Privacy Policy

Who we are

XAGON Performance Systems is a sports and fitness school. We run the academy website at xagonperformancesystems.gr and the X-AGON Academy mobile app, through which our students follow the certification programmes they have enrolled on. We are the data controller for the personal data described below. You can reach us at xagon.performance@gmail.com.

What we collect, and why

Your account

Your name, email address and password, which you give us when the school creates your account or when you register yourself. The password is never stored as you typed it — only as a bcrypt hash. You may optionally add a headline, a short bio and a profile picture. We need this to identify you and to give you access to the material you are entitled to.

Your studies

Which courses you are enrolled on, which lessons you have marked as complete, and your quiz attempts — the answers you gave, your score and when you sat them. Your tutors see this: marking exams and tracking progress is the service the school provides.

Technical data

The date of your last sign-in, a session cookie on the website and an access token in the app, both of which simply keep you signed in. Our hosting provider keeps standard server logs.

Enquiries

If you use the enquiry form, we keep the name, email, phone number and programme you sent so that our team can answer you.

What we do not do

We do not sell or rent your data. We do not show advertising and we carry no advertising identifiers. We do not run third-party analytics or tracking SDKs in the app. We do not ask for your location, your contacts, your photos or any health data.

Who else sees your data

Our hosting provider, which stores the database and files on our behalf, and our email provider, which delivers the messages we send you. Some course videos are hosted on YouTube and Vimeo and embedded in the lesson — pressing play contacts those services directly, and what they collect is governed by their own privacy policies. We also disclose data where the law requires it.

How long we keep it

Your account and study record stay with us for as long as you are a student of the school, and afterwards for as long as we may need to confirm that you hold a certification. Enquiry details are kept until the enquiry has been dealt with. Ask us to delete your account and we will.

Your rights

Under the GDPR you may ask us for a copy of your data, ask us to correct it, ask us to delete it, or object to how we use it. Write to xagon.performance@gmail.com and we will answer within 30 days. You also have the right to complain to the Hellenic Data Protection Authority.

Deleting your account

Email us from the address on your account, with the subject Delete my account. We remove your account, your enrolments, your progress and your quiz attempts within 30 days. Course material itself belongs to the school and stays with us.

Security

The site and the app talk to our servers over HTTPS. Passwords are hashed. Access to student records is limited to the school's administrators and tutors.

Children

The academy is meant for adult learners training as exercise professionals. We do not knowingly create accounts for children under 16.

Changes to this policy

If we change how we handle your data we will update this page and the date at the top of it.