Nexeltron app privacy policy

Nexeltron App Privacy Policy (Android, iOS, and app.nexeltron.com)
Effective as of October 5, 2026.

1. Data Controller

The controller of the personal data of Nexeltron application users is Prosper Andrzej Janda, conducting business under the name PROSPER ANDRZEJ JANDA (Nexeltron brand), ul. Miła 17A, 78-400 Szczecinek. Contact regarding personal data matters: andrzej.janda@op.pl, tel. +48 510 775 467.

2. What data the application collects

  • Account data: e-mail address, first and last name, phone number (if you provide it), and account identifier.
  • Bookings and membership: booked and completed sessions, membership status, balance, and Unit history.
  • Payments and invoices: amount, status, and payment identifier, payment method (e.g., BLIK, card, bank transfer), and for corporate invoices – tax identification number (NIP) and company name. We do not store payment card data or bank login credentials – these are handled by the payment operator.
  • BLIK payment technical data: IP address and information about the browser/device, provided to the payment operator to secure the transaction.
  • Nexeltron devices (Ring, Band): serial number/MAC address, purchase date, and – only upon your explicit consent in the app – measurements from the device, such as heart rate, activity, and sleep. These are health-related data; we process them only based on your consent, which you can withdraw at any time in the app.
  • Conversations with Nexeltron AI: content of messages to the assistant and its responses, in order to answer questions and assist with bookings. The assistant does not provide medical advice.
  • Communication preferences: consents for reminders and marketing information via e-mail/SMS.

The application does not display advertisements, does not track users in other applications, and does not sell personal data.

3. Purposes and legal bases

  • account creation and management, bookings, membership, and customer service – performance of a contract (Art. 6(1)(b) GDPR);
  • processing payments and issuing and storing invoices – performance of a contract and legal obligations, including tax obligations (Art. 6(1)(b) and (c) GDPR);
  • measurements from Nexeltron devices – your explicit consent (Art. 6(1)(a) and Art. 9(2)(a) GDPR);
  • reminders and marketing information – your consent (Art. 6(1)(a) GDPR);
  • security, fraud prevention, and establishing or defending claims – the controller's legitimate interest (Art. 6(1)(f) GDPR).

4. Who we share data with

We share data only with entities that assist us in providing services, based on data processing agreements or as independent controllers:

  • Clerk, Inc. (USA) – login and account management;
  • Railway Corp. (USA) – application servers and databases;
  • PayPro S.A. (Przelewy24, Poland) – payment processing;
  • Fakturownia sp. z o.o. (Poland) – issuing and sending invoices;
  • Shopify (Ireland/Canada) – online store and memberships purchased in the store;
  • Klaviyo, Inc. (USA) – sending e-mail and SMS messages;
  • OpenAI (USA) – operation of the Nexeltron AI assistant;
  • Google and Apple – application distribution through app stores;
  • public authorities – when required by law.

Transfers of data outside the European Economic Area are based on the European Commission's adequacy decision (EU–US Data Privacy Framework) or standard contractual clauses.

5. How long we store data

  • account, booking, and membership data – for the duration of the account usage, and subsequently until the expiry of the limitation period for claims;
  • invoices and billing data – for the period required by tax regulations (usually 5 years from the end of the tax year);
  • device measurements – until consent is withdrawn or the account is deleted;
  • conversations with Nexeltron AI – no longer than necessary for the service's operation and security.

6. Your rights

  • You have the right to access your data, rectify it, erase it, restrict its processing, transfer it, and object to its processing, as well as to withdraw your consent at any time (without affecting the lawfulness of processing based on consent before its withdrawal). You also have the right to lodge a complaint with the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw).

7. Deletion of account and data

You can request account deletion within the app in the account data section, or by e-mail to the address provided in section 1. We will delete your account data and device measurements; we will only retain data that we are required to keep by law (e.g., invoices).

8. Security

We transmit data exclusively via an encrypted connection (HTTPS). Only authorized personnel and the service providers listed above have access to the data.

9. Children

The application is intended for adults. We do not knowingly collect data from persons under 18 years of age.

10. Policy changes

We will inform you about significant changes to this policy within the application. The general privacy policy of the Nexeltron website and store is available at nexeltron.com/policies/privacy-policy.