Privacy Policy
1. Operator
The personal data of Samson-fit service users is processed by the Samson-fit entity (see operator contacts at the bottom of this page). Contact for privacy matters: support@samson-fit.com.
2. Data categories we process
| Category | Examples |
|---|---|
| Account | E-mail address, first and last name, generated username, registration date |
| Profile | Body weight, age group, experience level, limb lengths (optional), anthropometry |
| Consents | Acceptance timestamps for terms of use, privacy policy, data processing (with IP address and user agent) |
| Training data | Workout history, exercises, sets/reps/time, calculated per-muscle load, MIDA simulation results |
| Health metrics (optional) | Weight, blood pressure, pulse, sleep — entered manually or imported |
| Payments | Subscription orders and transactions; card details are processed by payment gateways and are NOT stored by us |
| Security data | Session data, IP addresses in consent records, error reports |
3. Purposes and legal bases
- Providing the service (accounts, workouts, calculations, forecasts) — performance of a contract.
- Security and fraud prevention (Argon2 password hashing, TOTP two-factor authentication, rate limiting) — legitimate interest.
- Payments — contract performance; card data is processed by payment gateways, not by us.
- E-mail communications and notifications — legitimate interest or consent, depending on the channel.
4. Storage and processing location
Personal data is stored in the service database (MySQL 8.4, utf8mb4) on servers controlled by the operator. Security measures include: password hashing (Argon2/PBKDF2), two-factor authentication (TOTP), session-based authentication, rate limiting and error log rotation. Application error reports are sent to Sentry with personal data minimization enabled.
5. Third parties
- Payment gateways: YooKassa, Stripe (card data is processed on their side; we store only transaction IDs and statuses).
- Open Food Facts: product data requests by product name — without personal data.
- Sentry (error tracking, without personal data), e-mail sending for notifications (provider configurable).
- Delivery providers (CDEK, Russian Post, DHL): delivery details for store orders.
6. Your rights
You have the right to access, rectification, erasure, restriction of processing, data portability and to object to processing. Requests: support@samson-fit.com. At the current stage, requests are handled manually through support; self-service export and deletion tools are planned (see the Target model section).
7. Retention
Account and training data is stored while the account is active. Consent records are stored to prove consent (with the date). On account deletion, personal data is removed or anonymized according to the retention policy.
8. Children
The service is suitable for children from 6 years old with parental supervision. Registration and processing of children's data requires parental consent — contact support for registration.
9. Cookies
The service uses session cookies (authentication), language preference cookies and interface theme preferences. No third-party advertising or analytics cookies are used.
10. Changes to this Policy
The operator may update this Policy; material changes will be communicated through the service interface or e-mail before they take effect.