WORK-OUT HUMAN PERFORMANCE PLATFORM (WO-HPP) – PRIVACY POLICY
Work-Out Human Performance Platform Privacy Policy
1. Introduction
Welcome to the Work-Out Human Performance Platform (“WO-HPP”).
At Work-Out, we are committed to protecting your privacy and processing your Personal Data in a transparent, secure and responsible manner. This Privacy Policy explains how we collect, use, disclose, store and otherwise process your Personal Data when you use WO-HPP or otherwise interact with Work-Out.
This Privacy Policy is intended to help you understand:
- what Personal Data we collect;
- how and why we process your Personal Data;
- when we share your Personal Data;
- how we protect your Personal Data; and
- the rights you have under applicable data protection laws.
Depending on how WO-HPP is made available to you, certain processing activities may also be governed by your Entity’s own privacy policies or notices. Where applicable, this Privacy Policy should be read together with the Work-Out User Terms & Conditions, the Work-Out Entity Terms & Conditions, and our Cookie Policy.
By using WO-HPP, you acknowledge that you have read this Privacy Policy.
2. Who we are
Work-Out is the commercial brand of Stratco BV, a company incorporated under the laws of Belgium.
Work-Out develops and operates the Work-Out Human Performance Platform (“WO-HPP”), a software platform that supports Human Performance across a wide range of environments, including sports, companies, healthcare, education, Defence, Police and Fire Services.
Depending on the deployment of WO-HPP and the services provided, Work-Out may process Personal Data either on its own behalf or on behalf of an Entity using the platform. More information about these roles is provided in Section 4 – Roles and Responsibilities.
For the purposes of this Privacy Policy, you can contact Work-Out using the following details:
Stratco BV
Commercial brand: Work-Out
📧 Email: info@workout.sport
🌐 Website: https://www.workout.sport
3. Scope of this Privacy Policy
This Privacy Policy applies to the processing of Personal Data by Work-Out in connection with:
- the WO-HPP mobile applications;
- the WO-HPP web applications;
- the Work-Out website;
- communications between you and Work-Out, including customer support, notifications and other service-related communications; and
- other services or interactions that refer to this Privacy Policy.
WO-HPP may be provided directly by Work-Out or through an Entity, such as a sports organisation, company, healthcare organisation, educational institution, Defence organisation, Police service or Fire Service.
Where WO-HPP is provided through an Entity, that Entity may provide additional privacy information describing how it processes Personal Data within its own organisation. Such information supplements this Privacy Policy and may apply to your use of WO-HPP.
This Privacy Policy does not apply to third-party websites, applications or services that are not operated by Work-Out, even where they may integrate with or be accessible through WO-HPP. Their use is governed by the privacy policies of the respective third parties.
4. Roles and Responsibilities
4.1 Work-Out as Data Controller
Work-Out acts as a Data Controller where it determines the purposes and means of processing Personal Data, including, for example:
- operating and maintaining the Work-Out website;
- managing Work-Out customer relationships;
- administering Work-Out accounts where applicable;
- handling customer support requests;
- complying with legal and regulatory obligations; and
- protecting the security and integrity of WO-HPP.
4.2 Work-Out as Data Processor
Where WO-HPP is provided through an Entity, Work-Out generally acts as a Data Processor, processing Personal Data solely on behalf of and under the documented instructions of the relevant Entity.
Examples of such Entities include, but are not limited to:
- sports organisations;
- companies;
- healthcare organisations;
- educational institutions;
- Defence organisations;
- Police services; and
- Fire Services.
In these situations, the Entity generally determines the purposes and means of processing Personal Data and acts as the Data Controller.
4.3 Responsibilities of the Entity
Where an Entity acts as the Data Controller, it is responsible for:
- determining which Personal Data is collected and processed;
- establishing the applicable legal basis for processing;
- defining applicable retention periods;
- responding to data subject requests where required by law; and
- complying with its obligations under applicable data protection legislation.
Work-Out processes Personal Data only to the extent necessary to provide WO-HPP and related services in accordance with its contractual obligations and applicable law.
5. Personal Data We Collect
The categories of Personal Data processed through WO-HPP depend on how the platform is configured, the services used and the role of the User within the platform.
Depending on the deployment, WO-HPP may process one or more of the following categories of Personal Data.
5.1 Identity Information
Examples include:
- name;
- date of birth;
- gender;
- profile photographs;
- employee, student or member identifiers;
- other identifiers provided by you or your Entity.
5.2 Contact Information
Examples include:
- email address;
- telephone number;
- postal address;
- emergency contact information where applicable.
5.3 Account and Authentication Information
Examples include:
- username;
- language preferences;
- account settings;
- authentication information;
- multi-factor authentication information where enabled.
5.4 Human Performance Information
Examples include:
- training programmes;
- workouts;
- performance metrics;
- questionnaires;
- assessments;
- goals;
- wellbeing information;
- recovery information;
- readiness indicators;
- notes and observations entered by authorised MD-Team Members.
5.5 Health and Medical Information
Where applicable, WO-HPP may process health-related information, including:
- injuries;
- illnesses;
- medical history;
- medications;
- allergies;
- physiological measurements;
- biometric information;
- medical assessments;
- rehabilitation information.
The categories of Health Data processed depend on the deployment of WO-HPP and the services provided by the relevant Entity.
5.6 Nutrition Information
Examples include:
- nutritional plans;
- dietary preferences;
- food intake;
- body composition;
- nutritional assessments.
5.7 Connected Device and Third-Party Data
Where you choose to connect compatible third-party services or wearable devices, WO-HPP may receive information such as:
- activity data;
- heart rate;
- heart rate variability (HRV);
- sleep data;
- stress indicators;
- recovery metrics;
- training sessions;
- other Human Performance information made available by the connected service.
5.8 Technical and Usage Information
Examples include:
- device information;
- operating system;
- browser information;
- IP address;
- application usage;
- log files;
- diagnostic information;
- cookies and similar technologies where applicable.
5.9 Audit and Security Information
To protect WO-HPP and comply with legal, contractual and security obligations, Work-Out may process:
- authentication logs;
- audit logs;
- security events;
- access records;
- administrative actions;
- system activity records.
6. Special Categories of Personal Data
Depending on the deployment of WO-HPP, Work-Out may process Special Categories of Personal Data, including Health Data, as defined under Article 9 of the General Data Protection Regulation (“GDPR”).
Such data may include, where applicable:
- medical information;
- injury information;
- physiological measurements;
- biometric information;
- mental wellbeing information;
- rehabilitation information;
- other Human Performance information that qualifies as Special Category Personal Data under applicable law.
The processing of Special Categories of Personal Data always depends on the specific deployment of WO-HPP and the services provided by the relevant Entity.
Where required by applicable law, such processing is carried out on an appropriate legal basis, which may include:
- the explicit consent of the Data Subject;
- the provision of healthcare or Human Performance services by authorised professionals;
- employment, occupational health or social security obligations;
- reasons of substantial public interest;
- other lawful grounds provided for under Article 9 GDPR or other applicable legislation.
Work-Out does not process Special Categories of Personal Data for purposes incompatible with those for which the data was originally collected and implements appropriate technical and organisational measures designed to protect such information.
7. How We Collect Personal Data
Work-Out may collect Personal Data from a variety of sources depending on how WO-HPP is deployed and the services being used.
7.1 Information You Provide Directly
You may provide Personal Data directly when you:
- create or manage your account;
- complete questionnaires or assessments;
- record training, wellbeing or Health Data;
- communicate through WO-HPP;
- contact Work-Out for support; or
- otherwise use the features available within WO-HPP.
7.2 Information Provided by Your Entity
Where WO-HPP is provided through an Entity, the Entity may create, import or manage Personal Data relating to you, including account information, organisational information, training programmes, assessments and other Human Performance information.
7.3 Information Provided by Authorised MD-Team Members
Authorised MD-Team Members may create, update or manage Personal Data relating to you within WO-HPP in accordance with their professional responsibilities and the instructions of the relevant Entity.
Depending on the deployment, this may include training information, Health Data, medical information, wellbeing information, assessments, observations and other Human Performance information.
7.4 Information from Connected Devices and Third-Parry Services
Where you or your Entity choose to connect compatible wearable devices, health platforms or other Third-Party Services, WO-HPP may receive Personal Data from those services in accordance with the permissions granted by you or your Entity.
7.5 Automatically Collected Information
When you access or use WO-HPP, certain technical and usage information may be collected automatically, including device information, application activity, authentication events, diagnostic information, cookies (where applicable) and security-related logs.
7.6 Information from Other Lawful Sources
Where permitted by applicable law, Work-Out or your Entity may receive Personal Data from other lawful sources, including system integrations, identity providers or other services connected to WO-HPP.
8. Why We Process Your Data
Work-Out processes Personal Data only where necessary for legitimate business, operational or legal purposes and in accordance with applicable data protection laws.
Depending on the deployment of WO-HPP, Personal Data may be processed for one or more of the following purposes:
- providing and operating WO-HPP;
- creating and managing user accounts;
- authenticating users and protecting access to WO-HPP;
- enabling Human Performance services delivered by your Entity;
- facilitating communication between Users, MD-Team Members and authorised administrators;
- supporting training, wellbeing, health, medical and performance management;
- processing information received from connected devices and Third-Party Services;
- generating reports, dashboards, analytics and performance insights;
- improving the usability, reliability and functionality of WO-HPP;
- monitoring platform performance and maintaining system security;
- detecting, investigating and preventing fraud, abuse or other unlawful activities;
- providing customer support and responding to enquiries;
- complying with legal, regulatory and contractual obligations; and
- protecting the rights, property and security of Work-Out, its customers and its users.
Work-Out does not sell Personal Data and does not process Personal Data for purposes incompatible with those described in this Privacy Policy.
9. Legal Bases for Processing
Work-Out processes Personal Data only where there is a valid legal basis under applicable data protection laws.
Depending on the circumstances and the deployment of WO-HPP, Personal Data may be processed on one or more of the following legal bases.
9.1 Performance of a Contract
Where processing is necessary to provide WO-HPP or to fulfil contractual obligations relating to the use of the platform.
9.2 Compliance with Legal Obligations
Where processing is necessary to comply with applicable laws, regulations, judicial decisions or other legal obligations.
9.3 Legitimate Interests
Where processing is necessary for the legitimate interests of Work-Out or the relevant Entity, provided such interests are not overridden by the rights and freedoms of the Data Subject.
Examples may include:
- maintaining the security of WO-HPP;
- preventing fraud and abuse;
- improving platform performance;
- protecting users and infrastructure; and
- responding to operational incidents.
9.4 Consent
Where required by applicable law, Personal Data is processed based on your freely given, specific, informed and unambiguous consent.
Where processing is based on consent, you may withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the consent was withdrawn.
9.5 Special Categories of Personal Data
Where WO-HPP processes Special Categories of Personal Data, including Health Data, processing is carried out only where an appropriate legal basis exists under Article 9 GDPR or other applicable legislation.
Depending on the deployment of WO-HPP, this may include:
- the explicit consent of the Data Subject;
- the provision of healthcare or Human Performance services by authorised professionals;
- employment, occupational health or social security obligations;
- reasons of substantial public interest;
- preventive or occupational medicine; or
- other lawful grounds provided for under applicable law.
Where Work-Out acts as a Data Processor, the applicable legal basis for processing is generally determined by the relevant Data Controller, such as the Entity providing WO-HPP to its Users.
10. Wearables and Third-Party Integrations
WO-HPP may integrate with compatible wearable devices, health platforms, identity providers and other Third-Party Services to enhance the functionality of the platform.
Where you or your Entity choose to enable such integrations, WO-HPP may receive, process or exchange Personal Data with the relevant Third-Party Service in accordance with the permissions granted and the applicable configuration of WO-HPP.
The categories of Personal Data exchanged depend on the specific Third-Party Service and may include Human Performance information, Health Data, authentication information or other data necessary to provide the requested functionality.
The availability, functionality and compatibility of Third-Party Services are determined by the respective providers and may change, be suspended or be discontinued at any time. Work-Out is not responsible for the availability, accuracy, security or privacy practices of Third-Party Services.
Your use of any Third-Party Service remains subject to the terms, conditions and privacy policies of the relevant provider.
11. Sharing Personal Data
Work-Out only shares Personal Data where necessary to provide WO-HPP, comply with legal obligations or support the legitimate operation of the platform.
Depending on the deployment of WO-HPP, Personal Data may be shared with one or more of the following categories of recipients.
11.1 Your Entity
Where WO-HPP is provided through an Entity, Personal Data may be shared with that Entity in accordance with its role as Data Controller and the services it provides.
11.2 Authorised MD-Team Members and Administrators
Authorised MD-Team Members, administrators and other authorised users within your Entity may access Personal Data where necessary to perform their responsibilities and in accordance with the permissions assigned within WO-HPP.
11.3 Service Providers and Subprocessors
Work-Out may engage carefully selected service providers and subprocessors that support the operation, hosting, maintenance, security and delivery of WO-HPP.
Where such providers process Personal Data on behalf of Work-Out, appropriate contractual and organisational safeguards are implemented in accordance with applicable data protection laws.
11.4 Third-Party Service Providers
Where you or your Entity choose to connect Third-Party Services to WO-HPP, Personal Data may be exchanged with those providers as required to deliver the requested functionality.
11.5 Legal and Regulatory Authorities
Work-Out may disclose Personal Data where required to comply with applicable laws, judicial proceedings, lawful requests from competent authorities or other legal obligations.
11.6 Corporate Transactions
Where permitted by applicable law, Personal Data may be transferred as part of a merger, acquisition, corporate restructuring, financing transaction or sale of assets, provided appropriate safeguards continue to apply.
Work-Out does not sell Personal Data to third parties.
12. International Transfers
Work-Out primarily processes Personal Data within the European Economic Area (EEA).
Where Personal Data is transferred to a country outside the EEA, Work-Out ensures that appropriate safeguards are implemented in accordance with applicable data protection laws.
Depending on the circumstances, such safeguards may include:
- an adequacy decision adopted by the European Commission;
- the European Commission’s Standard Contractual Clauses (SCCs);
- other legally recognised transfer mechanisms; or
- additional technical, organisational or contractual safeguards where required.
Where Work-Out acts as a Data Processor, international transfers may also be subject to the instructions of the relevant Data Controller.
Information regarding applicable international transfer safeguards may be requested by contacting Work-Out using the contact details provided in this Privacy Policy.
13. Data Retention
Work-Out retains Personal Data only for as long as necessary to fulfil the purposes described in this Privacy Policy, comply with applicable legal obligations, resolve disputes, enforce agreements and maintain the security and integrity of WO-HPP.
The applicable retention period depends on factors including:
- the type of Personal Data being processed;
- the services provided through WO-HPP;
- applicable legal and regulatory obligations;
- contractual obligations;
- the retention policies of the relevant Entity where Work-Out acts as a Data Processor; and
- legitimate operational and security requirements.
Where Personal Data is no longer required, Work-Out will securely delete, anonymise or otherwise dispose of the data in accordance with applicable law and its internal data retention procedures.
Where Work-Out acts as a Data Processor, Personal Data is retained and deleted in accordance with the documented instructions of the relevant Data Controller, unless applicable law requires otherwise.
14. Security
Work-Out is committed to protecting the confidentiality, integrity and availability of Personal Data processed through WO-HPP.
To help safeguard Personal Data, Work-Out implements appropriate technical and organisational security measures designed to protect against accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to Personal Data.
Depending on the deployment of WO-HPP, these measures may include:
- encryption of Personal Data in transit and, where appropriate, at rest;
- role-based access controls;
- authentication and multi-factor authentication where supported;
- security monitoring and logging;
- audit trails;
- secure backup and recovery procedures;
- vulnerability management and security updates;
- secure software development practices; and
- incident response and business continuity procedures.
Security measures are continuously reviewed and may evolve over time to address changing technologies, operational requirements and emerging security threats.
While Work-Out applies appropriate safeguards, no method of electronic transmission, storage or processing can be guaranteed to be completely secure. Users are responsible for protecting their account credentials and should immediately report any suspected unauthorised access or security incident relating to their account.
15. Your Privacy Rights
Subject to applicable data protection laws and the specific deployment of WO-HPP, you may have one or more of the following rights regarding your Personal Data:
- the right to access your Personal Data;
- the right to request the correction of inaccurate or incomplete Personal Data;
- the right to request the deletion of Personal Data where applicable;
- the right to request the restriction of processing;
- the right to object to certain processing activities;
- the right to receive your Personal Data in a structured, commonly used and machine-readable format where applicable;
- the right to withdraw your consent where processing is based on consent;
- the right not to be subject to decisions based solely on automated processing where provided by applicable law; and
- the right to lodge a complaint with the competent data protection authority.
Where Work-Out acts as the Data Controller, requests concerning these rights may be submitted directly to Work-Out using the contact details provided in this Privacy Policy.
Where Work-Out acts as the Data Processor on behalf of an Entity, requests relating to your Personal Data should generally be directed to the relevant Entity acting as the Data Controller. Where appropriate, Work-Out will assist the Data Controller in responding to such requests in accordance with applicable law and contractual obligations.
The exercise of certain rights may be subject to legal or regulatory limitations, including obligations relating to healthcare, employment, Defence, law enforcement, public safety or other applicable legal requirements.
16. Cookies
Work-Out uses cookies and similar technologies to operate the Work-Out website, improve user experience, analyse website usage and, where applicable, support certain platform functionalities.
For detailed information about the cookies we use, the purposes for which they are used and how you can manage your cookie preferences, please refer to our Cookie Policy.
Where required by applicable law, Work-Out will obtain your consent before placing non-essential cookies on your device.
17. Changes to this Privacy Policy
Work-Out may update this Privacy Policy from time to time to reflect changes in applicable laws, regulatory requirements, WO-HPP, our services or our business operations.
Where required by applicable law or where changes materially affect the way Personal Data is processed, Work-Out will provide appropriate notice through WO-HPP, our website, by email or through other appropriate communication channels.
The most recent version of this Privacy Policy will always be available on the Work-Out website and, where applicable, within WO-HPP. The version published on the website supersedes all previous versions.
18. Contact
If you have any questions about this Privacy Policy, the processing of your Personal Data or wish to exercise your privacy rights, you can contact Work-Out using the details below.
Stratco BV
Commercial brand: Work-Out
📧 Privacy enquiries: info@workout.sport
📧 Legal enquiries: info@workout.sport
🌐 Website: https://www.workout.sport
Where Work-Out acts as a Data Processor on behalf of an Entity, you may also need to contact the relevant Entity regarding the processing of your Personal Data, as it may act as the applicable Data Controller.
At Work-Out, your privacy matters. If you’re using our mobile or web app (the Work-Out Platform), this document explains what personal data we collect, why we collect it, and how you can manage your privacy.
If you have any questions, feel free to reach out at info@workout.sport.
Who we are
Work-Out is the brand operated by Stratco BV, based in Belgium. We offer a mobile platform where individuals (Users) can connect with personal Coaches, who use the web platform, and receive tailored coaching.
Work-Out (Stratco BV) is the data controller, which means we are responsible for how your data is used.
What this policy covers
This Privacy Policy applies to:
- The Work-Out mobile app (iOS & Android)
- Our website (www.workout.sport)
- Any communications between you and Work-Out (email, app notifications, customer support, etc.)
What we collect and why
We only collect what’s needed to deliver our services safely and effectively. Some data you give us directly, other data we collect automatically to improve your experience.
Data you give us directly
When creating an account and using the app, we may ask for:
Contact info (name, email, phone)
Account info (username, password, language)
Training info (goals, preferences, habits, availability)
Health data (age, height, weight, injuries, stress, sleep, energy, soreness)
Medical info (if relevant to your training)
Well-being data (mood, motivation, etc.)
This is so your Coach can personalise your plan, and we can improve your experience. You don’t pay to use the platform, but in order to receive coaching, you must connect with a Coach. Without that connection, the app won’t function as intended.
Data we collect automatically
When you use the app or visit our site, we collect usage data such as:
Device & browser type
App activity
IP address & network info
Cookie data (for analytics & performance)
We collect this data to make the app work better, understand how it’s used, and improve our features.
Data from others
We may receive limited data from:
Coaches connected to you
Third-party tools you link (e.g., wearables, etc.)
Service providers (e.g., hosting, analytics, etc.)
Data from Third-Party sources
The Work-Out Platform allows users and MD-team members to import data from external platforms or services. This may include, but is not limited to:
- Contact details (such as email addresses),
- Historical activity and performance data (such as heart rate, HRV, sleep data, training sessions, and other sport-related metrics).
Sensitive personal data (such as health or performance-related metrics). Such data is processed only within the scope of the platform’s functionalities and based on the instructions of the user or MD-team member.
Where MD-team members input or manage health-related data of Users, they act as independent data controllers for such data. Work-Out acts as a processor providing the technical infrastructure for storage and processing.
Such data is provided to the Work-Out Platform by the user or MD-team member who initiates the import.
The Work-Out Platform may, over time, support additional integrations or data import/export functionalities with third-party services.
Responsibilities for imported data
The user or MD-team member importing data from third-party platforms confirms that they are legally authorised to do so and that the sharing of such data complies with applicable data protection laws.
Work-Out does not verify the origin, ownership, or authorisation related to imported data and acts solely as a processor of such data within the Work-Out Platform.
Where MD-team members upload or import personal data of their athletes, they act as independent data controllers for that data. The Work-Out Platform acts as a processor providing the technical platform for storage and processing.
Sensitive data (special categories)
To make the Work-Out Platform truly helpful, you can choose to share sensitive data like medical history, or injury status, etc.
We only process this with your explicit consent, which you give during onboarding and by filling in this data yourself in the Work-Out Platform. You can withdraw that consent any time by removing this data within the Platform.
The Work-Out platform allows users and MD-team members to manually input health-related information. This data may qualify as sensitive personal data (health data) under applicable data protection laws. Health and medical data is only collected when voluntarily entered by the User or by an authorised MD-team member within the platform. Work-Out does not automatically collect or import such data from external sources.
Processing of health-related data is based on:
The explicit consent of the User; and/or
The provision of services requested by the User within the platform; and/or
Processing under the responsibility of an MD-team member acting in a professional capacity.
Users and MD-team members may update or delete such data at any time within the platform.
Health and medical data is processed solely for the purpose of providing performance, coaching, and wellbeing-related functionalities within the platform.
What we do with your data
We use your data to:
Power your personal training plan
Help your Coach tailor your workouts
Notify you about updates, reminders, and goals
Improve the app (analytics, bug fixes, etc.)
Comply with legal obligations (GDPR, audits, local laws and regulations, etc.)
We do not sell your data.
Who we share data with
We may share your data only when it’s necessary, including with:
Your connected Coach(es)
Our service providers (e.g., cloud hosting, support tools)
Payment providers (if you purchase physical and/or digital goods)
Legal or regulatory bodies (only when required)
If we ever change this, we’ll let you know in advance.
Your rights
You have full control over your data. At any time, you can:
Access your personal data
Correct incorrect or outdated data
Request deletion (right to be forgotten)
Object to certain processing
Withdraw consent for health/sensitive data, by removing this data yourself in the Platform
Request a copy of your data
To exercise these rights, email us at info@workout.sport with proof of identity.
How we keep your data safe
We apply both technical and organisational security measures, including:
Encrypted storage
Strict access control
Regular assessments and updates
Secure login and authentication processes
But: you are responsible for keeping your account credentials safe. If you think someone else is using your account, let us know immediately.
Data retention
We only keep your data as long as needed, either to provide the services or meet legal requirements. If you delete your account, we’ll delete and/or anonymise your personal data unless the law requires otherwise (e.g., for fraud prevention or recordkeeping).
Updates to this policy
We may update this Privacy Policy occasionally. If changes are significant, we’ll notify you via email or in the app.
You can always view the latest version on our website.
Contact
Got questions, feedback, or requests? Email us at info@workout.sport
At Work-Out, your privacy matters. If you’re using our mobile or web app (the Work-Out Platform), this document explains what personal data we collect, why we collect it, and how you can manage your privacy.
If you have any questions, feel free to reach out at info@workout.sport.
Who we are
Work-Out is the brand operated by Stratco BV, based in Belgium. We offer a mobile platform where individuals (Users) can connect with personal Coaches, who use the web platform, and receive tailored coaching.
Work-Out (Stratco BV) is the data controller, which means we are responsible for how your data is used.
What this policy covers
This Privacy Policy applies to:
- The Work-Out mobile app (iOS & Android)
- Our website (www.workout.sport)
- Any communications between you and Work-Out (email, app notifications, customer support, etc.)
What we collect and why
We only collect what’s needed to deliver our services safely and effectively. Some data you give us directly, other data we collect automatically to improve your experience.
Data you give us directly
When creating an account and using the app, we may ask for:
Contact info (name, email, phone)
Account info (username, password, language)
Training info (goals, preferences, habits, availability)
Health data (age, height, weight, injuries, stress, sleep, energy, soreness)
Medical info (if relevant to your training)
Well-being data (mood, motivation, etc.)
This is so your Coach can personalise your plan, and we can improve your experience. You don’t pay to use the platform, but in order to receive coaching, you must connect with a Coach. Without that connection, the app won’t function as intended.
Data we collect automatically
When you use the app or visit our site, we collect usage data such as:
Device & browser type
App activity
IP address & network info
Cookie data (for analytics & performance)
We collect this data to make the app work better, understand how it’s used, and improve our features.
Data from others
We may receive limited data from:
Coaches connected to you
Third-party tools you link (e.g., wearables, etc.)
Service providers (e.g., hosting, analytics, etc.)
Data from Third-Party sources
The Work-Out Platform allows users and MD-team members to import data from external platforms or services. This may include, but is not limited to:
- Contact details (such as email addresses),
- Historical activity and performance data (such as heart rate, HRV, sleep data, training sessions, and other sport-related metrics).
Sensitive personal data (such as health or performance-related metrics). Such data is processed only within the scope of the platform’s functionalities and based on the instructions of the user or MD-team member.
Such data is provided to the Work-Out Platform by the user or MD-team member who initiates the import.
The Work-Out Platform may, over time, support additional integrations or data import/export functionalities with third-party services.
Responsibilities for imported data
The user or MD-team member importing data from third-party platforms confirms that they are legally authorised to do so and that the sharing of such data complies with applicable data protection laws.
Work-Out does not verify the origin, ownership, or authorisation related to imported data and acts solely as a processor of such data within the Work-Out Platform.
Where MD-team members upload or import personal data of their athletes, they act as independent data controllers for that data. The Work-Out Platform acts as a processor providing the technical platform for storage and processing.
Sensitive data (special categories)
To make the Work-Out Platform truly helpful, you can choose to share sensitive data like medical history, or injury status, etc.
We only process this with your explicit consent, which you give during onboarding and by filling in this data yourself in the Work-Out Platform. You can withdraw that consent any time by removing this data within the Platform.
What we do with your data
We use your data to:
Power your personal training plan
Help your Coach tailor your workouts
Notify you about updates, reminders, and goals
Improve the app (analytics, bug fixes, etc.)
Comply with legal obligations (GDPR, audits, local laws and regulations, etc.)
We do not sell your data.
Who we share data with
We may share your data only when it’s necessary, including with:
Your connected Coach(es)
Our service providers (e.g., cloud hosting, support tools)
Payment providers (if you purchase physical and/or digital goods)
Legal or regulatory bodies (only when required)
If we ever change this, we’ll let you know in advance.
Your rights
You have full control over your data. At any time, you can:
Access your personal data
Correct incorrect or outdated data
Request deletion (right to be forgotten)
Object to certain processing
Withdraw consent for health/sensitive data, by removing this data yourself in the Platform
Request a copy of your data
To exercise these rights, email us at info@workout.sport with proof of identity.
How we keep your data safe
We apply both technical and organisational security measures, including:
Encrypted storage
Strict access control
Regular assessments and updates
Secure login and authentication processes
But: you are responsible for keeping your account credentials safe. If you think someone else is using your account, let us know immediately.
Data retention
We only keep your data as long as needed, either to provide the services or meet legal requirements. If you delete your account, we’ll delete and/or anonymise your personal data unless the law requires otherwise (e.g., for fraud prevention or recordkeeping).
Updates to this policy
We may update this Privacy Policy occasionally. If changes are significant, we’ll notify you via email or in the app.
You can always view the latest version on our website.
Contact
Got questions, feedback, or requests? Email us at info@workout.sport
At Work-Out, your privacy matters. If you’re using our mobile or web app (the Work-Out Platform), this document explains what personal data we collect, why we collect it, and how you can manage your privacy.
If you have any questions, feel free to reach out at info@workout.sport.
Who we are
Work-Out is the brand operated by Stratco BV, based in Belgium. We offer a mobile platform where individuals (Users) can connect with personal Coaches, who use the web platform, and receive tailored coaching.
Work-Out (Stratco BV) is the data controller, which means we are responsible for how your data is used.
What this policy covers
This Privacy Policy applies to:
- The Work-Out mobile app (iOS & Android)
- Our website (www.workout.sport)
- Any communications between you and Work-Out (email, app notifications, customer support, etc.)
What we collect and why
We only collect what’s needed to deliver our services safely and effectively. Some data you give us directly, other data we collect automatically to improve your experience.
Data you give us directly
When creating an account and using the app, we may ask for:
Contact info (name, email, phone)
Account info (username, password, language)
Training info (goals, preferences, habits, availability)
Health data (age, height, weight, injuries, stress, sleep, energy, soreness)
Medical info (if relevant to your training)
Well-being data (mood, motivation, etc.)
This is so your Coach can personalise your plan, and we can improve your experience. You don’t pay to use the platform, but in order to receive coaching, you must connect with a Coach. Without that connection, the app won’t function as intended.
Data we collect automatically
When you use the app or visit our site, we collect usage data such as:
Device & browser type
App activity
IP address & network info
Cookie data (for analytics & performance)
We collect this data to make the app work better, understand how it’s used, and improve our features.
Data from others
We may receive limited data from:
Coaches connected to you
Third-party tools you link (e.g., wearables, etc.)
Service providers (e.g., hosting, analytics, etc.)
Sensitive data (special categories)
To make the Work-Out Platform truly helpful, you can choose to share sensitive data like medical history, or injury status, etc.
We only process this with your explicit consent, which you give during onboarding and by filling in this data yourself in the Work-Out Platform. You can withdraw that consent any time by removing this data within the Platform.
What we do with your data
We use your data to:
Power your personal training plan
Help your Coach tailor your workouts
Notify you about updates, reminders, and goals
Improve the app (analytics, bug fixes, etc.)
Comply with legal obligations (GDPR, audits, local laws and regulations, etc.)
We do not sell your data.
Who we share data with
We may share your data only when it’s necessary, including with:
Your connected Coach(es)
Our service providers (e.g., cloud hosting, support tools)
Payment providers (if you purchase physical goods)
Legal or regulatory bodies (only when required)
If we ever change this, we’ll let you know in advance.
Your rights
You have full control over your data. At any time, you can:
Access your personal data
Correct incorrect or outdated data
Request deletion (right to be forgotten)
Object to certain processing
Withdraw consent for health/sensitive data, by removing this data yourself in the Platform
Request a copy of your data
To exercise these rights, email us at info@workout.sport with proof of identity.
How we keep your data safe
We apply both technical and organisational security measures, including:
Encrypted storage
Strict access control
Regular assessments and updates
Secure login and authentication processes
But: you are responsible for keeping your account credentials safe. If you think someone else is using your account, let us know immediately.
Data retention
We only keep your data as long as needed, either to provide the services or meet legal requirements. If you delete your account, we’ll delete and/or anonymise your personal data unless the law requires otherwise (e.g., for fraud prevention or recordkeeping).
Updates to this policy
We may update this Privacy Policy occasionally. If changes are significant, we’ll notify you via email or in the app.
You can always view the latest version on our website.
Contact
Got questions, feedback, or requests? Email us at info@workout.sport
We are committed to protecting your privacy. This Privacy Policy applies to both our “Website” (www.workout.sport) and our Subscription Plan, including our associated mobile applications (“Apps” or “Applications”) owned and controlled by Us. This Privacy Policy governs our personal data processing including collection and usage. It also describes your choices regarding use, access and correction of your personal data. If you do not agree with this Privacy Policy, you should not use the Website or Apps.
Our Website or Apps may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share personal data about you. We do not control these third-party websites and are not responsible for their privacy policies.
We keep our Privacy Policy under regular review and periodically make updates. We will post any Privacy Policy changes on this page and, if the changes are significant, we will provide a notice by sending you an email or an in-app notification.
Who are we?
Work-out is the data controller and responsible for your personal data (collectively referred to as “Work-out”, “We”, “Us” or “Our”). If you have any questions about this Privacy Policy, including any requests to exercise your legal rights, you can contact Us using the details set out below.
If you have any questions about this Privacy Policy or our treatment of the personal data you provide us, please write to us by email at info@workout.sport.
How do we collect you personal data?
When you visit our Website
When you register to create an account, we request that you provide personal data about yourself.
When you use our Applications
We send push notifications from time to time to update you about events or promotions. If you no longer wish to receive such communications, you may turn them off at the device level.
We may link information we store within the analytics software to personal data you submit within the App. We do this to improve services we offer you and improve our marketing, analytics and site functionality.
Personal data We receive directly from you
We collect the following personal data directly from you via our website or applications when you use Our services which may include:
- Contact details, including your last name, first name, company name, address, telephone and mobile number, and email address.
- Order details, including your name, billing address, delivery address, payment confirmation, email address, and telephone number.
- Account details, including your username, password, security questions, and other information used for account security.
- Customer support information, including any details you choose to include in communication with us, for example, when you send a message via the application, e-mail, etc.
- Body composition data, including weight, height, and measurements.
- Gender
- Personal health goals, for example you want to lose weight, you want to run a marathon, etc.
- Your weekly schedule and personal habits, including days you can exercise when you are busy, etc.
- Age
- Medical information, including injuries, surgeries, etc.
- Menstrual Cycle Data, including cycle information and symptoms.
- Well-being Data, including Sleep, Sleep Duration, Mood, Energy, Stress, and Muscle Soreness
Some features of the Website or Apps may require you to provide certain personal data directly. You can choose not to provide this personal data, but in that case, you may not be able to use or access those features.
The Website and Apps are not intended for use by children (below 16 years), and we do not knowingly collect personal data from children. If you are the parent or guardian of a child who has provided us with personal data, you may contact us to request its deletion.
Information We collect about the use of our Website or Application
We may also automatically collect certain personal data about your interaction with the with us. To do this, we may use cookies, pixels, and similar technologies (“Cookies”). These data may include information about how you visit and use our website and application and your account, including device information, browser information, network connection details, IP address, and other interaction-related data. For more details, see our Cookie Policy.
Information We obtain from third parties
Finally, We may obtain personal data about you from third parties, including vendors and service providers who collect data on our behalf, such as:
- Companies that support our Website, Applications and associated services.
- Our payment processors, who collect payment details (e.g., bank account, credit or debit card details, and billing address) to process your payment, fulfil orders, and deliver services as per our agreement with you.
For what purposes and based on which legal grounds do we process your personal data?
Special categories of personal data
Special categories of data are defined by the GDPR (article 9 and 10) and include the following categories of personal data we process from you:
- Body composition data
- Gender
- Personal health goals
- Medical information
- Menstrual Cycle Data
- Location data (information on the geographical position of a device or person)
For these kinds of personal data, we ask you explicit consent when you register for your account to process these special categories of personal data. You can withdraw this consent at any time, without justification and free of charge, by contacting us as described under “Who are we”
These personal categories of personal data are collected for the following purposes:
- To improve athletic performance through the prescription of individualised training plans.
- To reduce injury risk through the management of training and recovery.
- To manage injuries and injury rehabilitation.
- To Manage your training, to set goals and use your training dashboard.
Other types of personal data
- Provision of services: We use your personal data to provide services under our agreement with you, including interactions, managing your training, provide AI features, sending notifications related to your account and other communications mike contacting you regarding our services. We also manage your account and support relevant functionalities (Article 6(1)(b) GDPR).
- Marketing and Advertising: We may use your personal data for marketing and promotional purposes, including sending communications via email, SMS, or mail, and displaying advertisements for products or services. This may involve using data to better tailor services and ads (Article 6(1)(f) GDPR).
- Security and Fraud Prevention: We use your personal data to detect, investigate, or act on potential fraudulent, illegal, or harmful activities and other legal requirements (Article 6(1)(f) GDPR).
- Communication and service improvement: We use your personal data to provide customer support and improve Services (Article 6(1)(f) GDPR).
- Provide AI Features. For example, we use machine learning or artificial intelligence, including large language models, to detect anomalies on leaderboards, generate route recommendations, or provide personalized training guidance (Article 6(1)(f) GDPR).
Which third parties may we share your personal data with?
Under certain circumstances, we may share your personal data with third parties when a legal basis is applicable. This may include:
- Vendors or third-party service providers performing services for us (e.g., IT management, data analysis, customer support and cloud storage).
- Business and marketing partners providing services or showing ads.
- Third parties when you explicitly request or authorize data sharing, such as social media widgets or login integrations (see Cookie Policy).
- In connection with a business transaction (e.g., a merger or bankruptcy) or legal obligations (e.g., responding to subpoenas or search warrants).
Direct marketing
If you're interested specific services, we may use your contact details to reach out to you or deliver our offerings. We will do so only if you have provided prior explicit consent.
You can withdraw this consent at any time, without justification and free of charge, by contacting us as described under “Who are we”.
Third-party websites and links
Our Website or Applications may contain links to websites or platforms operated by third parties. If you follow links to sites unaffiliated with Us, it’s important to review their privacy and security policies.
We make no guarantees and are not responsible for the privacy or security of such sites, including the accuracy, completeness, or reliability of their content. Information shared in public or semi-public spaces (including third-party social networks) may also be visible to other users. The inclusion of links does not imply endorsement of the content or operators of such platforms.
How do We protect your personal data?
We have implemented technical and organizational security measures to prevent the destruction, loss, alteration, unauthorized access, or accidental disclosure of collected personal data, as well as any other unauthorized processing of this personal data.
We cannot be held liable for any direct or indirect damage resulting from incorrect or unlawful use of personal data by a third party.
You must always comply with security guidelines. You are solely responsible for the use of your computer, IP address, and identification data when accessing our Website, as well as ensuring their confidentiality.
If you choose to use the services and register an account, you are responsible for keeping your login credentials secure. We strongly advise against sharing your username, password, or other access details. If you suspect your account has been hacked, please contact us immediately via the section "Who are we"
How long do we retain your personal data?
Personal data is retained and processed for as long as necessary for the purposes of processing and delivering the services, complying with legal obligations, resolving disputes, or fulfilling contracts and applicable policies.
How can you exercise your rights?
In accordance with applicable personal data processing legislation, you can exercise the data subject rights as mentioned here below.
You can exercise your rights by contacting us via email at info@workout.sport, including a copy of your identity card or equivalent identification. To ensure accuracy, you agree to inform us of any changes in your address, email, or phone number.
Right to be informed
The right to information allows you to ask Us what personal data is collected about you, why, who is collecting data, for how long, how you can file a complaint, and if there is personal data sharing involved.
Right of access
You have the right to obtain free access to your personal data and understand how it is used.
Right to Rectification, Deletion, and Restriction
You are free to choose whether to share personal data with us. Additionally, you have the right to request corrections, additions, or deletions of your personal data. Please note that refusal to provide or request deletion of certain personal data may prevent the availability of certain services.
You may also request restrictions on the processing of your personal data.
Right to Object
You have the right to object to the processing of your personal data for serious and legitimate reasons.
Additionally, you may object to processing done based on legitimate interest or direct marketing.
Right to withdraw consent
If processing is based on prior consent, you may withdraw it at any time by contacting us via the channels listed in "Contact?"
Right to file a complaint
You have the right to make a complaint at any time to the Gegevensbeschermingsautoriteit (GBA), the Belgian supervisory authority for data protection issues at contact@apd-gba.be.
Recent changes to this Privacy Policy
You can request a summary of previous versions of the Privacy Policy through the contact methods listed in "Contact?"
We are committed to protecting your privacy. This Privacy Policy applies to both our “Website” (www.workout.sport) and our Subscription Plan, including our associated mobile applications (“Apps” or “Applications”) owned and controlled by Us. This Privacy Policy governs our personal data processing including collection and usage. It also describes your choices regarding use, access and correction of your personal data. If you do not agree with this Privacy Policy, you should not use the Website or Apps.
Our Website or Apps may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share personal data about you. We do not control these third-party websites and are not responsible for their privacy policies.
We keep our Privacy Policy under regular review and periodically make updates. We will post any Privacy Policy changes on this page and, if the changes are significant, we will provide a notice by sending you an email or an in-app notification.
Who are we?
Work-out is the data controller and responsible for your personal data (collectively referred to as “Work-out”, “We”, “Us” or “Our”). If you have any questions about this Privacy Policy, including any requests to exercise your legal rights, you can contact Us using the details set out below.
If you have any questions about this Privacy Policy or our treatment of the personal data you provide us, please write to us by email at info@workout.sport.
How do we collect you personal data?
When you visit our Website
When you register to create an account, we request that you provide personal data about yourself.
When you use our Applications
We send push notifications from time to time to update you about events or promotions. If you no longer wish to receive such communications, you may turn them off at the device level.
We may link information we store within the analytics software to personal data you submit within the App. We do this to improve services we offer you and improve our marketing, analytics and site functionality.
Personal data We receive directly from you
We collect the following personal data directly from you via our website or applications when you use Our services which may include:
- Contact details, including your last name, first name, company name, address, telephone and mobile number, and email address.
- Order details, including your name, billing address, delivery address, payment confirmation, email address, and telephone number.
- Account details, including your username, password, security questions, and other information used for account security.
- Customer support information, including any details you choose to include in communication with us, for example, when you send a message via the application, e-mail, etc.
- Body composition data, including weight, height, and measurements.
- Gender
- Personal health goals, for example you want to lose weight, you want to run a marathon, etc.
- Your weekly schedule and personal habits, including days you can exercise when you are busy, etc.
- Age
- Medical information, including injuries, surgeries, etc.
- Menstrual Cycle Data, including cycle information and symptoms.
- Well-being Data, including Sleep, Sleep Duration, Mood, Energy, Stress, and Muscle Soreness
Some features of the Website or Apps may require you to provide certain personal data directly. You can choose not to provide this personal data, but in that case, you may not be able to use or access those features.
The Website and Apps are not intended for use by children (below 16 years), and we do not knowingly collect personal data from children. If you are the parent or guardian of a child who has provided us with personal data, you may contact us to request its deletion.
Information We collect about the use of our Website or Application
We may also automatically collect certain personal data about your interaction with the with us. To do this, we may use cookies, pixels, and similar technologies (“Cookies”). These data may include information about how you visit and use our website and application and your account, including device information, browser information, network connection details, IP address, and other interaction-related data. For more details, see our Cookie Policy.
Information We obtain from third parties
Finally, We may obtain personal data about you from third parties, including vendors and service providers who collect data on our behalf, such as:
- Companies that support our Website, Applications and associated services.
- Our payment processors, who collect payment details (e.g., bank account, credit or debit card details, and billing address) to process your payment, fulfil orders, and deliver services as per our agreement with you.
For what purposes and based on which legal grounds do we process your personal data?
Special categories of personal data
Special categories of data are defined by the GDPR (article 9 and 10) and include the following categories of personal data we process from you:
- Body composition data
- Gender
- Personal health goals
- Medical information
- Menstrual Cycle Data
- Location data (information on the geographical position of a device or person)
For these kinds of personal data, we ask you explicit consent when you register for your account to process these special categories of personal data. You can withdraw this consent at any time, without justification and free of charge, by contacting us as described under “Who are we”
These personal categories of personal data are collected for the following purposes:
- To improve athletic performance through the prescription of individualised training plans.
- To reduce injury risk through the management of training and recovery.
- To manage injuries and injury rehabilitation.
- To Manage your training, to set goals and use your training dashboard.
Other types of personal data
- Provision of services: We use your personal data to provide services under our agreement with you, including interactions, managing your training, provide AI features, sending notifications related to your account and other communications mike contacting you regarding our services. We also manage your account and support relevant functionalities (Article 6(1)(b) GDPR).
- Marketing and Advertising: We may use your personal data for marketing and promotional purposes, including sending communications via email, SMS, or mail, and displaying advertisements for products or services. This may involve using data to better tailor services and ads (Article 6(1)(f) GDPR).
- Security and Fraud Prevention: We use your personal data to detect, investigate, or act on potential fraudulent, illegal, or harmful activities and other legal requirements (Article 6(1)(f) GDPR).
- Communication and service improvement: We use your personal data to provide customer support and improve Services (Article 6(1)(f) GDPR).
- Provide AI Features. For example, we use machine learning or artificial intelligence, including large language models, to detect anomalies on leaderboards, generate route recommendations, or provide personalized training guidance (Article 6(1)(f) GDPR).
Which third parties may we share your personal data with?
Under certain circumstances, we may share your personal data with third parties when a legal basis is applicable. This may include:
- Vendors or third-party service providers performing services for us (e.g., IT management, data analysis, customer support and cloud storage).
- Business and marketing partners providing services or showing ads.
- Third parties when you explicitly request or authorize data sharing, such as social media widgets or login integrations (see Cookie Policy).
- In connection with a business transaction (e.g., a merger or bankruptcy) or legal obligations (e.g., responding to subpoenas or search warrants).
Direct marketing
If you're interested specific services, we may use your contact details to reach out to you or deliver our offerings. We will do so only if you have provided prior explicit consent.
You can withdraw this consent at any time, without justification and free of charge, by contacting us as described under “Who are we”.
Third-party websites and links
Our Website or Applications may contain links to websites or platforms operated by third parties. If you follow links to sites unaffiliated with Us, it’s important to review their privacy and security policies.
We make no guarantees and are not responsible for the privacy or security of such sites, including the accuracy, completeness, or reliability of their content. Information shared in public or semi-public spaces (including third-party social networks) may also be visible to other users. The inclusion of links does not imply endorsement of the content or operators of such platforms.
How do We protect your personal data?
We have implemented technical and organizational security measures to prevent the destruction, loss, alteration, unauthorized access, or accidental disclosure of collected personal data, as well as any other unauthorized processing of this personal data.
We cannot be held liable for any direct or indirect damage resulting from incorrect or unlawful use of personal data by a third party.
You must always comply with security guidelines. You are solely responsible for the use of your computer, IP address, and identification data when accessing our Website, as well as ensuring their confidentiality.
If you choose to use the services and register an account, you are responsible for keeping your login credentials secure. We strongly advise against sharing your username, password, or other access details. If you suspect your account has been hacked, please contact us immediately via the section "Who are we"
How long do we retain your personal data?
Personal data is retained and processed for as long as necessary for the purposes of processing and delivering the services, complying with legal obligations, resolving disputes, or fulfilling contracts and applicable policies.
How can you exercise your rights?
In accordance with applicable personal data processing legislation, you can exercise the data subject rights as mentioned here below.
You can exercise your rights by contacting us via email at info@workout.sport, including a copy of your identity card or equivalent identification. To ensure accuracy, you agree to inform us of any changes in your address, email, or phone number.
Right to be informed
The right to information allows you to ask Us what personal data is collected about you, why, who is collecting data, for how long, how you can file a complaint, and if there is personal data sharing involved.
Right of access
You have the right to obtain free access to your personal data and understand how it is used.
Right to Rectification, Deletion, and Restriction
You are free to choose whether to share personal data with us. Additionally, you have the right to request corrections, additions, or deletions of your personal data. Please note that refusal to provide or request deletion of certain personal data may prevent the availability of certain services.
You may also request restrictions on the processing of your personal data.
Right to Object
You have the right to object to the processing of your personal data for serious and legitimate reasons.
Additionally, you may object to processing done based on legitimate interest or direct marketing.
Right to withdraw consent
If processing is based on prior consent, you may withdraw it at any time by contacting us via the channels listed in "Contact?"
Right to file a complaint
You have the right to make a complaint at any time to the Gegevensbeschermingsautoriteit (GBA), the Belgian supervisory authority for data protection issues at contact@apd-gba.be.
Recent changes to this Privacy Policy
You can request a summary of previous versions of the Privacy Policy through the contact methods listed in "Contact?"