WodGoD

Privacy Policy

Last updated: 15 June 2026

1. Data controller

The data controller for your personal data is Buy & Click, SL (owner of the WodGoD brand).

Tax ID (CIF): B-95612958

Address: Avda. Ribera de Axpe 11, 2D - 202, 48950 Erandio, Bizkaia, España

Contact: info@wodgod.com

2. Data we collect

On registration: email address and password (stored encrypted).

In your profile: username, full name (optional), and profile photo (optional).

Sports activity: rep counts per exercise with dates, weekly WOD results.

Technical: IP address and access logs managed by our infrastructure (Supabase / Vercel).

3. Camera and biometric data

Your device camera is used solely to count repetitions through pose analysis. This processing happens entirely on your device — we never send images or video to our servers.

We do not store biometric data of any kind.

4. Purpose and legal basis

We process your data to provide the service (legal basis: performance of a contract) and to display you in competition rankings and leagues.

Your username, GOD score, and league position are visible to all registered users within the platform.

5. Data retention

We retain your data for as long as your account is active. When you delete your account, we erase your personal data within 30 days, unless we are legally required to retain it.

Anonymised sports results may be retained for statistical purposes.

6. Your rights (GDPR)

You have the right to access, rectify, erase, object to processing, request portability of your data, and withdraw consent at any time.

You may exercise these rights by contacting us at info@wodgod.com. You may also lodge a complaint with the Spanish Data Protection Agency (aepd.es).

7. Third parties

Supabase: database and authentication (EU servers). Supabase privacy policy.

Vercel: web hosting and aggregated, anonymous performance metrics. Vercel privacy policy.

Google Analytics: app usage analytics. Only enabled if you accept analytics cookies in the cookie banner; it is disabled by default. It may involve transferring data to Google (USA) under the standard contractual clauses. Google privacy policy.

We do not sell or share your data with third parties for advertising purposes.

8. Security

We apply technical and organisational measures to protect your data: encrypted communications (HTTPS/TLS), hashed passwords, and restricted database access via row-level security (RLS).

9. Contact

For any privacy queries: info@wodgod.com