Last updated: August 2026
1. Data Controller
The controller for data collected on zone8.fit is XTC Invest, sole proprietorship (French micro-entrepreneur status), business registration (SIRET) 989 142 567 00019, 4 impasse des hirondelles, 83390 Cuers, France — contact: contact@zone8.fit.
2. Data Collected
Depending on the features you use, we collect:
- At sign-up: first name, email, fitness level, target race date (optional)
- In the member area: height, weight, athletic performance (running, strength), goals, events, Coach 8 questionnaire data (experience, physical constraints, equipment, sleep/stress)
- Payment: card data never passes through our servers — it is processed directly by Stripe (see section 5)
- Browsing: a technical cookie stores your language preference (French/English) for 1 year
- Contact: name, email, and message if you use the contact form
Some of this data (weight, physical performance) may be considered health-related data in a broad sense. It is used solely to personalize your tracking and training program, never for any other purpose.
3. Purposes and Legal Bases
| Purpose | Legal basis |
|---|---|
| Creating and managing the member account | Contract performance |
| Generating training programs (free and Coach 8) | Contract performance |
| Processing payments and subscriptions | Contract performance |
| Responding to contact form requests | Legitimate interest |
| Remembering language preference (cookie) | Legitimate interest / strictly necessary |
4. Data Retention
Account data is kept as long as the account is active. In case of prolonged inactivity or a deletion request, data is deleted within a reasonable timeframe, subject to legal retention obligations (particularly accounting, generally 5 to 10 years for billing-related documents).
5. Recipients and Processors
Your data is shared with the following technical providers, strictly as necessary for the service to function:
- Supabase Inc. — database hosting and authentication
- Netlify, Inc. — site hosting
- Stripe, Inc. — payment and subscription processing (Stripe only receives the information necessary for payment)
- Anthropic — provider of the AI model used by Coach 8 to generate personalized programs; the information transmitted (athletic profile, goals, constraints) is used solely to generate your session/program
Some of these providers are located outside the European Union (United States). They rely on appropriate transfer mechanisms (standard contractual clauses or equivalent certifications) to ensure an adequate level of protection.
No data is sold to third parties for commercial or advertising purposes.
6. Your Rights
Under GDPR, you have the following rights over your personal data:
- Right of access and rectification
- Right to erasure ("right to be forgotten")
- Right to restrict processing
- Right to data portability
- Right to object
To exercise these rights, contact us at contact@zone8.fit. You also have the right to lodge a complaint with the French data protection authority, the CNIL (cnil.fr), or your local data protection authority.
7. Security
Access to your account is protected by a unique sign-in link sent by email (no stored password). Data is hosted on secure infrastructure with strict access rules limiting each account to its own data.
8. Cookies
The site uses a single technical cookie, necessary to remember your language preference (French/English) once you've made your choice. This cookie collects no browsing or advertising tracking data, and therefore does not require prior consent under CNIL cookie regulations.
9. Contact
For any question regarding this policy, contact us via the contact page or at contact@zone8.fit.