Informativa sulla privacy

FiveStripe (fivestripe.app and the FiveStripe app for iPhone and iPad) is run by On the Button Limited, a company registered in the Isle of Man (company number 135320C). We decide how the personal data described here is used, so we are its controller under Isle of Man data protection law, which applies the GDPR.

Questions, or a request about your data: oss@fivestripe.app.

Browsing without an account

You can read the catalogue, watch lessons and vote without an account.

• Votes are anonymous. Your browser makes a random voter id and keeps it, with your votes, in its own storage. We store the id with each vote, never linked to an account.
• To stop abuse, we keep a one-way hash of your IP address, mixed with the date, next to votes, lesson suggestions, sign-ups and sign-in attempts, and use it to limit how many each address can make. We never store the IP address itself.
• We read the country your connection comes from to decide whether to ask before using analytics, and which currency to show prices in. We do not store it.

Your account

• Your email address, and your name if you give one.
• Your password, stored only as a salted PBKDF2 hash that cannot be turned back into the password. Accounts that sign in by email link, Google or Apple may have none.
• Your belt, whether you have confirmed your email, when you last signed in, and your account role and status.
• The language you picked for the site, so our emails to you are in it.
• If you turn on two-step sign-in: the authenticator secret, and your recovery codes as hashes.
• If you add a passkey: its public key, the name you give it, how your browser can reach it (such as this device, USB or your phone), and when you added it and last used it. The private key stays in your device or password manager. Your fingerprint, face or screen lock is checked by your device and never sent to us, so we hold no biometric data.
• Sign-in sessions, which last 30 days unless you log out.
• Notes our staff keep about your account, to help run it. They are in the copy of your data you can download.

Signing in with Google or Apple

If you continue with Google or Apple, the provider tells us an id for your account with them, your email address and whether they have verified it, and your name (Apple shares the name only the first time). With Apple’s Hide My Email, the address is a private relay address that forwards to you.

We keep the id and email to recognise you next time, and use the name only when we make a new account. You can disconnect Google or Apple on your account page.

With Apple we also keep a token Apple gives us, so that when you delete your account we can tell Apple to end FiveStripe’s access to your Apple ID, as Apple asks apps to do.

The iOS app

The FiveStripe app for iPhone and iPad shows the same catalogue and your same account. It talks only to fivestripe.app, and what it sends and keeps is what this policy describes for the site, with these differences:

• It keeps your sign-in cookie, filters, votes, lessons saved while signed out, beginner’s course progress, an unsaved gameplan and your Light, Dark or Auto choice on your device, in the app’s own storage.
• If you sign in with Apple in the app, Apple tells us the same things as on the site.
• If you sign in with Google in the app, the sign-in opens in a private browser window that keeps nothing afterwards.
• Passkeys you use in the app are kept by your device or password manager, as on the site.
• The app does not use Google Analytics or any other analytics or advertising service, and does not track you across other apps or websites.

What you add

• Lessons you save, your own video links and notes, and the topics you tag them with.
• Gameplans, including their notes, playlists and any background images you upload.
• Moments you bookmark in videos, with the names you give them. On a gameplan you share, the people it reaches see your moments in its videos.
• A gameplan you share by link can be opened by anyone who has the link, without an account, until you switch the link off. It shows your name, the board and your moments in its videos.
• Gym and franchise branding, curricula and shared videos, if you run a gym.
• Lessons you suggest to the catalogue. Suggestions are kept without a link to your account.

What you share with a gym or franchise is visible to its members. People who run a franchise can see the name, email, gym and last sign-in of members of its gyms.

Training log

Your birthday, weight and biological sex are optional. We use them only to estimate the energy you burn. Each session you log keeps its date, length, intensity, the positions and techniques you trained, and the estimate.

Weight and training details can say something about your health, so we use them only for the estimates and insights you ask for, and only because you chose to enter them. You can clear the profile fields or delete any session at any time.

Paying for Pro

On the website, PayPal takes the payment on its own pages, with a PayPal account or a card. We send PayPal the amount, what you are buying and our order number, not your name or email. We never see your card or PayPal details.

In the iOS app, Apple takes the payment through the App Store with your Apple Account. The app tells Apple an id for your FiveStripe account (not your name or email) so the purchase belongs to that account. Apple sends us a signed record of the purchase: the product, its transaction ids, the price and currency, the dates, the storefront and whether it was a test purchase. Apple also tells us if a purchase is refunded, and we then take back what it gave. We never see your payment details.

We keep a record of each order: where it was paid (PayPal or the App Store), the product, amount, currency, any discount code, the provider’s order or transaction ids, its status and the dates.

What you do on FiveStripe

While you are signed in, we keep a log of what you do: signing in, making your account, and each change you make, such as making a gameplan, adding or sharing a video, saving a lesson or logging training. Each entry says what you did, which item it was about and when. Pages you only look at are not logged.

We also keep how long you play each video while signed in, per day, and where you played it from (a lesson, a suggestion, a gameplan and so on). Your browser’s YouTube player reports this. Nothing is kept for people who are not signed in.

We use both to suggest lessons to you from what you have watched and saved, and so our staff can see how FiveStripe is used and what to improve. Staff see them in reports, with your account. Both are in the copy of your data you can download.

Emails

We email you about your account: confirming your address, sign-in links, and reminders before and after a Pro year ends.

We send news and offers (marketing) only if you agree, when you make an account or on your account page. Every one has a link to stop them, and you can untick the box on your account page at any time. We keep when you agreed. Our staff may load the names and emails of people who agreed into the service that sends them.

Analytics

We use Google Analytics to see which pages help. It receives the page address (with sign-in tokens, codes and email addresses removed), the page title, and what Google Analytics collects about your browser and device. We do not send it your account.

In the UK, the EU, Iceland, Liechtenstein and Norway we ask first, and analytics loads only if you allow it. Elsewhere it loads unless your browser sends a Global Privacy Control signal. If you have said no, or your browser sends that signal, it never loads.

Why we use your data

• To run your account and the features you use, and to deliver what you buy: this is needed for our contract with you.
• To keep FiveStripe secure, limit abuse and keep votes fair: our legitimate interest in running a safe service.
• Analytics, your training profile and log, and marketing emails: your consent, which you can withdraw at any time.
• The activity log, watch time and lesson suggestions: our legitimate interest in understanding how FiveStripe is used, improving it and suggesting lessons you may want. You can object to this by emailing us.
• Order records: our legal duty to keep accounts.

Who else handles it

We do not sell your data. These companies handle it for us, or when you choose to use them:

• Cloudflare hosts the site and its database, and keeps short-lived logs of how it runs.
• Resend delivers our emails. If we use another service to send marketing emails, we will name it here first.
• PayPal takes payments on the website, and Apple takes payments in the iOS app.
• Google and Apple, when you sign in with them; Google also runs Google Analytics on the website.
• YouTube, Instagram and TikTok: a lesson’s player loads from them only when you press play. YouTube thumbnails and instructor pictures load from Google’s image servers as you browse.
• YouTube, when your gym picks a video for the top of its members’ home page: it plays from youtube-nocookie.com when you open the home page, unless your device asks for reduced motion or to save data.
• YouTube, when you search it from Add a video: your search words go to YouTube, never your name or account. This uses YouTube API Services, so Google’s Privacy Policy (https://policies.google.com/privacy) covers what YouTube receives.

Some of them may process data outside the Isle of Man, the UK and the EU. Where they do, they rely on safeguards such as the European Commission’s standard contractual clauses.

Cookies and browser storage

Our own cookies are needed for the site to work, so they do not need consent:

• fs_sid keeps you signed in (30 days).
• fs_mfa holds a two-step sign-in while you type the code (10 minutes).
• fs_next remembers the page to return to after signing in (30 minutes).
• fs_oauth ties a Google or Apple sign-in to the browser that started it (10 minutes).
• fs_passkey ties a passkey sign-in to the browser that started it (10 minutes).
• fs_app ties a sign-in started from the iOS app to the window that started it, so the app can be handed the session (15 minutes).
• fs_currency remembers a currency you pick on the pricing page (a year).
• fs_lang remembers a language you pick from the language menu, so pages open in it (a year).
• fs_code remembers a discount code from a link you followed, to fill it in at checkout (30 days). An account made meanwhile records that code, so we can see which links bring people in.

Your browser’s own storage keeps your anonymous voter id and votes, list filters, lessons saved while signed out, beginner’s course progress, your analytics choice and an unsaved gameplan. It stays on your device until you clear it.

Google Analytics, when allowed, sets its own cookies (named _ga and _ga_ followed by an id).

How long we keep it

• Your account and what you add: until you delete the account, which removes it at once. You can also delete gameplans, videos, saved lessons and training sessions one by one.
• Sign-in links: 20 minutes. Email confirmation links: 24 hours. A Google, Apple or passkey sign-in in progress: 10 minutes. The one-time code that hands a sign-in to the iOS app: 2 minutes.
• Order records: with the account.
• The activity log and watch time: 13 months, then they are deleted automatically.
• Your choice about marketing emails: until you change it or delete the account.
• YouTube searches: the words and the videos found, for a day, with nothing saying who searched, so a repeat search doesn’t ask YouTube again. A count of your searches that day, to keep within YouTube’s limits.
• Anonymous votes, suggestions and hashed IP addresses are not linked to an account and are kept to protect the service.

Your rights

You can ask for a copy of your data, ask us to correct or delete it, object to how we use it, or withdraw consent. You can change your name, email, password, belt and training profile on your account page.

Under Your data on your account page you can download a copy of everything your account holds, or delete the account and everything in it.

For anything else, email oss@fivestripe.app from the address on the account. We will reply within a month.

If you are unhappy with how we handle your data, you can complain to the Isle of Man Information Commissioner, or to the data protection authority where you live.

Security

Passwords and recovery codes are stored as hashes, sign-in cookies cannot be read by page scripts, every connection uses HTTPS, and you can sign in with a passkey or turn on two-step sign-in with an authenticator app.

Children

Accounts are for people aged 13 or over. If you are younger, ask a parent or guardian to set one up for you.

Changes

If we change how we use your data, we will update this page and its date, and tell account holders by email about any important change.