Privacy Policy

GroupFitPro for iPhone, iPad and Mac · Last updated: 26 August 2026 · Version 1.0

1. Who we are

GroupFitPro ("the app") is published by Thiris ("we", "us"), the data controller for the purposes of the EU General Data Protection Regulation (GDPR).

You can reach us at support@thiris.com.

This policy describes how the app handles information. It applies to GroupFitPro on iPhone, iPad and Mac, and to this website.

2. What we collect

Nothing. GroupFitPro does not collect, transmit or store any personal data on our servers, because we do not operate any servers for the app. There is no registration, no user account, no profile and no login. We have no way of identifying you, and no way of seeing what is in your library.

The app's App Store privacy label is "Data Not Collected".

3. Data on your device

Everything you create in GroupFitPro is stored locally, in the app's private storage area on your device, using Apple's SwiftData framework. This includes:

• the audio files you import, and their artwork;
• track metadata such as title, artist, album, duration and the BPM computed by the app;
• your playlists, folders and categories, and the order of tracks inside them;
• transition settings — fades, crossfades, trim points, class phases and per-track volume;
• your class schedule: class names, dates and recurrence rules, venues, networks and formats;
• post-class reviews and any notes you write;
• app preferences, and a single cached flag recording whether a Premium subscription is active.

This data never leaves your device unless you enable iCloud sync (section 4), export to Calendar (section 5), or share a file yourself using the system share sheet. Other apps cannot read it, and neither can we.

On-device analysis

BPM detection, artwork colour extraction and waveform/duration analysis all run locally on your device, using Apple's audio frameworks. No audio is ever uploaded anywhere for analysis.

4. iCloud sync (Premium)

If you subscribe to GroupFitPro Premium, the app can keep your library in sync across your devices using Apple CloudKit, in the private database of the iCloud container iCloud.com.thiris.groupfitpro.

What this means in practice:

• Your data is stored in your own iCloud account, under your Apple Account, and is subject to Apple's Privacy Policy and iCloud terms.
• A private CloudKit database is accessible only to the signed-in Apple Account. We have no access to it — the developer of a CloudKit app cannot read, list or export records in users' private databases.
• We receive no notification of what you sync, how much you sync, or when.
• Sync is off for users without a Premium subscription: their data is stored in a local-only store.

You can stop iCloud sync at any time by turning iCloud off for GroupFitPro in your device's system settings (Settings → your name → iCloud), and you can delete the synced data from Settings → your name → iCloud → Manage Account Storage.

5. Calendar access

GroupFitPro can export your class schedule to the Calendar app so your classes appear alongside the rest of your week. This requires your explicit permission, which iOS and macOS ask for the first time you use the feature, and which you can revoke at any time in your system settings.

• Calendar access is used only to create, update and remove the events that correspond to your GroupFitPro classes, and to read them back so the app can keep them in step with your schedule.
• Events are written to the calendar account you choose, on your device. They follow the sync rules of that account (for example iCloud, Google or Exchange) — which is a relationship between you and that provider.
• We never receive your calendar contents. Declining the permission simply disables the export; every other feature keeps working.

6. Your music files

GroupFitPro is a player, not a streaming service. You import MP3 and M4A files that you already have, using the system file picker. The app copies them into its own storage so playback keeps working even if the original file is moved, and computes BPM and artwork locally.

We never receive, scan, fingerprint or upload your audio, and the app makes no connection to any music identification service. You are responsible for holding the rights and public-performance licences required to play that music in your classes.

7. Subscriptions and payments

GroupFitPro Premium is an auto-renewable subscription sold through the App Store using Apple's StoreKit. All payment processing is handled by Apple. We never see and never receive your name, address, card number, or any other payment detail.

The app asks StoreKit whether an active subscription exists and stores the answer as a single boolean value on your device, so it knows which features to unlock. That flag contains no identifier.

Apple provides us with anonymous, aggregated sales and subscription reports (for example: number of subscriptions per country per day). These reports do not identify individual users. Apple's handling of your purchase is governed by Apple's Privacy Policy.

8. Notifications and Live Activities

If you allow notifications, GroupFitPro can show your class timer on the Lock Screen and in the Dynamic Island using Apple's Live Activities. These are generated on your device from your own schedule. We operate no push notification server and send you no marketing messages.

9. No tracking, no ads

GroupFitPro contains:

• no analytics or telemetry SDK (no Firebase, Google Analytics, Facebook SDK, Amplitude, Mixpanel or equivalent);
• no crash-reporting SDK;
• no advertising, ad network or ad identifier (IDFA);
• no cross-app or cross-site tracking, and therefore no App Tracking Transparency prompt;
• no third-party code that phones home.

The only network connections the app can make are to Apple: the App Store (to fetch prices and validate your subscription) and iCloud (if you enabled sync).

If you separately turn on "Share With App Developers" in your device's Analytics & Improvements settings, Apple may pass us aggregated, anonymised crash and energy diagnostics. That is an Apple system feature, controlled by you, and it does not identify you.

10. If you contact support

Emailing support@thiris.com means we necessarily receive your email address and whatever you choose to write. We use it only to answer you.

Legal basis: our legitimate interest in providing support (GDPR Art. 6(1)(f)). We keep support correspondence for up to 24 months and then delete it. Please do not send us personal data you do not need us to have.

11. This website

This site is static. It sets no cookies, runs no analytics and embeds no third-party scripts, fonts or trackers — which is why you were not asked to accept anything.

Our hosting provider may keep standard server logs (IP address, timestamp, requested page, user agent) for a short period for security and troubleshooting. That is a technical necessity of serving a website (GDPR Art. 6(1)(f)); we do not use those logs to build profiles.

12. Retention and deletion

Because we hold no data about you, there is nothing on our side to retain or delete. You are in complete control:

• Delete individual items — remove tracks, playlists or classes inside the app. Deleted audio files are removed from storage.
• Delete everything on a device — delete the app. iOS and macOS remove its entire storage area, including all imported audio.
• Delete synced data — Settings → your name → iCloud → Manage Account Storage → GroupFitPro.
• Calendar events — remove them in the Calendar app, or disable the export in GroupFitPro before deleting the app.

13. Your rights

If you are in the European Economic Area, the UK or Switzerland

The GDPR gives you the right to access, rectify, erase, restrict and port your personal data, and to object to its processing. Since GroupFitPro sends us no personal data, these rights are exercised directly on your device — your data is already in your hands, and you can export or delete it yourself at any time.

For anything you have sent us by email, write to support@thiris.com and we will act within 30 days. You also have the right to lodge a complaint with your supervisory authority (in France, the CNIL).

If you are in California

We collect no categories of personal information as defined by the CCPA/CPRA, and we have never sold or shared personal information — for behavioural advertising or otherwise. There is consequently nothing to opt out of, and we will never discriminate against you for exercising a privacy right.

International transfers

We transfer nothing, because we receive nothing. Where your data is stored in iCloud, its location and any transfer are governed by your agreement with Apple.

14. Children

GroupFitPro is a professional tool for fitness instructors and is not directed at children. We do not knowingly collect data from anyone, including children under 13 (or under 16 in the EEA, where applicable).

15. Security

Your data is protected by the operating system: app storage is sandboxed and covered by the device's encryption, including Data Protection when a passcode is set. iCloud data is encrypted in transit and at rest by Apple. Because we hold no copy of your data, there is no database of ours that could be breached.

We recommend keeping a device passcode and Find My enabled, and keeping iOS and macOS up to date.

16. Changes to this policy

If we change how the app handles data, we will update this page and change the date at the top. Material changes will also be described in the app's release notes on the App Store. This page is the current, canonical version; the date at the top always tells you when it last changed.

17. Contact

Questions about this policy, or about privacy in GroupFitPro:

Thiris
support@thiris.com
group-fit.pro