This privacy statement tells you what to expect when we process your personal information. This is the main privacy statement for Aspira, however, some of our services may have additional privacy notices which will be provided to you when you engage or register for such a service. It is important for you to read this statement in full to understand how we use your data and your rights in relation to your data.
Last Updated: 10-12-25
Aspira (“we”, “us”, “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use the Aspira mobile application (“the App”) and the Aspira website (“the Website”), including all related online services, APIs, and integrations. It is written to comply with the UK GDPR, EU GDPR, and other applicable privacy laws.
1. Information We Collect
We collect information to deliver and improve both the App and Website. This includes:
1.1 Account Information
• Name, email address, profile images
• Date of birth, sex, height, and preferences
• Authentication details and account activity timestamps
1.2 Workout, Training & App Usage Data
• Logged workouts, exercises, sets, reps, weights, notes
• Workout summaries, statistics, and trends
• Training preferences, workout hour, and personal settings
1.3 Health & Body Data
• Weight, BMI, body measurements
• Health records imported from third-party services (e.g., Withings)
• Progress photos, videos, and body metrics
1.4 Device & Technical Data (App & Website)
• Device model, OS version, app version
• Push notification tokens
• Browser type, IP address, screen resolution
• Log files, crash reports, error diagnostics
1.5 Media Uploads (App)
• Photos and videos uploaded for workouts, progress, or profile
• Automatically created thumbnails, posters, and video streams
1.6 Website Interaction Data
• Page views and navigation patterns
• Form submissions (e.g., contact forms)
• Cookies and analytics data (if enabled)
1.7 Social Interaction Data (App)
• Follows, likes, comments, shared workouts
• Visibility settings for public, private, or friends-only content
1.8 Feedback & Support
• Feedback submissions and support queries
2. GDPR Compliance
We comply with the United Kingdom General Data Protection Regulation (UK GDPR), the EU General Data Protection Regulation (EU GDPR), and related laws.
2.1 Lawful Bases for Processing
We process data under:
• Contract – to provide and operate the App and Website
• Consent – for optional features such as notifications, analytics, cookies, media uploads, and third‑party health integrations
• Legitimate Interests – to ensure security, improve functionality, prevent abuse, and analyse anonymised usage
• Legal Obligation – to comply with law or respond to lawful requests
2.2 Your GDPR Rights
• Right of Access
• Right to Rectification
• Right to Erasure
• Right to Restrict Processing
• Right to Object
• Right to Data Portability
• Right to Withdraw Consent
• Right to lodge a complaint (e.g., ICO in the UK)
We respond to data-access requests within GDPR-required timelines.
2.3 International Data Transfers
Where data is transferred outside the UK/EU, we apply:
• Adequacy decisions
• Standard Contractual Clauses (SCCs)
• UK International Data Transfer Addendum (IDTA)
• Encryption and other safeguards
2.4 Data Protection by Design & Default
We implement:
• Encryption of sensitive data
• Secure storage and access controls
• Minimal data collection
• Regular testing and audits
• Anonymisation where appropriate
2.5 Data Processors
We use trusted third parties to provide hosting, email delivery, analytics, cloud storage, and push notification services. All processors operate under GDPR-compliant agreements.
2.6 Optional Third-Party Integrations
Features such as Withings integration require explicit consent and can be enabled or disabled at any time.
2.7 Children’s Data
Aspira is intended for users aged 16+. We do not knowingly process data for users under this age.
2.8 Data Protection Contact
Email: aspira@alderton.org.uk
Address: 53 Mulberry Court, Norwich, NR8 6YJ
3. How We Use Your Information
We use your information to:
• Deliver core App and Website functionality
• Provide personalised workout recommendations
• Generate statistics, charts, and training insights
• Send notifications, reminders, and updates
• Enhance platform performance and security
• Respond to support requests and feedback
We never sell your personal information.
4. Website Cookies & Tracking
The Website may use cookies for:
• Essential functionality (login, navigation)
• Analytics (e.g., website performance insights)
• Remembering preferences (e.g., dark mode)
Where required, you will be asked for cookie consent.
5. How Your Information Is Shared
We may share your information with:
• Service providers (hosting, analytics, storage, email, notifications)
• Withings or similar services (if you connect your account)
• Other users when you choose to share workouts or social activity
• Legal authorities if required
We never share your data with advertisers.
6. Data Security
We protect your data using:
• Encryption in transit and at rest
• Secure cloud infrastructure
• Role-based access permissions
• Regular vulnerability assessments
7. Data Retention
We retain data only as long as necessary:
• Workout and health history remain until deleted by you
• Media files remain until removed by you
• Diagnostic logs may auto-delete after a set period
• Account deletion removes all personal data unless legally required to retain specific information
8. Your Choices & Controls
You can:
• Change notification preferences
• Edit or delete workouts, health data, or media
• Download your data
• Disconnect third-party integrations
• Delete your account at any time
9. Age Requirements
Aspira is intended for users aged 16 or older.
10. Changes to This Policy
We may update this Privacy Policy. Significant changes will be communicated via the App or Website.
11. Contact Us
Email: aspira@alderton.org.uk
Website: https://aspira-fitness.com/
Supervisory Authority (UK): Information Commissioner’s Office (ICO)
For independent advice about data protection issues, you can contact the Information Commissioner:
Information Commissioner
Wycliffe House, Water Lane
Wilmslow
Cheshire
SK9 5AF
Phone: 0303 123 1113
Email: casework@ico.org.uk
Website: www.ico.org.uk