Last updated: July 2026
Optifit Network processes personal data in compliance with the Swiss Federal Act on Data Protection (nFADP) and, where applicable, the European regulation (GDPR). This page explains what data we process, why, and what you can request.
privacy@optifit.appOptifit Network, Avenue du Léman 2, 1005 Lausanne, Switzerland — info@optifit.app.
When we process data on behalf of a sports organisation (its members, its teams), that organisation is the data controller and we act as a processor.
Account data: first name and last name, e-mail address, phone number (optional), profile picture (optional), language, role in the organisation.
Usage data: information about the teams and clubs you belong to, attendance, scheduling and availability, activity in the app (logins, actions performed). It helps us understand real friction points and improve the interfaces.
Communications: messages exchanged in the Huddle team chat are encrypted. Optifit Network technically has access to their content as part of operating the service, and commits not to access them except under binding legal obligations. In the event of a report of abusive content, the reported message may be consulted solely for the purpose of handling the report.
Billing data: billing is managed by Stripe, Inc. We never store your banking information; only a Stripe customer identifier is kept in our systems.
Notifications: if you enable push notifications, a device token is transmitted to our infrastructure to route messages. This token is deleted if you disable notifications or delete your account.
Sensitive data: in Luna, cycle-related information is entered by the player herself, who chooses what she shares and with whom. It is never visible to coaching staff by default.
Account creation and management — legal basis: contract performance.
Application operation (team management, attendance, messaging) — legal basis: contract performance.
Billing and payments — legal basis: contract performance.
Sending push notifications — legal basis: consent.
Service improvement based on anonymised technical logs — legal basis: legitimate interest.
Compliance with our legal obligations — legal basis: legal obligation.
Your data is hosted on Google Cloud Platform (GCP), primarily in the europe-west6 region (Zurich). We do not replicate production data outside Swiss territory.
Our main technical sub-processors: Auth0 / Okta (authentication); Stripe, Inc. (billing); Google Cloud — europe-west6 Zurich (infrastructure); Expo / EAS (push notifications and Huddle app distribution). Standard contractual clauses (EU) or an adequacy decision are in place for each.
Active account data: retained for the entire duration of your use of the service.
Account deletion: your personal data (email, phone number) is deleted immediately. Your first name, last name and profile picture are retained to allow the teams you were part of to keep the history of your attendance. Data required to comply with legal obligations may be retained for up to 10 years in archived form.
Technical logs: retained for 90 rolling days, then automatically deleted.
In accordance with the GDPR and the nFADP, you have the following rights: access (obtain a copy of your data); rectification (correct inaccurate data); erasure (request deletion of your account and data); objection (to certain processing based on our legitimate interest); portability (receive your data in a structured format); withdrawal of consent (at any time for processing based on your consent, including notifications).
Write to info@optifit.app; we reply within 30 days. You also have the right to lodge a complaint with your supervisory authority (FDPIC in Switzerland, ICO in the UK).
If your data was entered by a sports organisation, contact it first: we assist it in handling your request.
We implement appropriate technical and organisational measures: encryption of communications in transit (TLS 1.3); encryption of chat messages at rest; secure authentication via Auth0; production data access restricted to what is strictly necessary; infrastructure monitoring and real-time alerts.
In the event of an incident that may affect your data, we will inform you within the timeframes required by applicable regulations.
Our products are used in clubs that supervise minors. No data is used for advertising purposes and no data is resold, under any circumstances.
The Huddle mobile app does not use cookies. The presentation website may use strictly necessary technical cookies for its operation. No advertising or profiling cookies are used.
We may update this policy from time to time. In the event of a substantial change, you will be notified via the app or by email at least 15 days before the changes take effect.
A club, an association, a federation: we start by listening, not selling.
