Privacy policy

The data controller is Adam Siao Him Fa, publisher of Skrida. For any question about your data: contact@skrida.app.

Sole proprietor (French micro-entreprise), SIREN 881 505 739, established at 9 allée des Conviviales, appartement 263, 33700 Mérignac, France.

• Account: email address, password (never stored in clear text), name or nickname, date of birth, country, role, category and club if you provide them, profile picture, language. For a minor below the digital age of consent: the parent’s or guardian’s email address, used only to collect and keep proof of their authorization.
• Training: sessions, ISU element attempts and their details (including those your coach records for you in a group session), programs and their recorded run-throughs, competitions, the goals you set for each element (target success rate, optional deadline, creation date and the date the goal is reached), notes from your coach.
• Daily journal — health data: weight, sleep, hydration and perceived fitness. Entering them is optional: the app works without. We keep a record of your explicit consent (version and date) and of any withdrawal.
• Training videos: the videos you add to your sessions, with their title, file name, size and date. In the iPhone app, each video is re-compressed on your phone before upload (1920 × 1080 pixels and 60 frames per second at most); the uploaded copy does not carry over the original file’s metadata, such as where it was filmed or the device model. On the website, the browser compresses it the same way when it can; a video that already meets these limits may also be uploaded as is, with its original metadata. Video storage is limited to 5 GB per account, enforced by our servers.
• Subscription and payments: status, plan, renewal date, technical identifiers (Stripe or Apple), and the history of your payments and refunds (date, amount, plan, country). No bank details are kept by Skrida.
• Notifications: if you turn them on, your device’s technical identifier (iPhone app token or browser subscription) and the device or browser type, until you turn them off, sign out or delete your account. In the iPhone app, the content of each notification (for example your coach’s name and the title of their note) goes through Apple’s notification service.
• Reports: the reported content, frozen at the time of the report, the people involved, and the decisions taken. For a reported video, the report keeps its references (identifier, session, file name, title and date), not the video itself.
• Requests and messages: the subject and content of the messages you send us from “Contact Skrida” (linked to your account, with its status at the time of sending: sanction in progress or parental authorization pending), by email to contact@skrida.app or on Instagram (with your address or account name), and our replies.
• Customer relationship follow-up: in an internal tool reserved for the publisher, your account information (name, username, photo, email address, role, age bracket — under 15, 15 to 17, 18 and over —, country, club, category, language, parental authorization status), your sign-up and last sign-in dates, the history of your subscription (including any free access and its reason) and of your payments, activity counters (number of sessions, attempts, program run-throughs and videos, sessions recorded each month, date of your last session), your links with a coach or athletes, the dates of your acceptances (terms of use, privacy policy, consent for the journal), your referrals, the reports concerning you and moderation decisions (without their content), as well as the publisher’s internal tags and notes. The tool also shows overall usage statistics, computed across all accounts from data already recorded (sign-ups, active athletes, sessions, features used and retention, week by week), with no individual data and no tracker. Never the data in your daily journal, not even the number of days you fill it in, nor the details of your sessions (titles, rinks, attempts, videos), nor the text of a report.
• Security logs: if an account tries to open a Skrida administration tool (the app offers none to users), we record the date, the account’s email address, the IP address, the browser and the outcome of the attempt.
• Technical logs: our hosting providers automatically record the IP address, the type of device or browser and the time of connections and requests, for security and troubleshooting.
• Two-factor authentication (optional): if you turn it on (Menu › Security), our authentication provider keeps the secret key used to check your 6-digit codes and, for each code entered, its date and the device’s IP address. The key is erased when you turn two-factor authentication off or delete your account. Lost phone: we remove it after verifying your identity by email.
• Waiting list (waitlist.skrida.app): first name, last name, email address, browser language, sign-up date and a record of consent.
• On your device: the app stores locally your sign-in session, your language, your theme, a few display and input preferences (including the last number of rotations chosen for each jump) and your subscription status; the code from a referral or coach-invitation link you opened (30 days at most); the sign-up form in progress, without the password; a 24-hour lock after a sign-up refused because of age; and, so it can start without a network, a copy of the data you last viewed, including the last day shown in your journal if you use it. It also keeps entries and videos not yet sent, until they are sent. If you turn on reminders on your iPhone, the app schedules those notifications on the phone itself (Monday morning, and the day before a planned session, with its title): these reminders never go through our servers (unlike the notifications sent by your coach, described above) and are canceled when you sign out. This storage is used only for the app to work and for the preferences you choose, never for tracking; the offline copy is erased when you sign out. The website uses only technical cookies: one for the side menu display, and those of our hosting provider for security and for delivering the site (bot protection, site version served). Skrida uses no advertising cookies and does no audience measurement: these technical cookies do not require your consent, hence no banner.

No advertising trackers, no targeted advertising, no sale of data, no automated decision about you.

• Providing the service — performance of the contract
• Managing the subscription, billing and the payment register — contract and accounting obligation
• Daily journal — explicit consent
• Sharing with your coach — consent (accepting the link), adjustable per link and per session
• Answering your requests — performance of the contract; legal obligation for the exercise of your rights; legitimate interest for people without an account
• Customer relationship follow-up (helping you, managing billing, understanding why subscribers join and leave) — legitimate interest, which you can object to
• Security and abuse prevention, including the access logs of administration tools — legitimate interest
• Moderation and protection of minors — legitimate interest
• Waiting list — consent

To follow up on customer relationships, the publisher’s tool automatically sorts accounts into lists: paying subscribers, free access, free accounts, former subscribers, coaches, sanctioned accounts, annual subscriptions to notify before renewal, and “at risk” subscribers when a payment is overdue, automatic renewal has been turned off or no session has been recorded for 14 days. This classification helps the publisher offer help; it triggers no automated decision. The “at risk” list never includes anyone under 18.

We may write to you about your account or your subscription, for example to offer help if you seem to have stopped using the app. You can object at any time, using the link in each message, by replying to it or by writing to us. People under 18 never receive this kind of message.

• Videos: 60 days after upload, then deleted automatically
• Account and training: for as long as the account exists; on account deletion, data, videos and profile photo are erased immediately, and technical backup copies disappear within 30 days. An account with no sign-in for three years is deleted, after a warning email one month before
• Date of birth, country and parent’s email sent at sign-up: copied into your profile, then removed from your account’s sign-in data shortly after sign-up (within two hours)
• Payment history and billing records: ten years (legal obligation); when the account is deleted, this history is detached from your profile
• Internal follow-up notes and tags: for as long as the account exists
• Requests and messages with us: three years at most after the last exchange (a message sent from the app is erased earlier if you delete your account); requests to exercise your rights and our replies: five years after they are closed, so we can prove our reply
• Access logs of administration tools: one year
• Hosting providers' technical logs: for the time set by each provider for security and troubleshooting
• Reports: one year after closure
• Log of moderation decisions: five years
• In-app notifications: one year after they are sent, once read; the others until the account is deleted
• Contract emails for the web subscription (summary, renewal reminder, cancellation and withdrawal confirmations): three years after they are sent
• Unused parental-consent links: 30 days
• Proof of acceptance of the terms: for the life of the account, then five years in pseudonymized form (email fingerprint, document, version, date)
• App Store notifications about a subscription: ten years (accounting records)
• Waiting list: until the single email announcing the launch, then erased within 30 days; earlier if you ask

Application hosting, deployment and delivery of the app’s emails: Lovable Labs Sweden AB (Stockholm, Sweden). Database, authentication, file storage, server functions and logs: Supabase Pte. Ltd. (Singapore), on servers located in the European Union, in Ireland (Dublin), since 1 October 2026. Content delivery and network protection: Cloudflare, Inc. (United States). Payment on the website: Stripe Payments Europe Ltd (Ireland). In-app purchase in the iOS app: Apple Distribution International Ltd (Ireland), which is then the seller and passes us only the subscription identifier and status, never bank details. contact@skrida.app mailbox: Microsoft 365, provided by GoDaddy, with spam filtering by Proofpoint (United States). Public pages and waiting list (waitlist.skrida.app): Netlify, Inc. (United States); waiting-list sign-ups are stored in the same database, in Ireland. Push notifications: Apple, Google or Mozilla notification services depending on the device. If you write to us on Instagram, your message goes through Meta, which processes it under its own terms.

Transfers outside the European Union: the app’s data is stored in the European Union. The remaining transfers (possible technical access by Supabase, a company based in Singapore; content delivery by Cloudflare; services of the other United States-based providers named above) are covered by the European Commission’s standard contractual clauses or, for certified US providers, by the EU–US Data Privacy Framework (adequacy decision of 10 July 2023). You can obtain a copy of these safeguards by writing to us. Additional measures: encrypted communications, encryption at rest, and isolation enforced by the database itself — each user can technically reach only their own records.

Once a link is accepted, you decide what your coach can see and do through three separate switches: your training, your daily journal (weight, sleep, condition) and the recording of your attempts in group sessions. The training switch covers your sessions (shared by default as soon as a coach is linked; any session can be made private from its page), their attempts, program run-throughs and videos, as well as your programs, competitions and element goals, which your coach can view but not change. The journal is not shared by default: it stays invisible until you turn it on. You can turn any of these switches off, or end the link, at any time.

Recording in group sessions is allowed by default. When your coach runs a group session and adds you to it, they can record your attempts there, then correct or delete the ones they recorded and add forgotten ones, with no time limit; a notification tells you when they change a past session. These attempts go into your session and your statistics like your own, marked as recorded by your coach. During the group session you don’t enter your attempts yourself, to avoid duplicates; your notes, videos, programs and journal stay open.

Your coach can watch the videos of the sessions you share with them. If they find one inappropriate, they can report it (section 8).

Skrida is aimed at an audience that includes minors. Date of birth is collected at sign-up. Below the digital consent age of the country of residence (15 in France), the account is only activated after approval by a holder of parental authority, given via an email link. In the United States, sign-up is not open to children under 13, even with a parent’s consent. The daily journal is only offered from the digital consent age. A minor cannot subscribe alone: a parent or guardian confirms it before any payment. People under 18 are never on the “at risk” list and never receive the messages described in section 3. The holder of parental authority may exercise the rights below on the minor’s behalf at any time. Any video showing a minor requires the authorization of their legal representatives.

Reported content is frozen at the time of the report, then reviewed by a person, the publisher, who decides what happens next. No decision is taken automatically. Any measure affecting an account (warning, suspension, ban) is explained and notified to the person concerned, who may contest it by writing to us. A coach can report a video an athlete shares with them: the report keeps the video’s references, not the video itself.

• Access: find out what data we hold about you and get a copy. The app’s export (Menu › Export my data) contains your account, training and journal data; the customer relationship information (notes, requests, payment history, access log) is provided on request.
• Rectification: correct information. Your name, username, photo, club, category and language can be changed in the app. Your date of birth, country, sign-in email address and your parent’s email address are corrected on request, because they determine parental authorization and access to certain features.
• Erasure: delete your account and data from Menu › Delete my account. If you subscribe through the App Store, deleting your account does not stop the subscription: cancel it first in your Apple account settings (Settings › your name › Subscriptions).
• Portability: retrieve your data from Menu › Export my data
• Withdrawing your consent for the journal: at any time, Menu › Withdraw my journal agreement. Sharing with your coach is turned off in the link settings.
• Objection to customer relationship follow-up and to messages about your account or your subscription, on simple request
• Restriction of, and objection to, other processing, on request
• Instructions on what happens to your data after your death

To exercise these rights: from the app (Menu › Contact Skrida) or by email to contact@skrida.app, from your account’s address. We reply to that address, so that no third party can obtain your data; if in doubt, we ask you to confirm your request.

We reply within one month. If your request is complex, this period may be extended by two months; we will tell you so within the first month.

You may lodge a complaint with the CNIL or with the supervisory authority of your country of residence.

• We never sell or rent your data.
• No targeted advertising.
• On Skrida’s side, only the publisher, Adam Siao Him Fa, accesses your individual data, and only to answer your requests, manage subscriptions and billing, follow up on customer relationships, ensure security and moderate reports. His customer follow-up tool and moderation powers are reserved for his account and require two-factor authentication; views of a customer record or a report are logged there.
• Notification in the event of a data breach that poses a risk to you.

Any substantial change will be notified to you before it takes effect.

• 29 October 2026: information, without new acceptance — iPhone app notifications (device token, content passed through Apple) and web-subscription contract emails described (sections 2, 4 and 5).
• 10 October 2026: information, without new acceptance — your element goals join your training data: your coach sees them like your sessions, without being able to change them, and they are included in the export; the internal follow-up tool shows overall usage statistics, with no individual data; the reminders you turn on on your iPhone are scheduled locally, without going through our servers (sections 2 and 6).
• 9 October 2026: clarifications, without new acceptance — follow-up messages may concern your account or your subscription, and you can also object using the link in each message (sections 3 and 9).
• 7 October 2026: customer relationship follow-up, requests and messages, logs, on-device storage and two-factor authentication described; service providers completed (mailbox, waiting-list site); recording of your attempts by your coach in group sessions; videos (compression, 5 GB of storage, reporting); minors; moderation without automated analysis; retention periods and rights clarified.
• 6 October 2026: information, without new acceptance — database hosted in Ireland since 1 October 2026 (section 5).
• 22 September 2026: service providers named, including Apple for in-app purchases; erasure period aligned with the app.
• 17 September 2026: data controller’s identity completed.