Privacy policy for 50 Minutes
This policy explains what data the 50 Minutes app uses about you, why we use it, and what you decide yourself. It also covers the Intelligent Motion app, the earlier version of 50 Minutes. Both apps use the same server and the same data.
The Danish version is the governing version.
Who are we?
50 Minutes is a training app for you at your workplace. The app builds a training programme for you from your answers to a questionnaire about your body and your fitness.
The app is made by:
SelfBack ApSCVR 41894334
Gyvelvænget 25, 5690 Tommerup, Denmark
We are responsible for your data in the app. This is called being the “data controller”.
If you have questions, email support@50minutter.dk. Our data protection officer is Complianceservice ApS. You can reach the data protection officer at dpo@selfback.dk.
The app is for people aged 15 or over.
What do we use your data for?
- To make the app work, so you can log in and see your programme.
- To build your training programme from your answers and adjust it when you answer again.
- To show your team’s or group’s progress, if you are in a team or a group.
- To keep the app secure and fix errors.
- Research, but only if you have said yes to it in the app under “Account” → “Permissions”.
Your programme is generated automatically from your answers. This has no legal effect on you, and you can always answer again and get a new programme.
We do not sell your data. We do not use it for advertising.
What data do we use?
We only use the data the app needs.
| Data | What is it? | Why do we have it? |
|---|---|---|
| Login | Your phone number and the one-time codes we send you by SMS | So you can log in |
| Name and email | If you enter them yourself | For your profile. Your name can be seen by the others in your team |
| Your workplace | The activation code from your workplace and the teams and groups you belong to | So you get access through your workplace |
| Your body and fitness | Your questionnaire answers: pain and discomfort in your body, your own rating of your fitness and strength, the balance test, height, weight, sex, year of birth and the type of work you do. If you choose to: waist and hip measurements, body fat percentage, blood pressure, grip strength, jump height and fitness rating | So we can build the right programme for you |
| Your training | Your programme, the exercises you do or skip, repetitions, minutes and time | So the programme can keep up with you |
| Your phone | The phone’s make and model, operating system, app version and a device ID | So the app works on your phone and we can fix errors |
| Your choices | Whether you have said yes to research, and your settings in the app | So we do what you have chosen |
| Technical log | Which requests the app sends to our server, and when. When we send a login code, your phone number is in the log | Operations, security and troubleshooting |
Much of the data about your body is health data. That is a special category of data, so we take extra care of it.
We do not ask for your CPR number (Danish personal ID number), and we do not use your location.
Why may we use your data?
Using the app is voluntary.
We use your health data because you said yes to it when you signed up and filled in the questionnaire. This is called explicit consent. If you withdraw it, we cannot build a programme for you, and we will delete your account.
We use your other data because it is needed for us to provide the app to you.
We use the technical log because we have a legitimate interest in the app being secure and stable.
We only use your data for research if you have said yes. You can withdraw that in the app under “Account” → “Permissions”.
If you withdraw a consent, what we did before remains lawful.
Legal basis: GDPR Article 6(1)(b) (contract) and 6(1)(f) (legitimate interest), Article 9(2)(a) (explicit consent), and for research Article 6(1)(a).
Who can see your data?
Your workplace and your manager cannot see your answers, your health data or which exercises you do.
If you are in a team, the other team members can see your name, how many minutes you trained this week and when you were last active. If you are in a group, the other members can see the group’s combined progress.
We use two companies that help us run the app. They may only use your data on our instructions:
- Amazon Web Services EMEA SARL (Luxembourg) runs our server and database in Frankfurt, Germany, delivers videos and images to the app and sends login codes by SMS. This website is also hosted by AWS, in Ireland, and delivered through AWS’s CloudFront network.
- Google Cloud EMEA Limited (Ireland) provides our email. If you write to us, your message is stored there.
Apple and Google are themselves responsible for the data they receive when you download the app from the App Store or Google Play.
We only pass your data on to others if the law requires it.
Is your data sent outside the EU?
Your data is stored in the EU. If your phone number is not Danish (+45), however, we send your login code through AWS’s SMS service in the United States, which means your phone number and the code go to the US. This relies on the European Commission’s decision on the EU-US Data Privacy Framework, under which Amazon is certified, and on the European Commission’s standard contractual clauses in AWS’s data processing addendum.
How long do we keep your data?
- We keep your account, your answers and your training for as long as you have an account.
- Login codes only work for 5 minutes.
- We use the technical log only for operations, security and troubleshooting. We are introducing automatic deletion of the log after 90 days.
How do we protect your data?
- The connection between the app and our server is encrypted.
- You log in with a code that we send you by SMS and that only works for 5 minutes.
- If a security breach could harm you, we tell you as soon as possible. We also report it to the Danish Data Protection Agency within 72 hours.
How to delete your account
Email support@50minutter.dk and tell us the phone number you use in the app. We will delete your account and all your data within 30 days and let you know when it is done.
Please note: the “Delete my account” function in the app currently only removes your phone number and logs you out. Your other data is not deleted. We are fixing this. Until then, please email us to have everything deleted.
Your rights
It is your data. You have the right to:
- see what data we hold about you
- have inaccurate data corrected
- have your data deleted
- have us stop using it for a while
- receive your data so you can take it with you
- object to our use of it where we rely on our legitimate interest
- withdraw your consent
Email support@50minutter.dk to use any of your rights. We reply within one month.
Cookies
Neither the app nor this website uses cookies or tracking or analytics tools.
Complaints, changes and contact
If you think we are not taking good enough care of your data, please write to us first at support@50minutter.dk. You can also complain to the Danish Data Protection Agency (Datatilsynet):
DatatilsynetCarl Jacobsens Vej 35, 2500 Valby, Denmark
Email: dt@datatilsynet.dk
Website: www.datatilsynet.dk
We may change this policy. If we change something important, we will let you know before it takes effect.
Contact: SelfBack ApS, support@50minutter.dk