Privacy Policy

Last updated: 30 September 2026

Who we are

Legends is an app for monthly fitness challenges. The app is offered by [bedrijfsnaam], KvK 87557312. We are responsible for what happens to your data. Questions? Email [e-mailadres].

What data we process

  • Your account: first name, email address, password (stored encrypted) and your confirmation that you are 18 or older.
  • Your profile: a profile photo, if you upload one.
  • What you do in the app: your challenge enrollments, your check-ins and points, your posts, photos and the Legend! reactions you give and receive.
  • Payments: for a paid challenge, the amount, date and your email address. Your bank or card details go directly to the payment provider. We do not see them.
  • Your interests: the sports and topics you pick when you start, and whether you consent to us using them for suggestions.

What we use them for

To make your account work, enroll you in a challenge, show the feed, determine the winner of a challenge, process payments and email you about challenges you've joined. We also use your data to see how the app is used so we can improve it.

We do this because it is necessary for the service you get from us. You post photos yourself and always voluntarily.

When you start, we use your interests to suggest matching communities. If you also give consent, we use them later to suggest communities and content as well. That consent is voluntary and you can withdraw it at any time by emailing [e-mailadres].

Who can see what

Your first name and profile photo are visible to all logged-in Legends users. For each post you choose who sees it: everyone, only your followers, or the members of a community. Anyone who wants to follow you sends a request that you accept. Your email address is only visible to administrators.

Who we share data with

Only with parties we need to run the app: Base44, which hosts the app and your data, and the payment provider Base44 uses for payments. If either processes data outside the European Union, it does so only with the safeguards the GDPR requires. We do not sell your data and do not show ads.

How long we keep it

As long as your account exists. If you delete your account, we erase your data within 30 days. We keep payment data for seven years, as the law requires for accounting.

Your rights

You may view, have corrected or deleted your data, and object to its use. You can also request a copy of your data. Email [e-mailadres] for this. You can also delete your account yourself in Settings. We respond within a month.

If you are not satisfied with how we handle your data, you can file a complaint with the Dutch Data Protection Authority.

Changes

If we later add an intake with questions about your health or training, we will update this policy and ask for separate consent.