Privacy policy

PeakLog is run by ENTELXCORE SINGLE MEMBER P.C. (ENTELXCORE ΜΟΝΟΠΡΟΣΩΠΗ Ι.Κ.Ε.), a company registered in Greece.

• Registered office: Rizountos 51, 16777 Elliniko, Attica, Greece
• G.E.MI. number: 195125103000 · VAT number (AFM): 803350763
• Email: info@entelxcore.com
• Company information: https://entelxcore.com/company-info

Our role depends on the data:

• Your club’s training data (club membership, invitations, sessions and programs, attendance, results, records, goals, notes and club messages): your club decides what it records and why, so the club is the controller. We process this data on the club’s behalf and only on its instructions, as its processor (Article 28 GDPR).
• Everything else (your sign-in account and profile, the interest form on this website, and the technical data needed to run and secure PeakLog): we are the controller.

• Account details: your email address and password. Your password is handled by our sign-in provider and stored only in a scrambled (hashed) form that we can’t read. If you sign in with Google, we receive your name and email address from your Google account instead. If you sign in with an email link, no password is stored at all.
• Profile: the first and last name you add in Settings.
• Club membership: which clubs you belong to, your role in each (coach or athlete), your status, your training groups, and when you joined or left.
• Invitations: when a coach invites someone, the invitee’s email address, name and role, so we can send the sign-in link and add them to the club when they join.
• Training data: the sessions and programs your club plans, attendance (present, late or absent), test results, personal records, goals and progress, and any notes a coach or athlete adds to them.
• Club messages: messages a coach posts to their club.
• Interest form: what you send through the form on this website (your name, email address, role and message, and whether you sent it from the English or Greek version of the site).
• Technical data: when you use the app or this website, our hosting providers process your IP address, browser details and the pages or files requested, to deliver them and keep them secure.

PeakLog doesn’t ask for your date of birth, gender, body measurements, location or health information, and doesn’t connect to health or fitness trackers. Notes are free text, so please keep health details (such as an injury) out of them unless the athlete has agreed to them being recorded.

• To provide your PeakLog account: create and run it, sign you in, and send account emails (such as confirming your address or a sign-in link). Legal basis: our contract with you (Article 6(1)(b) GDPR).
• To run PeakLog for clubs: store the training data a club records, show it to the right people in the club, and send the club’s invitations. We do this as the club’s processor. The club decides why the data is used and is responsible for having a legal basis for it.
• To keep PeakLog secure and working, and to fix problems. Legal basis: our legitimate interest in a service that works and can be trusted (Article 6(1)(f)).
• To follow up on the interest form, as you asked. Legal basis: your consent (Article 6(1)(a)), which you can withdraw at any time by emailing us.
• To meet legal obligations, such as handling your data-protection requests. Legal basis: legal obligation (Article 6(1)(c)).

We don’t use analytics or advertising tools, and we don’t send marketing emails.

• Your club’s coaches: they can see athletes’ names and email addresses, and create and edit the club’s sessions, attendance, results, records and goals.
• Other members of your club: members can see the club’s sessions, attendance, test results, records and goals, including those of other athletes in the club.
• You: athletes can see their own data, and edit or delete their own records and goals.
• The PeakLog team: authorised staff who run the platform, for example to set up and close clubs, answer support requests and carry out deletions.
• Service providers that process data on our behalf (for club training data, as our sub-processors), under data-processing terms: Google (Firebase Authentication, Cloud Firestore and Cloud Functions, and Google sign-in), which stores and secures account and app data; and Netlify, which hosts the PeakLog app and this website and receives interest-form messages. The app also loads its fonts from Google’s servers, which receive your IP address to deliver them.
• Public authorities, when the law requires it.

We don’t sell your data.

Google and Netlify may process data outside the European Economic Area, including in the United States. Such transfers are covered by the EU–US Data Privacy Framework or by the European Commission’s Standard Contractual Clauses.

• Account details, profile and club memberships: for as long as your account exists.
• When you delete your account in Settings: your profile, your club memberships and your sign-in account are deleted straight away.
• Training history: attendance, results and records are part of your club’s training history. The club decides how long to keep them, so they stay with the club after you leave or delete your account. To have them erased, ask your club; we delete them when the club tells us to.
• Invitations: until they’re accepted or the coach removes them.
• Interest-form messages: until we’ve followed up, or sooner if you ask us to delete them.
• Hosting logs: for the short periods set by our hosting providers.

Under the GDPR, you have the right to:

• access the personal data we hold about you and get a copy of it;
• have inaccurate data corrected;
• have your data erased;
• restrict certain processing, or object to processing based on our legitimate interests;
• receive the data you gave us in a portable format;
• withdraw your consent at any time, without affecting processing that already happened.

You can delete your account yourself in the app’s Settings. Your club is the controller of its training data, so send requests about that data to your club; if you contact us instead, we’ll pass your request on and help the club answer it. For anything else, email info@entelxcore.com. We reply within one month. You can also complain to the Hellenic Data Protection Authority (www.dpa.gr, Kifisias 1–3, 115 23 Athens).

Clubs may train athletes under 18. An athlete under 15 may use PeakLog only with the consent of a parent or guardian. As the controller of its training data, a club that invites a young athlete is responsible for making sure that consent has been given. A parent or guardian can contact the club, or us, at any time to see, correct or delete their child’s data.

This website sets no cookies and uses no analytics. The PeakLog app keeps your sign-in session and your light or dark theme choice in your browser, and briefly stores your email address while you sign in with an email link. These are strictly necessary for the app to work, so they need no consent. The app sets no tracking cookies.

Data travels over encrypted connections (HTTPS). Access rules decide who can read what: club data is readable only by that club’s members and the PeakLog team, and only coaches can change it, apart from athletes’ own records and goals.

We’ll update this page when our practices change, and change the date at the top. If a change is significant, we’ll tell you in the app or by email before it applies.