Privacy Policy

Information about the processing of personal data

Your data security is important to us, and we therefore attach great importance to your personal data being handled in a responsible manner. Below you can read how Bricks Performance System ApS (hereinafter “Bricks”, “we”, “us” or “our”) processes personal data about you when we act as data controller. You can also read about the rights you have in connection with our processing.

Bricks’ role as data controller

Bricks is the data controller for the processing of your personal data in the App. This means that we have the legal responsibility towards you and the authorities for ensuring that data processing takes place lawfully.

However, we believe that you as an athlete should have real control over your data — particularly health and performance data. We have therefore built the App so that you can manage who has access to what. See the section “Your control over your data” below.

If you use the App via an organisation (club, team, academy, school), both Bricks and the organisation may process your personal data — depending on the specific processing activity either as independent data controllers or, in certain cases, as joint controllers under Article 26 of the General Data Protection Regulation. As a general rule:

• The organisation is the data controller for the information the organisation records about you in the App as part of its own activities (training, evaluations, internal communication, etc.).
• Bricks is the data controller for the information we process in order to make the App available to you as a user (login credentials, use of the App, and your own entries, etc.).

You may exercise your rights with the data controller for the relevant processing. If you are unsure, you may contact Bricks at kontakt@bricksperformance.com, and we will help you identify the correct recipient.

If you have any questions about our processing of your personal data, you can contact Bricks here:
Bricks Performance System ApS
CVR (Danish company registration number): 41732474
Njalsgade 76, 4th floor, 2300 Copenhagen S, Denmark
E-mail: kontakt@bricksperformance.com

What personal data we collect and the purpose

We process personal data about you when you have downloaded the Bricks Performance App (the “App”) and created a user profile. Read more about our processing in the various situations below.

You can always view this privacy policy in the App under settings.

Use of the App

When you use the App, we process the following information:

• Technical information: IP address, information about your device, operating system, app version and browser
• Usage information: how you access and navigate the App, which functions you use, and error data
• Login credentials: e-mail address and encrypted password
• Profile and account information: name, date of birth, any profile pictures

Purpose: To make the App available to you, deliver the functions you sign up for, ensure error-free operation, and further develop the App.

Legal basis: Performance of our agreement with you on the use of the App, cf. Article 6(1)(b) of the General Data Protection Regulation. For information collected via cookies and similar technologies in the App, we process on the basis of your consent (Article 6(1)(a) and section 3 of the Danish Executive Order on Cookies) or — where relevant — our legitimate interest in error-free operation (Article 6(1)(f)).

Retention: For as long as you have an active user profile. When you delete your account, or after 24 months of inactivity, your information is deleted or anonymised within 2 months, unless we are required to retain it for longer (e.g. for accounting purposes or legal claims).

Health and performance data

The App may process information about your state of health and sporting performance, including:

• Injuries, injury history and rehabilitation
• Mental health (self-reported)
• Nutrition and diet
• Training load, sleep, and physical development
• Sporting measurements and test results

This information is registered either by you or — if you are affiliated with an organisation (club, team, coach) — by a third party on your behalf.

Purpose: To deliver the App’s functions for measuring, recording and monitoring your sporting development and health.

Legal basis: Your explicit consent, cf. Article 9(2)(a) read together with Article 6(1)(a) of the General Data Protection Regulation. Consent is obtained in the App before the first registration of this data and can be withdrawn at any time without justification — contact us via the above e-mail or via “Delete account” in the App.

Retention: For as long as you have an active user profile. If you withdraw your consent, we delete or anonymise the data in question without undue delay.

Purchases and subscriptions

If you make purchases or subscribe within the App via the Apple App Store or Google Play, we receive a receipt or transaction ID from the app store provider. We do not receive your full payment information — this is handled by Apple/Google.

We process the receipt ID, subscription status and renewal date in order to make the right content available to you and to comply with accounting requirements.

Legal basis: Performance of contract (Article 6(1)(b)) and legal obligation regarding accounting (Article 6(1)(c), the Danish Bookkeeping Act (Bogføringsloven)).

Retention: Accounting records are retained for 5 years plus the current financial year, cf. the Danish Bookkeeping Act.

If you are a minor

We offer the App to persons aged 13 or older. If you are under the age of 13, you may only use the App with the consent of a parent or guardian. We retain the parent’s name and e-mail address as documentation of consent, cf. Article 8(1) of the General Data Protection Regulation and section 6(3) of the Danish Data Protection Act (Databeskyttelsesloven). The documentation is deleted when the user profile is deleted.

If you are affiliated with an organisation (club, school, team, academy), the permission and consent rules may be governed by the organisation in cooperation with your parent.

Contact person at an organisation

If you are a contact person at an organisation that is a customer of Bricks, we process your name, e-mail, telephone number and job title in order to administer the customer relationship and contact you.

Legal basis: Our legitimate interest in administering customer relationships (Article 6(1)(f)).

Retention: For as long as the organisation is a customer, plus 2 months.

Where we obtain personal data from

We collect the information directly from you. If you are affiliated with an organisation, we may also receive information about you from the organisation (e.g. coaches, dietary advisers).

Sharing your personal data

We only disclose your personal data to:

• The organisation you may be affiliated with, if you have consented thereto or if it is part of the agreement between you and the organisation
• Our data processors, including cloud hosts, e-mail providers, analytics tools, etc., who process the information on our instructions and under data processing agreements
• Apple and Google, if you make purchases via their platforms (limited to transaction data)
• Public authorities, where we are legally required to do so

We endeavour to limit the disclosure of personal data. We do not sell your personal data to third parties.

Transfer to third countries

If our data processors are established outside the EU/EEA, we ensure a transfer basis in the form of the EU Commission’s Standard Contractual Clauses or an adequacy decision. You can obtain a copy of the transfer basis by contacting us.

Security

We have implemented technical and organisational measures to protect your personal data against unauthorised access, loss, alteration or disclosure. This includes encryption of data in transit, encrypted storage of passwords, access management and logging, as well as regular security reviews.

Your control over your data

We know that health and performance data is highly personal. The App therefore provides you with the following control tools:

• Audit log: You can at any time view in the App which persons (coaches, dietary advisers, members of your organisation, etc.) have accessed your health and performance data, and when.
• Granular sharing controls: You decide which categories of data (injuries, mental health, nutrition, physical development, etc.) may be shared with your organisation or specific coaches. You can change these settings at any time.
• Revocation of access: If you leave an organisation or wish to remove its or a specific person’s access to your data, you can do so from the App. Access ceases immediately, and data you have registered before revocation remains yours.
• Export: You can at any time export all your data in a structured, commonly used and machine-readable format.
• Deletion: You can delete your account from the App. We will delete or anonymise your data within 2 months, in accordance with the principle of data minimisation.

These tools supplement your statutory rights under the General Data Protection Regulation, which are described below.

Your rights

As a data subject, you have the following rights under the General Data Protection Regulation:

• Right of access: You can obtain access to the information we process about you.
• Right to rectification: You can have incorrect information corrected and incomplete information completed.
• Right to erasure (“the right to be forgotten”): In particular cases, you can have information about you deleted before our usual retention period.
• Right to restriction of processing: In certain cases, you can have our processing of your information restricted.
• Right to object: You can object to processing that takes place on the basis of legitimate interests, and always to direct marketing.
• Right to data portability: You can receive the information you have provided to us in a structured, commonly used and machine-readable format.
• Right to withdraw consent: You can withdraw any consent at any time. This does not affect the lawfulness of processing prior to withdrawal.
• Right to lodge a complaint: You can lodge a complaint about our processing with the Danish Data Protection Agency (Datatilsynet): www.datatilsynet.dk.

To exercise your rights, you can contact us at the above e-mail. We will process your request without undue delay and within 30 days at the latest.

Cookies and tracking technologies

In the App we use tracking technologies (including local identifiers and analytics tools). We obtain your consent for non-essential tracking technologies the first time you open the App, and you can change your preferences at any time in the App’s settings.

Updates to the privacy policy

From time to time we will update this privacy policy. In the event of significant changes, we will notify you in the App or by e-mail. The latest version is always available in the App.

Version 3.0 — effective from 18 May 2026.