Privacy policy

GPATH PRIVACY POLICY

Last Updated: 28.04.2025

1. INTRODUCTION

This privacy policy tells you how GPATH SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ ("Gpath," "we," "us," or "our") collects and processes your personal data when you visit our website, use our mobile application, interact with us, purchase our products or services, or otherwise engage with Gpath Services.

It is important that you read this privacy policy, together with any other privacy notices we may show you from time to time, so that you are fully aware of how and why we are using your personal data.

This website and our services are not intended for children, and we do not knowingly collect data relating to children.

By accessing or using Gpath Services, you accept and agree to the practices described in this Privacy Policy.

2. ABOUT US

Gpath offers workout tracking technology through our Gpath Pin sensor that connects to our mobile application, helping users track, progress, and optimize their workouts with enhanced data collection and analysis.

GPATH SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ is the data controller responsible for your personal information. We are based in Poland, but our services are available to users in the European Union, United States, and other regions.

3. DATA THAT WE COLLECT

There are several different ways we may collect or receive your personal data:

Information You Provide Directly On Website

When you purchase products, or interact with our services, you may provide us with:

  • Contact Information: Name, shipping address, billing address, phone number, email adress
  • Payment Information: Credit card details (processed by our payment processors)
  • Communications: Information you share when contacting customer support

Information Collected Through Gpath Pin and App

When you use our Gpath Pin sensor and mobile application, we collect:

  • Workout Data: Exercise types, repetitions, sets, duration, intensity
  • Account Information: Email address, username, password
  • Profile Information: Gender, age, height, weight, fitness goals
  • Performance Metrics: Movement patterns, force application, speed
  • Progress Information: Historical workout data, achievements, goals
  • User Input: Manual entries about workouts, feedback, notes

Information Collected Automatically

When you visit our website or use our app, we automatically collect:

  • Device Information: Device type, operating system, unique device identifiers
  • Usage Data: How you interact with our app and website, features used, time spent
  • Log Data: IP address, browser type, pages visited, time and date of visits
  • Location Information: General location based on IP address and, if permitted, more precise location data
  • Tracking Data: Information we or others collect from cookies and similar tracking technologies

Information From Third Parties

We may receive information about you from:

  • Payment processors
  • App stores
  • Analytics providers
  • Social media platforms (if you connect your accounts)
  • Other services you connect to your Gpath account

Information We Collect about Your Usage

We may also automatically collect certain information about your interaction with the Services ("Usage Data"). To do this, we may use cookies, pixels and similar technologies ("Cookies"). Usage Data may include information about how you access and use our Site and your account, including device information, browser information, information about your network connection, your IP address and other information regarding your interaction with the Services.

4. TYPES OF PERSONAL DATA WE COLLECT

The personal data we collect falls into these categories:

  • Identity Data: Name, username, gender, date of birth. If you interact with us through social media, this may include your social media username.
  • Contact Data: Billing address, delivery address, email address, phone number
  • Financial Data: Payment card and bank account details (processed securely by our payment processors)
  • Transaction Data: Details about payments and purchases made through our services
  • Profile Data: Your username and password, purchases, fitness goals, preferences, feedback, and survey responses
  • Technical Data: Internet protocol (IP) address, login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use
  • Usage Data: Information about how you use our website, app, and services
  • Marketing and Communications Data: Your preferences for receiving marketing communications and your communication preferences

5. THE LEGAL BASES FOR USING PERSONAL DATA

For users in the European Union, we process your personal information based on the following legal grounds:

  • Performance of Contract: Processing necessary to fulfill our contractual obligations to you, including providing our services and processing purchases.
  • Legitimate Interests: Processing necessary for our legitimate interests, such as improving our services, preventing fraud, and ensuring security.
  • Consent: Processing based on your specific consent, such as for certain types of marketing communications.
  • Legal Obligation: Processing necessary to comply with our legal obligations.

6. HOW AND WHY WE USE YOUR PERSONAL DATA

How we are using the personal data What types of personal data do we use Why we can do that
To register you as a new customer and process your orders Identity, Contact, Financial, Transaction Performance of a contract with you
To manage our relationship with you, including notifying you about changes to our terms or privacy policy Identity, Contact, Profile, Marketing and Communications Performance of a contract with you, Necessary to comply with legal obligations, Necessary for our legitimate interests (to keep records updated)
To deliver direct marketing to you Identity, Contact, Profile, Usage, Marketing and Communications, Technical, Tracking Necessary for our legitimate interests (to promote our business and products), Consent (for certain types of marketing)
To administer and protect our business and website/app Identity, Contact, Technical, Tracking Necessary for our legitimate interests (running our business, providing IT services, network security, preventing fraud), Necessary to comply with legal obligations
To deliver relevant content and advertisements Identity, Contact, Profile, Usage, Marketing and Communications, Technical, Tracking Necessary for our legitimate interests (to understand how customers use our products/services, to develop them, to grow our business)
To use data analytics to improve our website, app, products/services, marketing, customer relationships and experiences Technical, Usage, Tracking Necessary for our legitimate interests (to define customer types, to keep our website/app updated, to develop our business)
To manage your in-app profile and workout data Identity, Contact, Profile, Usage, Technical Performance of a contract with you, Necessary for our legitimate interests (to provide you with the service you requested)
To personalize your workout experience Profile, Usage Performance of a contract with you, Necessary for our legitimate interests (to provide personalized services)

7. COMMUNICATION PREFERENCES, ADVERTISING AND MARKETING

We may use your Identity, Contact, Technical, Tracking, Usage and Profile Data to form a picture of what we think you may want or need, or what may be of interest to you. This is how we decide which products, services and offers may be relevant for you.

You will receive marketing communications from us if you have requested information from us, purchased products or services, or if you provided us with your details when registering for a promotion and, in each case, you have not opted out of receiving marketing.

How to opt out

You can ask us to stop sending you marketing messages at any time by:

When you opt out of marketing messages, this will not apply to service messages related to your account, orders, or product/service updates.

Online advertising

You may see Gpath advertisements on websites and social media platforms. These may not be specifically directed at you, as we may have bid for advertising space based on keywords rather than targeting specific individuals.

We may use cookies and similar technologies to deliver relevant advertising. For more information, see our "Cookies and Similar Technologies" section below.

8. COOKIES AND SIMILAR TECHNOLOGIES

Cookies

Like many websites, we use Cookies on our Site. For specific information about the Cookies that we use related to powering our store with Shopify, see https://www.shopify.com/legal/cookies. We use Cookies to power and improve our Site and our Services (including to remember your actions and preferences), to run analytics and better understand user interaction with the Services (in our legitimate interests to administer, improve and optimize the Services). We may also permit third parties and services providers to use Cookies on our Site to better tailor the services, products and advertising on our Site and other websites.

Most browsers automatically accept Cookies by default, but you can choose to set your browser to remove or reject Cookies through your browser controls. Please keep in mind that removing or blocking Cookies can negatively impact your user experience and may cause some of the Services, including certain features and general functionality, to work incorrectly or no longer be available. Additionally, blocking Cookies may not completely prevent how we share information with third parties such as our advertising partners.

Website Cookies

Our website uses cookies and similar technologies to improve user experience, analyze usage patterns, and deliver relevant advertising. We use the following categories of cookies:

  • Strictly necessary cookies: Required for the website to function properly
  • Analytical/performance cookies: Allow us to recognize and count visitors and analyze website usage
  • Functionality cookies: Recognize you when you return to our website to personalize content
  • Targeting cookies: Record your visit, pages visited, and links followed to make content relevant to your interests

Cookie Providers We Use

Cookie Provider Description More Information
Google Analytics Used to track website statistics and user behavior https://policies.google.com/privacy
Shopify Used for e-commerce functionality and checkout https://www.shopify.com/legal/privacy
RevenueCat Used for in-app purchase management https://www.revenuecat.com/privacy
Supabase Used for authentication and database services https://supabase.io/privacy

Managing Cookies

You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. If you disable or refuse cookies, please note that some parts of our website may become inaccessible or not function properly.

9. DISCLOSURES OF YOUR PERSONAL DATA

We may share your personal data with the parties set out below for the purposes outlined in this privacy policy:

Service Providers

We share personal data with the following specific third parties:

  • Supabase: For database and authentication services; servers located in Germany
  • Shopify: For e-commerce platform services and payment processing
  • RevenueCat: For in-app purchase and subscription management
  • Google Analytics: For website analytics
  • Shipping and logistics partners: To deliver products you've ordered

Each of these service providers processes your data in accordance with their own privacy policies. We encourage you to review their policies for more information.

Legal Requirements

We may disclose your information if required by law, regulation, legal process, or governmental request.

Business Transfers

In the event of a merger, acquisition, or sale of all or part of our assets, your information may be transferred as part of the transaction.

With Your Consent

We may share your information in other ways if you have given us consent to do so.

We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.

10. INTERNATIONAL TRANSFERS

As we are based in Poland with users around the world, personal information may be transferred to different countries. We store user data with Supabase, whose servers are located in Germany.

For transfers outside the European Economic Area (EEA), we ensure a similar degree of protection is afforded to your data by implementing appropriate safeguards, which may include:

  • Using Standard Contractual Clauses approved by the European Commission
  • Transferring to countries that have been deemed to provide an adequate level of protection for personal data by the European Commission
  • Where we use providers based in the US, we may transfer data to them if they are part of the Privacy Shield which requires them to provide similar protection to personal data shared between the EU and the US

Please contact us if you want further information on the specific mechanism used by us when transferring your personal data outside the EEA.

11. DATA SECURITY

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way, altered, or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors, and other third parties who have a business need to know. They will only process your personal data on our instructions and are subject to a duty of confidentiality.

We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

12. DATA RETENTION

We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.

By law, we have to keep basic information about our customers (including Contact, Identity, Financial, and Transaction Data) for tax purposes for a period of time after they cease being customers.

If you wish to delete your account and associated data, please contact us at contact@getgpath.com.

13. YOUR PRIVACY RIGHTS

Depending on your location, you may have certain rights regarding your personal information:

For EU/EEA Users

  • Right to Access: Request access to your personal information
  • Right to Rectification: Request correction of inaccurate information
  • Right to Erasure: Request deletion of your information in certain circumstances
  • Right to Restrict Processing: Request limiting how we use your information
  • Right to Data Portability: Request transfer of your information
  • Right to Object: Object to processing based on legitimate interests
  • Right to Withdraw Consent: Withdraw previously given consent

For California Users

  • Right to Know: Request categories and specific pieces of personal information collected
  • Right to Delete: Request deletion of personal information
  • Right to Opt-Out: Opt-out of "sales" of personal information
  • Right to Non-Discrimination: Not be discriminated against for exercising these rights

Exercising Your Rights

You will not have to pay a fee to access your personal data (or to exercise any of your other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive. Alternatively, we may refuse to comply with your request in these circumstances.

We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it.

We try to respond to all legitimate requests within one month. Occasionally it may take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.

To exercise your rights, contact us at contact@getgpath.com.

14. CHILDREN'S PRIVACY

Our services are not intended for individuals under the age of 13, and we do not knowingly collect personal information from children under 13. If you are between 13 and the age of majority in your jurisdiction, your parent or legal guardian must review and agree to this Privacy Policy on your behalf.

If we learn that we have collected personal information from a child under 13, we will take steps to delete that information as quickly as possible.

15. CHANGES TO THIS PRIVACY POLICY

We reserve the right to update, change, or replace any part of this Privacy Policy by posting updates on our website. It is your responsibility to check our website periodically for changes. Your continued use of Gpath Services following the posting of changes constitutes acceptance of those changes.

You can review the most current version of the Privacy Policy at any time on this page.

16. THIRD-PARTY LINKS

This website may include links to third-party websites, plug-ins, and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy notice of every website you visit.

17. IF YOU FAIL TO PROVIDE PERSONAL DATA

Where we need to collect personal data by law, or under the terms of a contract we have with you and you fail to provide that data when requested, we may not be able to perform the contract we have or are trying to enter into with you (for example, to provide you with products or services). In this case, we may have to cancel a product or service you have with us, but we will notify you if this is the case at the time.

18. CONTACT INFORMATION

Questions about this Privacy Policy should be sent to us at contact@getgpath.com.

Our contact information:

GPATH SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ
Trzy Lipy 3 / 4.8.1B
80-172 Gdańsk
Poland
Phone: +48 662 686 612
Email: contact@getgpath.com
REGON: 529207303
VAT: PL8442385840