Privacy policy

The data controller is VD SOFTWARE, a French SAS with a share capital of €1,000, 200 rue de la Croix Nivert, 75015 Paris, France, Paris Trade and Companies Register 101 626 349, hereinafter “we”.

For any question about your data or to exercise your rights: contact@simplewodtimer.com.

The following data is stored only on your device and is not sent to us: your preferences (theme, language, video quality, start countdown, usage statistics choice), the history cache, the upload queue for sessions and videos, and the videos saved to your camera roll.

WOD scan: the photo of a whiteboard or program is read directly on your phone by the text recognition and, where available, artificial intelligence tools built into the system (Apple Vision and Foundation Models on iOS, Google ML Kit and Gemini Nano on Android). The photo is neither kept by the app nor sent to our servers or any third party.

Qualification videos are saved to your phone's gallery. On iOS, a working copy is kept for 7 days in the app's private storage. They are sent to us only if you choose to upload them (see section 3).

On Android, Google's system backup may include the app's local data depending on your device settings.

a) Anonymous identifier. The first time the app opens with a network, it creates an anonymous account without asking you anything: a random technical identifier, with no name or email. It is used to attach and sync your history and settings.

b) Account (optional). If you sign in with Google or Apple, we receive from that provider an account identifier and your email address (which may be an Apple “Hide My Email” relay address). We never receive your password. An account is required to upload a video to the cloud.

c) Sessions and timers. For each session: the timer type, its configuration, the result (time, rounds), the WOD text you typed or scanned, the session name if any, the date and time, the duration. Your saved timers and customization (colors, font, sounds).

d) Videos uploaded to the cloud. If you choose to upload one: the video file, its thumbnail, duration, size, dimensions, recording date and session name. A video you film shows you, and may show other people and places: you choose to upload it.

e) Subscription. Your subscription status (active, trial, expiry date, renewal, store, product), provided by our payment provider. We never have access to your payment details, which are handled only by Apple or Google.

f) Anti-abuse fingerprint for free videos. To prevent the same person from getting the free videos several times by creating a new account, we keep a non-reversible fingerprint (salted hash) of your Google or Apple identifier and the number of free videos used. It contains neither your email nor your account identifier and cannot be used to find you.

g) Suggestions and bug reports. If you write to us from the app: your message, the app version, the platform and your device model.

h) Usage statistics. Anonymous usage events (see section 5).

i) Crash reports. When the app crashes: its technical state at that moment (error trace, device model and system, app version, installation identifier).

j) Video page and reports. When someone opens a video link or visits the website, our hosting providers process technical connection data (IP address, browser, date). A video report contains the video identifier and the reason entered; we do not record the identity of the person reporting.

• Providing the app (timers, history, sync, saved timers, customization, videos, share links, watches, TV): performance of our contract (the Terms of Service).
• Managing the subscription and trial: performance of the contract.
• Preventing abuse of free videos, securing the service, fighting fraud: our legitimate interest in protecting the service and its business model.
• Fixing crashes: our legitimate interest in providing a reliable app.
• Anonymous usage statistics: our legitimate interest in improving the app; you can object at any time in Settings (section 5).
• Handling your messages, reports and requests: our legitimate interest, or compliance with a legal obligation for reports of unlawful content.
• Complying with our legal obligations (accounting, tax, requests from authorities): legal obligation.

To know which features are used, the app sends usage events to Google Firebase Analytics: opening the subscription screen, purchase, restore, starting and finishing a timer (type, duration), WOD scan, creating a saved timer, sharing, recording a video, connecting to a TV, linking or signing out of an account, deleting data, sending a suggestion; plus a few properties (subscriber or not, language, theme, sound pack).

Never the content: not your WOD text, not your session names, not your email, not your videos. These events are not linked to your identity and are not used for targeted advertising.

You can turn this off at any time: Settings → About → Anonymous usage statistics.

The app contains no ads and does not read your device's advertising identifier.

If we ever measure the performance of our advertising campaigns (for example with Meta), we will update this policy before any rollout and, on iOS, we will ask for your permission through Apple's system prompt (“App Tracking Transparency”); without your consent, no tracking data will be shared.

Your data is accessible only to us and to the technical providers that help us run the service, bound by contract and processing it only on our instructions:

• Supabase (database, authentication, video storage, server functions), infrastructure configured in Europe (EEA).
• RevenueCat (subscription management), United States. Receives your technical identifier and the purchase events sent by Apple or Google.
• Google Firebase (Analytics, Crashlytics), United States.
• Google and Apple for account sign-in, and Apple and Google for payments through their stores, each under its own privacy policy.
• Amazon Web Services (website hosting), European Union (Paris).
• On the website only and with your consent: Google Analytics, Meta and Microsoft Clarity (see the Cookie Policy).

Shared videos: anyone who has a video's link can watch and download it. The link is not indexed by search engines, but we cannot control who you send it to or what recipients do with it.

Chromecast / TV: the timer state and the WOD text are sent to the screen you choose, over your local network.

We may disclose data to authorities when required by law and, if the business is transferred, to the acquirer, who will be bound by this policy.

Our data is hosted in Europe. Some providers (RevenueCat, Google, Apple) may nevertheless process data in the United States or other countries outside the European Union. These transfers rely on the EU-US Data Privacy Framework adequacy decision where the provider is certified, or on the European Commission's standard contractual clauses, with additional safeguards where needed.

• Anonymous account with no data at all (no session, timer, video or subscription): deleted after 30 days of inactivity.
• Account, anonymous or not, with data: kept while you use the app, then deleted after 5 years of inactivity.
• Uploaded videos: kept as long as your account exists, including after your subscription ends (the link is then disabled, except for free videos), until you delete them or delete your account.
• Subscription status: for the life of the account; transaction records are kept by Apple, Google and RevenueCat under their own obligations.
• Anti-abuse fingerprint for free videos: kept after account deletion, for as long as free videos exist, to prevent them from being claimed again.
• Suggestions and bug reports: kept without any link to your account after it is deleted.
• Video reports: 12 months after the report is handled.
• Usage statistics and crash reports: according to the retention configured in Firebase, at most 14 months for usage events and 90 days for crash reports.
• Hosting providers' technical logs: limited period set by the provider, for security.

These periods apply unless a longer retention is required by law, or needed to establish, exercise or defend our rights.

In the app: Settings → Delete my data. Available to everyone, with or without an account. We then delete your account, history, saved timers, customization and the files of your uploaded videos; share links stop working. What remains: the videos in your phone's gallery, the anti-abuse fingerprint described above, and your suggestions, with no link to you.

Deleting your data does not cancel your subscription: to stop it, cancel it in your App Store or Google Play account settings.

You can also request deletion by email at contact@simplewodtimer.com.

Under the GDPR and French data protection law, you have the right to access, rectify, erase, restrict, port and object to the processing of your data, and to give instructions about your data after your death.

To exercise them: contact@simplewodtimer.com, from the address linked to your account or stating the identifier shown in the app. We may ask you to prove your identity if in doubt. We reply within one month.

You can lodge a complaint with the CNIL (www.cnil.fr) or the data protection authority of your country.

United States residents (including California): you can request to know, correct and delete the data we hold about you. We do not sell your data and do not share it for cross-context behavioral advertising. We will not treat you differently for exercising these rights.

The app is not directed to children under 13 and we do not knowingly collect their data. In France, a minor under 15 needs parental consent to create an account. If you believe a child has provided us with data, contact us and we will delete it.

• Camera and microphone: film a qualification video, scan a WOD. Only when you use these features.
• Photos: save your videos to the gallery; read access only if you choose to upload an older video.
• Music (Premium): show and control the music playing. On Android, notification access is used only to read the title currently playing; no other notification is read.
• Local network: find your TV or Chromecast.

You can withdraw these permissions at any time in your phone's settings; the related features will then no longer be available.

Communications with our servers are encrypted (HTTPS). Each user can access only their own data (row-level security rules in the database). Videos are stored privately and are only served through signed links valid for a few hours, as long as the share link is active. As no method is infallible, we cannot guarantee absolute security; in the event of a data breach that poses a risk to you, we will inform you as required by law.

The website uses one strictly necessary cookie (locale, the language you chose) and, only with your consent, audience measurement and advertising tools (Google Analytics, Meta Pixel, Microsoft Clarity), never on shared video pages. You can accept or refuse through the banner, and change your mind at any time with “Manage cookies”.

Details are in the Cookie Policy.

We may change this policy, in particular for a new feature or a new provider. The update date is shown at the top of the page. For any significant change, we will inform you in the app before it takes effect.