Draft, as of October 19, 2026 – please fill in the details in square brackets and have this reviewed by a lawyer.
Ilja Mazar, Jakob-Kneip-Straße 22, 40595 Düsseldorf, Email: [email protected]
This website is hosted by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. When you visit it, the provider processes technically necessary data such as your IP address, the time of access and the page requested, in order to deliver the site and protect it against attacks (Art. 6(1)(f) GDPR). A data processing agreement is in place with Cloudflare. Transfers to the USA are based on the EU-U.S. Data Privacy Framework, under which Cloudflare is certified.
This website sets no cookies and uses no analytics or advertising services. Fonts are loaded from our own server, not from Google. The only thing stored locally in your browser is your choice between light and dark mode.
If you write to us, we use your information only to respond to your request (Art. 6(1)(b) or (f) GDPR).
The camera detects your movements exclusively on your device. Camera images are not transmitted to us. Videos are only saved if you turn on “Record video” – they then go into the “365 Lions Clips” album in your Photos library.
Reps, streaks, plans and history are stored on your device. No account is required for this, and this data is not transmitted to us.
The app writes your workouts to Apple Health only if you consent. You can revoke this permission at any time in the Health settings.
Reminders are scheduled locally on your device. Siri Shortcuts and the Widget only access data on your device.
iOS may provide technical crash reports. They are stored on your device and only transmitted if you send them yourself via “Share reports.”
The Community is optional. Only if you create a Community profile is the following data transmitted to our server and made visible to other users: display name, short bio, Instagram handle (optional), profile color and picture, city with approximate location, Crew, points, reps and – only if you turn it on – your streak. To calculate points, the reps per exercise, end time and duration of each camera-counted session are transmitted, but no camera images. If you suggest workout spots, upload photos of them or plan meetups, this information is stored as well.
The legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time by selecting “Delete profile on all devices” in the app. Your profile, picture, online history, points, your own meetups and uploaded photos are then deleted; approved workout spots remain, with no link to you. [Enter server operator, storage location and retention period]
If you connect your iPhone and iPad over the internet, rep counts are relayed between your devices via our server. [Review scope and add details]
You have the right of access, rectification, erasure, restriction of processing, data portability and objection (Art. 15–21 GDPR). You can also lodge a complaint with a data protection supervisory authority, for example the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW).