Privacy Notice

This notice explains what personal information the Sugar Rogue app collects, why we use it, and the rights you have over it. We have tried to keep it plain and short. If anything is unclear, please ask a coach.

Who we are

Sugar Rogue is a gym based in Cwmbran. For anything to do with your data, or to exercise any of the rights below, contact us at [add your official contact email].

What we collect

Only what the app needs to work for you:

• Your email address, to sign you in and save your history to you. We use one-tap email login links, so we never store a password.
• Your name, if you choose to give it, and an optional profile photo if you add one.
• Your training data: your Athlete Passport and Prescriptor answers and results, your readiness check-ins (sleep, legs, energy), your nutrition logs, and any health self-reports (steps, sleep, sitting).
• Event RSVPs: whether you have marked yourself going to, or spectating, an event.

Why we use it, and our lawful basis

We use your information to run the app for you: to sign you in, to build your scores and plans, to track your consistency, and to know numbers for events. Our lawful basis for the core service is that it is necessary to provide the service you have asked us for.

Some of what you enter, such as sleep, energy and other wellbeing data, can count as health-related data, which the law protects more strongly. We only collect and use that data with your explicit consent, which we ask for when you first log in. You can withdraw that consent at any time (see your rights below), and you never have to fill in those check-ins to use the rest of the app.

Who we share it with

We do not sell your data and we do not use it for advertising. We use two trusted service providers to run the app on our behalf:

• Cloudflare hosts the app and stores your data securely.
• Resend sends your login-link emails.

These providers act on our instructions only. We do not share your data with anyone else unless the law requires it.

Where it is stored and for how long

Your data is stored in Cloudflare's secure infrastructure. We keep it for as long as you have an account with the app. Login links expire within minutes, and login sessions expire after a period of inactivity. If you delete your account, we remove your personal data as described below. Events you have added to the shared calendar may remain on the calendar for the gym, but with your name removed.

Your rights

Under UK data protection law you have the right to:

• See your data — you can download everything we hold on you from the app at any time (Profile, then Privacy and data, then Download my data).
• Delete your account — you can erase your account and your personal data from the app yourself (Profile, then Privacy and data, then Delete my account).
• Withdraw consent — deleting your account or your check-in data withdraws consent for the health-related data. Ask a coach if you want help.
• Correct or object — contact us and we will put it right.

You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk if you are unhappy with how we handle your data, though we hope you would talk to us first.

Cookies

The app uses a single essential cookie to keep you signed in. It is not used for tracking or advertising. Without it, the app cannot remember that you are logged in.

Children

The app is intended for adult members. If a member is under 18, please speak to a coach so we can handle their data appropriately.

Changes to this notice

If we change how we use your data in a meaningful way, we will update this notice and ask you to review it again the next time you log in. The version and date are shown at the top.