Privacy policy
Last updated: July 20, 2026
In compliance with the General Data Protection Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, and with Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights, we inform you that: The owner of this website and controller of the data processing carried out through it, as well as of the processing carried out in the course of its professional activity, is MyoQuality Solutions SL (hereinafter, the CONTROLLER), with registered office at Calle Mariano Jose De Larra 6 ACCESO 1. 18200, Maracena (Granada). España, Tax ID: B09714759 and data protection email address: legal@myoquality.com. Any personal data collected through this website or by any other means by the CONTROLLER will be processed securely and confidentially, applying the technical and organisational measures required to protect it against unauthorised or unlawful processing and against accidental loss, destruction or damage. Such data will be incorporated into the relevant processing activity owned by the CONTROLLER, including the management of personal data obtained through this website and its various forms, in which the mandatory information required will be the minimum indispensable for the contractual or legal purpose concerned, as well as the handling of personal data of clients, employees or other interested parties. The data processed may include identifying data, postal addresses, electronic addresses and other commercial information relating to the services requested. The purpose of such processing activities will be, as applicable, the management of the communications or bookings requested by data subjects, the management of the CONTROLLER's activity so as to allow the proper provision of the professional services offered, the maintenance of the relationship with clients and prospective clients, or compliance with the legal obligations applicable to the activity in question. To that end, personal data will be processed, depending on the specific characteristics of the processing concerned, on the basis of your consent where this is required — in which case it will be requested freely, specifically, in an informed and unambiguous manner — or on the basis of the performance of a contract to which you are a party or in order to take steps at your request prior to entering into a contract, on the basis of compliance with a legal obligation applicable to the CONTROLLER, or on the basis of the satisfaction of a legitimate interest of the CONTROLLER as applicable. Personal data subject to processing will be retained for the time strictly necessary to fulfil the purpose for which it was collected and to determine any legal liabilities that may arise from that purpose, except where a specific retention period is expressly provided for by applicable law. Personal data will not be disclosed to third parties, except where legally required, in which case the data may be disclosed to, among others, labour or tax authorities. You have the right of access, rectification, erasure, restriction of processing, objection to processing and data portability, as well as, where applicable, the right to withdraw your consent at any time without this affecting the lawfulness of processing based on consent prior to its withdrawal, and the right to lodge a complaint with a supervisory authority, under the terms set out in the General Data Protection Regulation and in Organic Law 3/2018 of 5 December. You may exercise these rights, where applicable, by writing to the CONTROLLER through any of the contact channels indicated, or before the Spanish Data Protection Agency at www.aepd.es.
You can exercise your right to erasure directly from the app: in Settings, section "Delete your account". The request opens a 7-day grace period during which you can cancel it. The details of the process, of the data that is deleted and of the data that is kept are available on the public account and data deletion page (/account-deletion).
This annex describes the data processing carried out by the MyoQuality+ mobile app (Android and iOS) and by the web app at plus.myoquality.com, and supplements the policy above. The data controller is the one identified above.
• Account and identifying data: name, email address, internal user identifier, password (stored encrypted by the authentication provider and never accessible to us), profile picture and, when the user supplies them, date of birth and gender. • Health and fitness data: body mass, height, body composition measurements, wellness questionnaires (sleep quality, stress, muscle soreness, energy) and the signals recorded by MyoQuality sensors paired over Bluetooth, together with the metrics derived from them (1RM, force-velocity profile, RFD, RSI, asymmetries, training load). • Training data: sessions, programs, exercises, methods, logged executions, schedule, teams, observations and notes written by the user. • Messages: the content of in-app conversations between professionals and athletes. • Subscription data: the plan, the subscription status and the identifiers of the payment operation. The app does not collect or store card details: payment takes place entirely within the payment provider’s environment. • Photos: only the images the user explicitly provides — either picked from their device gallery or taken with the camera at that moment — to use as an avatar or to illustrate an exercise. Gallery and camera access is requested only when the user taps the corresponding action, and the app reads no other image on the device and captures nothing in the background. • Notification identifier: if the user opts in to alerts, the app registers a technical device identifier (notification token) linked to their account, for the sole purpose of sending them notifications about their activity in the service. That identifier is not used for analytics, advertising or tracking, and it is deleted on sign-out or when the app is uninstalled. The app does not collect device location, does not access contacts, calendar or microphone, and includes no analytics, advertising, cross-app tracking or automatic crash reporting tools. Bluetooth permissions are used solely to discover and communicate with MyoQuality sensors; on older Android versions the operating system requires the location permission in order to scan for Bluetooth devices, but the app never obtains or transmits the user’s position.
Health and fitness data are special categories of data under Article 9 GDPR. Processing is based on the explicit consent of the data subject, requested separately inside the app before any such information can be recorded, and withdrawable at any time from the privacy screen in the profile, without affecting the lawfulness of processing carried out beforehand. Where a professional or an organization records data about an athlete, that professional or organization acts as controller for those records and is responsible for obtaining and keeping the legal basis towards the athlete; in that case the CONTROLLER identified above acts as a processor. The app records each athlete’s active consent per organization and keeps an audit log of access to sensitive information. MyoQuality+ is not a medical device, does not provide diagnoses and does not replace the judgement of a healthcare professional.
We do not sell personal data and do not disclose it to third parties for advertising or analytics purposes. To provide the service we rely on the following processors, which handle data solely on our instructions: • Google Ireland Limited / Google LLC (Firebase Authentication, Cloud Firestore, Cloud Storage and Cloud Functions): hosting of accounts and service data. The infrastructure is configured in the European region europe-west2 (London). • Stripe Payments Europe Ltd.: subscription payment processing. Card details are provided directly to Stripe and never pass through our systems. Where a processor involves an international transfer of data, it relies on the Standard Contractual Clauses approved by the European Commission or on a valid adequacy decision. All traffic between the app and our servers is encrypted with TLS, and data is stored encrypted at rest by the hosting provider’s infrastructure.
Data is retained for as long as the account remains active and, afterwards, for the period needed to address any legal liabilities arising from the service. You can delete your account and its associated data at any time from the app itself, under Settings → Delete account. The request opens a grace period during which you can cancel it; once the period ends, deletion runs automatically and is permanent, covering the profile, the training library, reports and stored files. You can also request deletion in writing, without needing the app installed, by following the instructions published at https://plus.myoquality.com/account-deletion or by writing to legal@myoquality.com. If the data you want deleted was recorded by a professional or an organization within their workspace, the request will be directed to that controller, to whom we will forward your petition.
The app is not aimed at children under 14 and they may not register directly. Where a professional handles data about an underage athlete, it is that professional’s responsibility to obtain and keep the consent of those holding parental authority or guardianship, in accordance with Article 7 of Organic Law 3/2018.