Privacy policy
This policy explains what personal data wavy handles, why, and what you can do about it. wavy is operated by SET Singleton Solution. It covers this website, the wavy dashboard that gyms use, and the wavy member app.
Who is responsible for your data
For this website, for contact and demo requests, and for the accounts of the gyms that use wavy, SET Singleton Solution decides how the data is used (it is the controller).
For the data of a gym's members and staff inside wavy, the gym decides how it is used (the gym is the controller). We process that data on the gym's behalf and on its instructions (we are the processor). If you are a member, your gym is your first contact for questions about your data.
What we collect
Depending on how you use wavy, this can include:
- Contact and demo requests: your name, email, phone number, gym name, city, country, gym size and your message.
- Gym accounts and staff: names, email addresses, roles, and the actions staff take in the dashboard.
- Members, as recorded by their gym: name, contact details, membership plan, payments and receipts, check-ins, class bookings, notes and signed documents.
- Members, through the app: training logs, personal records, body measurements and progress photos you choose to add, meal logs, and your language and notification settings.
- Health and activity data, only if you connect it: steps, distance, flights climbed, workouts, sleep and active energy from your phone or watch.
- Technical data: device type, app version, usage analytics (which screens and features are used), and error reports when something goes wrong.
Why we use it
We use personal data to:
- provide wavy to gyms and their members, as agreed with each gym;
- answer your contact or demo request;
- keep wavy secure and fix errors;
- meet our legal obligations, for example on accounting.
Legal basis
We rely on the contract with the gym (or with you), on our legitimate interest in running and securing the service and answering requests, on your consent where we ask for it (for example to connect health data), and on legal obligations.
How long we keep it
We keep member and staff data for as long as the gym uses wavy, or until the gym or the member asks us to delete it, unless the law requires us to keep it longer (for example payment records). Contact requests are kept for as long as needed to follow up.
Security
Data is sent over encrypted connections. Staff only see what their role allows. No system is perfectly secure, so if we learn of a breach that affects you, we will inform the gym and, where required, you and the authorities.
International transfers
Some of our service providers may process data outside your country. When they do, we put safeguards in place as required by the applicable data protection law.
Your rights
You can ask to access, correct or delete your personal data, to object to its use, or to receive a copy of it. Members can delete their account from the app, or from the delete-account page on this site. For anything else, write to privacy@wavy.fitness. If you are a member, we may pass your request to your gym.
If you are not satisfied with our answer, you can complain to the data protection authority in your country. In Tunisia, that is the INPDP (Instance Nationale de Protection des Données Personnelles).
Children
wavy is not aimed at children. A gym that registers minors is responsible for obtaining the consent their parents or guardians must give.
Changes to this policy
When we change this policy, we update the date at the top. For significant changes, we will tell gyms in advance.
Contact
SET Singleton Solution. Email: privacy@wavy.fitness.