Last updated: August 2026
1. Data Controller
The controller for data collected on zone8.fit is XTC Invest, sole proprietorship (French micro-entrepreneur status), business registration (SIRET) 989 142 567 00019, 4 impasse des hirondelles, 83390 Cuers, France — contact: contact@zone8.fit.
2. Data Collected
Depending on the features you use, we collect:
- At sign-up: first name, email, fitness level, target race date (optional)
- In the member area: height, weight, athletic performance (running, strength), goals, events, Coach 8 questionnaire data (experience, physical constraints, equipment, sleep/stress)
- Payment: card data never passes through our servers — it is processed directly by Stripe (see section 5)
- Browsing: a technical cookie stores your language preference (French/English) for 1 year
- Contact: name, email, and message if you use the contact form
Some of this data (weight, physical performance) may be considered health-related data in a broad sense. It is used solely to personalize your tracking and training program, never for any other purpose.
3. Purposes and Legal Bases
| Purpose | Legal basis |
|---|---|
| Creating and managing the member account | Contract performance |
| Generating training programs (free and Coach 8) | Contract performance |
| Processing payments and subscriptions | Contract performance |
| Responding to contact form requests | Legitimate interest |
| Remembering language preference (cookie) | Legitimate interest / strictly necessary |
4. Data Retention
Account data is kept as long as the account is active. In case of prolonged inactivity or a deletion request, data is deleted within a reasonable timeframe, subject to legal retention obligations (particularly accounting, generally 5 to 10 years for billing-related documents).
5. Recipients and Processors
Your data is shared with the following technical providers, strictly as necessary for the service to function:
- Supabase Inc. — database hosting and authentication
- Netlify, Inc. — site hosting
- Stripe, Inc. — payment and subscription processing (Stripe only receives the information necessary for payment)
- Anthropic — provider of the AI model used by Coach 8 to generate personalized programs; the information transmitted (athletic profile, goals, constraints) is used solely to generate your session/program
- Google Analytics (Google LLC) — audience measurement, only if you have given consent via the cookie banner; IP anonymized
Some of these providers are located outside the European Union (United States). They rely on appropriate transfer mechanisms (standard contractual clauses or equivalent certifications) to ensure an adequate level of protection.
No data is sold to third parties for commercial or advertising purposes.
6. Your Rights
Under GDPR, you have the following rights over your personal data:
- Right of access and rectification
- Right to erasure ("right to be forgotten")
- Right to restrict processing
- Right to data portability
- Right to object
To exercise these rights, contact us at contact@zone8.fit. You also have the right to lodge a complaint with the French data protection authority, the CNIL (cnil.fr), or your local data protection authority.
7. Security
Access to your account is protected by a password you choose. Your password is never kept in plain text: it is stored in hashed form by our authentication provider. If you forget it, resetting is done through a unique link sent by email. Data is hosted on secure infrastructure with strict access rules limiting each account to its own data.
8. Cookies
The site uses two types of cookies:
- A technical cookie, necessary to remember your language preference (French/English) once you've made your choice. This cookie collects no browsing or tracking data, and does not require prior consent.
- Audience measurement cookies (Google Analytics), used only if you give your consent via the banner shown on your first visit. They let us understand how the site is used (pages viewed, traffic sources) to improve it. Your IP address is anonymized before any processing. You can change your choice at any time via the "Manage Cookies" link at the bottom of every page.
In line with CNIL recommendations, your choice is kept for a maximum of 13 months, after which the consent banner will be shown to you again.
9. Contact
For any question regarding this policy, contact us via the contact page or at contact@zone8.fit.