Privacy Policy

The controller of personal data processing is:
POK GENIUS SAS
Address: 6 rue d'Armaillé, 75017 Paris
Email: contact@pokgenius.com

We collect the following data:

• Registration data: first name, last name, email address, password (hashed)
• Usage data: training statistics, progress, trainer scores
• Billing and subscription data: subscribed plan, payment and invoice history, customer identifier assigned by our payment provider. Bank card data is collected and processed exclusively by Stripe and never passes through our servers
• Technical data: IP address, country of connection, browser type, pages visited, connection timestamps
• Cookies: authentication and session cookies

Your data is processed to:

• Manage your account and authenticate your access
• Provide the platform's features (ranges, trainer, videos, coaching)
• Process your payments and manage your subscriptions and invoices
• Track your progress and personalize your training experience
• Send you communications relating to the service (notifications, updates)
• Prevent fraud and abusive use (account sharing, automated data extraction)
• Improve the platform and resolve technical issues

The processing of your data is based on:

• Performance of the contract: for the provision of the service and the management of payments (article 6.1.b of the GDPR)
• Legal obligation: for the retention of accounting and billing documents (article 6.1.c of the GDPR)
• Legitimate interest: for the improvement of the platform, security and fraud prevention (article 6.1.f of the GDPR)
• Consent: for optional marketing communications (article 6.1.a of the GDPR)

Your data is processed by the Publisher's authorized teams and by service providers (processors within the meaning of the GDPR) strictly necessary for the operation of the service:

• Stripe (Stripe Payments Europe Ltd, Ireland) — payment processing and billing
• Amazon Web Services (AWS EMEA SARL, Luxembourg) — hosting of the API and database, Paris region (eu-west-3)
• Vercel (Vercel Inc., United States) — website hosting
• Brevo (SAS, France) — sending of transactional emails
• Bunny.net (BunnyWay d.o.o., Slovenia) — hosting and delivery of video content
• Sentry (Functional Software Inc., United States) — technical error tracking

No data is sold or shared with third parties for advertising purposes.

• Account data: retained for the duration of your registration, then deleted within 30 days following the deletion of the account
• Usage data: retained for 3 years from the last activity
• Invoices and accounting documents: retained for 10 years in accordance with legal obligations
• Technical data: retained for 12 months
• Session cookies: duration of the session or 30 days maximum

In accordance with the GDPR, you have the following rights:

• Right of access: obtain confirmation that your data is being processed and obtain a copy of it
• Right to rectification: correct your inaccurate or incomplete data
• Right to erasure: request the deletion of your data
• Right to portability: receive your data in a structured and readable format
• Right to object: object to the processing of your data
• Right to restriction: request the restriction of processing in certain cases

To exercise your rights, contact us at privacy@pokgenius.com. We will respond within 30 days.

You may also lodge a complaint with the CNIL (French Data Protection Authority).

Pok Genius uses only cookies strictly necessary for the operation of the service:

• Authentication cookie (token): allows you to keep your session logged in
• Technical cookies: necessary for the proper functioning of the application

We do not use advertising tracking or third-party analytics cookies.

The database and the API are hosted in the European Union (AWS, Paris region). Some providers (Vercel, Stripe, Sentry, Bunny.net delivery network) may process data outside the European Union. These transfers are governed by appropriate safeguards in accordance with the GDPR: standard contractual clauses of the European Commission and, where applicable, certification under the EU–US Data Privacy Framework.

We implement appropriate technical and organizational measures to protect your data: password encryption, HTTPS connections, strict access control, access monitoring.

We may update this privacy policy at any time. The date of the last modification is indicated at the top of this page. In the event of a substantial change, we will inform you by email or via the platform.

For any questions relating to this policy or the processing of your data:
Email: contact@pokgenius.com
Address: 6 rue d'Armaillé, 75017 Paris