Privacy Policy
Last updated: 01/25/2026
This policy describes how Ekklo SAS collects, uses, protects, and shares your personal data, including data obtained through Google APIs. We are committed to protecting the privacy of our users in accordance with the General Data Protection Regulation (GDPR).
1. Who are we?
Ekklo SAS — 229 rue Saint-Honoré, 75001 Paris, FranceSIRET: 912 345 678 00012Contact: support@ekklo.com
2. Data collected
We collect in particular:
Coach data:First and last name, email address, payment information (via Stripe), subscription details (freemium/premium), professional liability insurance certificate or subscription, login history and platform activity, sports and nutrition programs created or shared, shared files (PDF, images, videos, etc.), calendar synchronization (via Google Calendar).
Coach clients' data:First and last name, email address, health-related data: weight, height, measurements, goals, photos, followed programs and progress, training statistics and data, files shared by their coach, access to a dedicated personal space.
Technical and analytical data:IP address, browser type, device used, browsing data and usage logs, measurement tools: Posthog, Crisp.
Note: Some collected data may be considered sensitive (health data). Such data is only processed with the explicit consent of the user concerned.
3. Use of Google user data
When you connect your Google account to Ekklo, we access the following data via Google APIs: your email address and name, your Google Calendar events (read/write).
This data is used solely to allow you to synchronize your Ekklo calendar with your Google Calendar and manage your appointments more efficiently. We never share this data with third parties. You can revoke access at any time via https://myaccount.google.com/permissions.
Important:
We do not use data obtained through Google Workspace APIs to develop, improve, or train generalized artificial intelligence or machine learning models.
4. Purposes of processing
Data is used to: provide platform services, manage user accounts, enable personalized coaching, process payments and subscriptions, offer file storage and sharing features, track sports and nutritional performance, provide user support via Crisp, and improve the user experience via Posthog.
Ekklo provides an AI-based assistant that allows coaches to automate certain tasks and access their clients' information conversationally. Use of this feature involves data processing by Ekklo and its specialized AI technology partners (see section 4bis). This feature is optional and subject to prior explicit consent.
4bis. Artificial Intelligence Assistant
How it works: The AI assistant analyzes the data required for each request (client information, tracking data, programs) to generate automated responses.
Technology partners:
- Mistral AI / France (EU) / Natural language processing / https://mistral.ai/terms/#privacy-policy
- Anthropic / United States / Natural language processing / https://www.anthropic.com/privacy
- OpenAI / United States / Natural language processing / https://openai.com/privacy
- Google (Gemini) / United States / Natural language processing / https://policies.google.com/privacy
Transfers outside the EU: Data processed by the AI assistant may be transferred to the United States. These transfers are governed by Standard Contractual Clauses approved by the European Commission and Data Protection Agreements (DPAs) signed with our partners.
Legal basis: Explicit consent (voluntary activation of the feature by the coach).
Data processed: Only the data strictly necessary for the request is transmitted. Data is not used to train our partners' AI models.
Deactivation: You may choose not to activate this feature or stop using it at any time.
5. Legal basis for processing
Processing is based on: your consent (Google connection, health data collection, use of the AI assistant), performance of the contract (Terms of Use), and legal obligations (billing, security, etc.).
6. Data storage and security
Data is stored on secure servers hosted by Dyjix SAS (France) and Scaleway (France), with encryption in transit and at rest. As part of the use of the AI assistant, certain data may be temporarily processed by our technology partners located outside the European Union, in accordance with the safeguards described in section 4bis.
7. Retention period
Your data is retained for as long as your account is active, and up to 30 days after account deletion (then permanently deleted).
8. Your rights
In accordance with the GDPR, you have the following rights: access, rectification, deletion, objection, restriction, portability, and withdrawal of consent at any time. To exercise your rights: support@ekklo.com
9. Cookies
We use cookies to measure audience (Posthog), provide user support (Crisp), and improve the user experience. By continuing to browse our site, you agree to the use of cookies.
10. Changes
We may update this policy at any time. In the event of a major change, you will be notified by email or via the application.
11. Contact
Data Processing Officer: Pomier Mathys — mathys.pomier@ekklo.com
If you have any questions or concerns about this privacy policy, please do not hesitate to contact us.