Privacy Policy
Version 1.1
Last updated: August 13, 2026
This policy explains what personal information Eskeno collects, why, how we protect it and the rights you have over it. It follows Quebec's Act respecting the protection of personal information in the private sector (Law 25).
Person responsible for your information
The role of person in charge of the protection of personal information is held by Eskeno's founder and director. You can reach that person for any question, request or complaint about your data at privacy@eskeno.com.
Information we collect
We collect account data (email, password, authentication and security data), profile data (first and last name, date of birth, gender, height, photo, biography), the training and health-related data you enter (body measurements, injuries, workouts, sets, perceived effort, goals, personal records), your preferences (units, language, timezone, training settings), and technical data (device and browser characteristics, hashed IP address, approximate country, connection logs). Some of this, in particular your injuries and body measurements, is health-related and treated as sensitive; your workout and performance data is not.
Why we use it
We use your information to create and secure your account, provide the tracking features you request, operate and maintain the service (including backups, migrations and data-integrity fixes), adapt training guidance to your data, keep the service safe against fraud and abuse, send you essential messages (verification, security, service changes), and improve the product in aggregated or de-identified form. We do not sell your personal information.
Legal basis
Depending on the processing, we rely on your consent (in particular for sensitive health-related data), the performance of our contract with you, our legitimate interest (security and product improvement), and our legal obligations. Where we rely on consent, you can withdraw it at any time.
Consent for sensitive data
Your injuries and body measurements can reveal information about your health. We collect and use them only with your explicit consent, given when you enter them. You can withdraw this consent and delete this data at any time from your account.
Sharing with third parties
We do not sell your data and limit sharing to what the service needs: our hosting provider (OVHcloud, in Quebec), a transactional email provider (verification and security emails), an error-monitoring provider (to detect technical failures), the social-login providers you choose to use (Google, Apple), and a password-breach checking service that only ever receives a partial, irreversible fingerprint of your password, never the password itself. If Eskeno is involved in a reorganization, merger or sale, your information may be transferred to the successor, which must continue to protect it under this policy.
Access by our team
Access to your personal information within Eskeno is limited to authorized team members who need it to operate, support, secure or improve the service, and who are bound by confidentiality obligations. We apply a need-to-know principle and keep access logs. When we develop or debug the product, we use de-identified or aggregated data whenever possible; access to information that identifies you is limited to what is necessary and is not used for unrelated purposes.
Visibility and sharing with other users
By default, everything in your account is private and hidden from other users. You choose what to make visible: you can publish content such as exercises, templates and programs, and you can share specific information such as your logs and personal records with other users you select. You control this visibility and can change or revoke it at any time. You are responsible for what you choose to share and should not publish information you want to keep private.
Storage location and transfers outside Quebec
Your core data is hosted in Quebec, Canada (OVHcloud, Beauharnois). Some of the service providers listed above may process limited data outside Quebec. We take reasonable steps to ensure this information receives adequate protection.
Legal requests and authorities
We may disclose your personal information when the law requires it or in response to a valid legal request from a competent authority, such as a warrant, a subpoena or a court order. We review each request, disclose only the information that is strictly necessary, and refuse requests that are invalid or overly broad. We may also disclose information where reasonably necessary to protect the rights, safety or property of our users, the public or Eskeno, or to prevent or investigate fraud, security incidents or illegal activity. Where the law allows, we may notify you of a request concerning you.
How long we keep it
We keep your data while your account is active. Once the purposes for which information was collected are fulfilled, we destroy or anonymize it, subject to any retention period required by law. When you delete your account, it is deactivated for a 30-day grace period during which you can restore it, then permanently purged across our systems. Content you published to the community is anonymized rather than deleted so it keeps working for others. Your consent proof is kept while your account exists and is erased with it on purge; afterwards we keep only a minimal, non-identifying deletion record showing that an account existed and was deleted, for as long as needed to demonstrate our compliance, and invoices for the period required by law.
Your rights
You have the right to access, correct and delete your personal information, to withdraw your consent, to obtain a portable copy of the data you provided, and to request that public information about you stop being disseminated or indexed. To exercise these rights, contact privacy@eskeno.com.
Automated adjustments
Eskeno may automatically adjust your training guidance, for example by reducing volume or suggesting a lighter session, based on the data you record. These adjustments are suggestions and have no legal effect. On request, we will tell you which information was used for the adjustment, along with the reasons, the main factors and the parameters that led to it. You can have the information used corrected, submit your observations, and ask for a human to review the adjustment by contacting us.
Minors
You must be at least 16 years old to create an account. We check your age at registration from the date of birth you provide and rely on its accuracy. We do not knowingly collect personal information from anyone under this age; if we learn that an account was opened by someone under it, we close the account and delete its information. If you believe a minor has provided us with information, contact us.
Security
We protect your data with encryption in transit, hashed passwords, optional two-factor authentication, access controls and activity logging. No system is perfectly secure, but we work to keep your information safe and will notify you and the authorities of any confidentiality incident that presents a risk of serious harm.
Device identification (security)
To protect your account, we use technology that recognizes the device and browser you use (a device identifier derived from its characteristics). We use it for security only: to recognize your devices, alert you to sign-ins from a new device, and detect suspicious or automated access. We do not use it for advertising, tracking or profiling. This recognition is necessary to the security of your account and cannot be turned off. The optional "remember this device" feature, which lets you skip two-factor authentication, is off by default: you turn it on yourself, and you can remove a trusted device at any time.
Cookies
We use cookies and similar technologies that are strictly necessary to operate the site and keep you signed in. We do not use them for advertising.
Changes to this policy
We may update this policy. The current version and its effective date are shown at the top of this page. We will notify you of significant changes before they take effect.
Contact and complaints
For any question or request about your personal information, contact privacy@eskeno.com. You also have the right to file a complaint with the Commission d'accès à l'information du Québec.