Privacy Policy
Effective date: 1 September 2026
Last updated: 1 September 2026
1. Scope and Who We Are
This Privacy Policy explains how PROGREZPRO LTD, a company incorporated in the Republic of Cyprus with registration number HE489232 and registered address at Viomichaniki Periochi, Livadia, Larnacas, 7060, Cyprus (“ProgrezPro”, “we”, “us” or “our”), collects, uses, discloses, stores and protects personal data when you use the ProgrezPro mobile application, our website at https://progrezpro.com, the partner coupon redemption page, and related support services (together, the “Services”).
For the personal data described in this Policy, PROGREZPRO LTD is generally the data controller. Certain service providers process data on our behalf, while participating reward partners may act as separate controllers for information they process when providing their own goods or services.
The Services are intended for adults aged 18 or older. By using the Services, you acknowledge that you have read this Policy.
2. Privacy at a Glance
| Topic | Summary |
|---|---|
| Account | You may sign in by email, Google, Apple or Facebook. The data received depends on the sign-in method and your provider settings. |
| Health and fitness data | Profile, onboarding, workout, nutrition, weight, fitness and step data are used to provide tracking and personalisation features. |
| Apple Health / Health Connect | With permission, ProgrezPro reads step-count data only. Connection is optional and can be revoked. |
| Rewards | Partners see only limited coupon information and your profile display name during redemption; they do not see your email or health and fitness data. |
| Payments | Subscriptions are processed through Apple App Store or Google Play. We do not receive full payment-card details. |
| Deletion | You can initiate account deletion in the app or through https://progrezpro.com/delete-account/. Some records may be retained where legally required or necessary for security and disputes. |
3. Personal Data We Collect
Certain information processed by ProgrezPro, including weight, target weight, workout activity, nutrition records, fitness goals, progress information and step data, may constitute data concerning health under applicable data protection law.
3.1. Account and Sign-In Data
- email address, account identifier and authentication status;
- when you sign in by email: your email address, account identifier, verification or sign-in code status and related authentication records. ProgrezPro does not use or store an app password for this sign-in method;
- when you use Google, Apple or Facebook sign-in: the provider-specific user identifier and, depending on your settings and the permissions granted, your email address, display name, profile photo and other basic account details;
- Apple private relay email address where you choose Hide My Email;
- records of account creation, login, logout, failed authentication, age confirmation, acceptance of the applicable Terms and Policy, and health and fitness data consent, including its status, date and applicable consent-text version.
3.2. Profile and Onboarding Data
You may provide or edit:
- profile display name or nickname and profile photo, whether imported from a sign-in provider or added or changed by you;
- age or year of birth;
- gender;
- height, current weight and target weight;
- fitness level, fitness goal, preferred training location, training frequency and other workout preferences;
- daily calorie and macronutrient targets;
- notification and integration settings.
Your display name is not treated as a verified legal identity. It may be imported from a sign-in provider or entered and edited by you.
3.3. Workout and Activity Data
- selected and active workout programmes;
- custom workouts and programmes, exercise selections, sets, repetitions, weights, rest settings, supersets and dropsets;
- workout start and completion status, skipped exercises, timestamps, duration and workout history;
- estimated calories burned and other progress metrics;
- favourites and recently used exercise values.
3.4. Nutrition and Weight Data
- food searches and selected food database entries;
- meal logs, portions, serving sizes, calories and macronutrients;
- manually added cardio activities and related estimates;
- daily nutrition targets, intake and remaining-calorie calculations;
- weight logs and weight-progress history.
3.5. Step Data from Apple Health and Health Connect
If you choose to connect Apple Health or Health Connect, ProgrezPro requests permission to read step-count data. We use this data to display daily steps and calculate related activity and progress metrics. We do not request access to heart rate, medical records, sleep, weight, workout records or other health data through these integrations.
Where technically feasible, we store the daily step total needed for the Services rather than unnecessary underlying source records.
3.6. Progress, Achievements and Rewards Data
- streaks, completed awards and milestones, progress towards achievements and earned points;
- reward-store activity, coupons obtained through points, coupon status and expiration date;
- coupon identifiers, randomly generated Coupon Codes and QR-token status;
- partner, offer and specific partner-location identifiers;
- successful and failed redemption attempts, timestamp, confirmation method, status, and whether a valid Partner PIN was provided;
- security information used to detect repeated failed attempts, rate-limit abuse and investigate suspected fraud.
Redemption logs record whether the Partner PIN validation succeeded, but do not store the Partner PIN value itself.
3.7. Subscription and Purchase Data
- subscription plan, status, trial eligibility, start and renewal dates, cancellation status and entitlement information;
- App Store or Google Play transaction and purchase identifiers;
- refund, billing-support and dispute information where provided by the platform or by you.
Apple and Google process payment-card details under their own terms and privacy policies. ProgrezPro does not receive your full card number.
3.8. Support, Feedback and Communications
- messages submitted through the app or website contact form;
- your contact details and the content of support requests;
- records of our response, issue resolution and related correspondence;
- notification preferences and records showing whether a notification was delivered or opened, where supported.
3.9. Technical and Usage Data
- IP address, device type, operating system, app version, language, time zone and approximate region;
- device and app identifiers generated by the Services or our providers;
- screen views, feature interactions, session information and diagnostic events;
- crash reports, performance logs, security logs and error information;
- browser information and essential cookies or similar technologies used on our website and partner redemption page.
4. How We Use Personal Data
- create, authenticate, maintain and secure your account;
- provide workouts, programs, nutrition tracking, progress, achievements, points, rewards and other app functionality;
- calculate suggested calorie and macronutrient targets and personalise content based on the profile and onboarding information you provide;
- remember previous workout values and display your history and progress;
- sync and display step-count data where you enable an Apple Health or Health Connect connection;
- manage Free and Premium access, subscription entitlements, trials, renewals and customer support;
- issue, validate and redeem partner coupons and prevent the same coupon from being redeemed more than once;
- detect fraud, misuse, invalid codes, repeated PIN guessing and other security risks;
- send service notifications and reminders in accordance with your settings;
- respond to support requests and resolve disputes;
- analyse performance, diagnose errors and improve the Services;
- comply with legal obligations and establish, exercise or defend legal claims.
5. Legal Bases for Processing
Where the EU General Data Protection Regulation (“GDPR”) or equivalent law applies, we rely on the following legal bases:
| Purpose | Typical Data | Legal Basis |
|---|---|---|
| Provide the account and non-health core Services | Account, authentication, basic profile settings, subscription and reward data | Performance of a contract; legal obligations where applicable |
| Provide health, fitness, nutrition, personalisation and progress features | Weight, target weight, fitness goals, workout activity, nutrition records, progress information and step data | User consent under Article 6(1)(a) GDPR and, where the information constitutes data concerning health, explicit consent under Article 9(2)(a) GDPR |
| Security, fraud prevention and service integrity | Technical logs, login and redemption attempts | Legitimate interests in protecting users, partners and the Services; legal obligations |
| Support and communications | Contact details and correspondence | Performance of a contract; legitimate interests; consent for optional communications |
| Subscriptions, accounting and disputes | Transaction identifiers and support records | Performance of a contract; legal obligations; legal claims |
| Product analytics and diagnostics | Usage events, crash and performance data | Legitimate interests, or consent where required by applicable law |
Before processing health and fitness data, ProgrezPro asks for your explicit consent through a separate affirmative action. This consent is not combined with your acceptance of the Terms of Service.
You may choose not to provide this consent. However, because the current version of ProgrezPro relies on the processing of health and fitness data to provide its functionality, you will not be able to complete registration or use the Services without providing this consent. If you later withdraw your consent, access to the Services will be disabled unless and until you provide consent again.
6. Personalisation and Automated Processing
ProgrezPro uses the information you provide—such as goal, training location, fitness level, frequency, age, gender, height and weight—to suggest workout content and calculate starting calorie and macronutrient targets. These outputs are recommendations and estimates. They do not produce legal or similarly significant effects, and you can edit your profile, targets and logs.
7. Apple Health and Health Connect
If you have provided the separate consent described in Section 5, you may also choose to connect Apple Health or Health Connect and allow ProgrezPro to read your step-count data.
- Connection is optional and the core app can be used without automatic step synchronisation.
- ProgrezPro requests only the permissions needed for the user-facing step feature.
- You can revoke access in Apple Health, Health Connect or your device settings. Revocation stops future synchronisation but does not automatically remove data already copied to ProgrezPro.
- We do not sell health and fitness data or use data obtained through Apple Health or Health Connect for advertising, marketing profiles or data-broker activities.
- We do not disclose step data to participating reward partners.
Consent to ProgrezPro’s processing of health and fitness data and the device-level permission granted through Apple Health or Health Connect are separate actions. You may decline either action.
8. How We Share Personal Data
We disclose personal data only in the limited circumstances described below and where necessary to operate and support the Services, provide the rewards program, or comply with applicable law.
| Recipient / Provider | Purpose and Data |
|---|---|
| Participating reward partners | During coupon redemption, the relevant partner location may receive the user’s profile display name, coupon or offer details, validity period, redemption status and Coupon Code. Partners do not receive the user’s email address, profile photo, sign-in information, age, gender, height, weight, fitness level, workout history, nutrition data or step data through the redemption process. |
| Software development and technical support providers | Hosting, cloud infrastructure, authentication, email delivery, push notifications, analytics and diagnostics, content and database integrations, software development, quality assurance, maintenance, security and technical support. These providers may process only the personal data reasonably necessary to provide their services and act under the instructions of PROGREZPRO LTD, where applicable. |
| Public authorities, regulators and courts | Personal data may be disclosed where required by law, a valid legal request, regulatory obligation or court order, or where necessary to protect legal rights and investigate fraud or security incidents. |
9. International Data Transfers
Some of the service providers described in Section 8 may process personal data outside the European Economic Area (“EEA”).
Where personal data is transferred outside the EEA, we ensure that an appropriate legal transfer mechanism is in place, such as an adequacy decision adopted by the European Commission, the European Commission’s Standard Contractual Clauses, or another safeguard permitted under applicable data protection law.
You may contact us at support@progrezpro.com for further information about the safeguards used for international data transfers.
10. Data Retention
We retain personal data only for as long as reasonably necessary for the purposes described in this Policy, including legal, accounting, security and dispute-resolution requirements.
| Data Category | Indicative Retention |
|---|---|
| Active health and fitness data, including health-related profile data, workout, nutrition, weight, step and progress data | For the life of the account while the relevant consent remains active, unless you delete individual entries earlier. |
| Health and fitness data following withdrawal of consent | Processing stops when consent is withdrawn. The relevant data is scheduled for deletion and permanently erased from active systems after a 30-day grace period, unless continued retention is required or permitted by applicable law. |
| Account deletion from active systems | Normally within 30 days after a verified deletion request, subject to the exceptions below. |
| Backups | Up to 90 days before routine overwrite or secure deletion; not used for ordinary product operations. |
| Routine security, login and failed redemption logs | Up to 12 months. |
| Suspicious activity or investigation records | Up to 24 months or until the investigation or related claim is resolved. |
| Support and feedback records | Up to 2 years after the request is closed, or longer if linked to a dispute or legal requirement. |
| Successful redemption, subscription, transaction and accounting records | Up to 6 years from the relevant event, or longer where required by law or an unresolved claim. |
| Records of consent and acceptance of Terms / Policy | Up to 6 years after account closure where necessary to demonstrate compliance or defend claims. |
When retention is no longer necessary, data is deleted, anonymised or aggregated. Redemption records cannot be edited or deleted through the regular user or partner interfaces, but they are not retained indefinitely. Following account deletion, identifying fields should be removed or pseudonymised where the record must be retained.
11. Data Security
We use technical and organisational safeguards designed to protect personal data, including access controls, encryption in transit, protected authentication, logging and monitoring. No system is completely secure, and we cannot guarantee absolute security. You are responsible for protecting access to your device, email account and social sign-in accounts.
12. Your Choices and Data Protection Rights
- Edit your display name and profile information in the app.
- Choose whether to complete onboarding and whether to connect Apple Health or Health Connect.
- Manage Health permissions in your device settings and notification permissions in the app or operating system.
- Request access to, correction of, deletion of, restriction of, or portability of your personal data.
- Object to processing based on legitimate interests and withdraw consent at any time.
- Request information about international transfer safeguards.
- Lodge a complaint with the Office of the Commissioner for Personal Data Protection of the Republic of Cyprus or, where applicable, the authority in your country of habitual residence.
To exercise a right, contact support@progrezpro.com. We may ask for reasonable information to verify your identity and protect your account.
You may withdraw your consent to the processing of health and fitness data at any time through the Health Data Consent setting in the app or by contacting support@progrezpro.com. Once consent is withdrawn, ProgrezPro will stop processing the relevant health and fitness data and access to the Services will be disabled. The relevant data will be scheduled for deletion and permanently erased from active systems after a 30-day grace period, unless continued retention is required or permitted by applicable law. Data contained in backups may remain until those backups are routinely overwritten in accordance with Section 10.
Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.
If you provide consent again before the scheduled deletion is completed, access to the Services may be restored and the scheduled deletion may be cancelled.
13. Account and Data Deletion
You may initiate deletion through the Delete Profile option in the app or through https://progrezpro.com/delete-account/. After verification, we will delete or anonymise data that we are not required or permitted to retain.
- Deleting the app from your device does not delete your account.
- Deleting your ProgrezPro account does not automatically cancel an Apple App Store or Google Play subscription. You must cancel the subscription through the relevant store.
- Data necessary for legal obligations, fraud prevention, accounting, security, dispute resolution or legal claims may be retained for the applicable period.
- Revoking Google, Apple or Facebook access may stop that sign-in method but does not by itself delete the ProgrezPro account.
14. Children’s Privacy
ProgrezPro is intended only for users aged 18 or older. We do not knowingly allow persons under the age of 18 to create an account or use the Services.
If we learn, after reasonable verification, that a person under the age of 18 has created an account, we will take reasonable steps to suspend or close the account and delete the associated personal data, unless retention is required or permitted by applicable law.
If you believe that a person under the age of 18 is using ProgrezPro, please contact us at support@progrezpro.com.
15. Third-Party Services and Partner Locations
The Services may link to app stores, sign-in providers, partner businesses and other third-party services. Their own terms and privacy policies apply to their processing. Partner offers may be available only in specified countries or locations, including participating locations in Cyprus.
16. Website Cookies and Similar Technologies
Our website may use cookies and similar technologies that are strictly necessary for its operation, security and the provision of features requested by users. If we introduce optional analytics, advertising or similar tracking technologies on the website, we will provide appropriate information and obtain consent where required by applicable law before those technologies are used. Users will also be able to manage or withdraw their consent.
Further information about the technologies in use, their providers and purposes will be made available through the website’s cookie settings or a separate Cookie Notice, where applicable.
17. Changes to This Policy
We may update this Policy to reflect changes in the Services, providers or legal requirements. We will update the “Last updated” date and provide additional notice where required. If a change requires new consent, we will request it before carrying out the relevant processing.
18. Contact Us
PROGREZPRO LTD
Viomichaniki Periochi, Livadia, Larnacas, 7060, Cyprus
Privacy / Support Email: support@progrezpro.com
Website: https://progrezpro.com
Account deletion: https://progrezpro.com/delete-account/
Supervisory authority: Office of the Commissioner for Personal Data Protection of the Republic of Cyprus.