, if you activate one

This data is written to the app's local storage. It disappears if you uninstall the app, or if you clear your browser data for the web version. Backing it up is therefore up to you: the export feature is free and available in the settings.

Premium license verification is local too: the code is signed, and the app checks the signature on the device, without a connection. No training data is sent, whether to the publisher, to Stripe or to anyone else.

The app uses no cookies, no trackers, no audience measurement tools and no third-party analytics services.

The "Join the closed test" form on the home page is used to add you to the Google Play tester list and send you the install link.

Data

Nickname and email address of the Google accountIt must be the account you use on the Play Store, otherwise access can't be opened

Purpose

Adding you to the tester list and sending the install link

Legal basis

ConsentGiven through the checkbox on the form, and withdrawable at any time

Recipients

Make and Google WorkspaceRequest processing, then storage of the tester list

Retention

Until the end of the test program, then deletion within three months

Once your address is added in the Play Console, it is processed there by Google under its own privacy rules, as the controller of the distribution platform.

The Feedback page sends your message to the tool that sorts it. What is sent depends on the channel you choose, and nothing is sent until you click Send.

What the message contains

• The fields you fill in: title, description, steps, severity, rating, comment, depending on the channel
• An anonymous identifier, a random number drawn once and kept in your browser's storage, used only to link two messages sent from the same browser. It holds no information about you and can't be used to identify you
• Your nickname and email address: optional, and only if you enter them. Without an address, a reply is impossible
• A screenshot for a bug, optional, and only one you choose yourself

What the form adds for a bug report

• The browser, system and language reported by your browser
• The device, as you describe it in the field provided
• The app version, theme, goal, rank and level, only if you arrive from the app, which then places them in the page address. Opened directly, the page can't know them: the app is on another domain and its storage is out of reach

No training data is sent by this form. No sessions, no history, no export.

Purpose

Fixing bugs, prioritizing features, answering support requests

Legal basis

Legitimate interestImproving a service based on feedback from the people who use it

Recipients

Make and Google Workspace

Retention

Two years after the feedback is handled

Public reviews. A review is shown on the site only if you ticked the matching checkbox. In that case, only the nickname, rating and comment can appear: never the email address. The checkbox can be withdrawn afterwards, with a simple message.

Payment takes place on a page operated by Stripe, which acts as the merchant of record: Stripe contracts with the buyer, issues the invoice and processes the payment data, as the controller for that part.

The publisher never sees your bank details. Card number, expiry date, security code: none of it passes through the site, the app or the publisher's tools.

Received by the publisher

Email address, license identifier, plan and purchase date

Purpose

Issuing the license, providing support and keeping the accounts

Legal basis

Performance of the contract, and legal obligationFor keeping accounting records

Retention

Ten years for accounting recordsPeriod required by the French Commercial Code

The details of the processing carried out by Stripe fall under its own privacy policy. The terms of the sale itself are set out in the terms of sale.

The app uses no cookies or trackers.

This site, however, loads two measurement and advertising tools that place trackers in your browser:

The local storage used by the Feedback page for its anonymous identifier is not a cookie and is never read by a third party. It is cleared along with your browser's site data.

No data is sold, rented or traded. The only third parties that process it are the ones the site needs in order to work:

Some of these providers are based in the United States or may transfer data there. These transfers rely on the European Commission's standard contractual clauses or on the EU–US Data Privacy Framework, depending on the provider.

Tester list

End of the test program, then three months

Feedback and support

Two years after handling

Accounting records

Ten yearsLegal period, cannot be shortened

Advertising trackers

Thirteen months at most

The GDPR gives you the right of access, rectification, erasure, restriction, objection and portability over data concerning you, as well as the right to withdraw your consent at any time when consent is the basis for the processing.

One address for all of it: mylevel.lift@gmail.com. Your request is handled within one month. No ID is required: a request sent from the email address concerned is enough.

Special case: data in the app. These rights have no object there, out of impossibility and not out of refusal: the publisher has no access to it. To export it, use the export feature in the settings; to erase it, clear the app's data or uninstall it.

If an answer doesn't satisfy you, you can lodge a complaint with the French data protection authority (Commission nationale de l'informatique et des libertés), 3 place de Fontenoy, 75007 Paris, France.

The site and the app are served over HTTPS. Form submissions are encrypted in transit. Lists are stored in spaces protected by an account with strong authentication, and access to the processing tools is limited to the publisher.

The best protection is structural: what is never collected can't leak. That is why the app has no account and no server.

This policy evolves with the product. Any change is published on this page, with its update date. A change that would extend collection or modify a purpose will be announced separately, with fresh consent where it is required.

The legal notice and the terms of sale complement this document.