Privacy Policy

    Last updated: 1 July 2026

    1. Data Controller

    The data controller is Jean-Baptiste Fouroux, operating the EYEGOFAST platform (www.eyegofast.com), a sole proprietorship registered with the Montauban Trade and Companies Register under number 534 481 155.

    Contact: Contact form

    2. Nature of Data, Disclaimer

    EYEGOFAST is a visual-cognitive training application designed for athletic performance. The data collected consists of training performance data and does not constitute medical or health data within the meaning of the GDPR. No medical data is collected.

    3. Data Collected

    The following data may be collected when using the Platform:

    Identification data

    • Email address
    • Display name (nickname)
    • Password (encrypted)

    Profile data

    • Sport practiced
    • Level
    • Training goal
    • Country

    Performance data

    • Exercise results (reaction time, accuracy, scores)
    • Training history
    • Progress statistics
    • Session data (duration, frequency)
    • Training streaks

    Technical data

    • IP address
    • Browser type and operating system
    • Connection data (timestamps)
    • Usage and navigation data
    • Device type (computer, tablet, smartphone)

    Billing data

    • Subscription type
    • Billing history (managed by Stripe)
    • Promo code used, if applicable

    Note: Banking data (card numbers, etc.) is never stored by EYEGOFAST. It is processed exclusively by Stripe, a PCI DSS certified provider.

    Waitlist sign-up

    When signing up to the waitlist, EYEGOFAST collects, in addition to the email address, technical metadata: approximate country (derived transiently from the connection; the IP address is never stored), referring site or page, landing page, UTM parameters (source, medium, campaign), device type and browser. This information is processed on the basis of legitimate interest (Article 6.1.f GDPR) to prevent fraudulent sign-ups and support marketing attribution. No IP address is retained.

    4. Purposes of Processing

    Personal data is processed for the following purposes:

    • User account creation and management
    • Provision and personalisation of the training service
    • Progress tracking and statistics generation
    • Automated recommendations (AI Coach) for training purposes only
    • Subscription and billing management
    • Communication with users (support, notifications)
    • Continuous service improvement, including training artificial intelligence models on strictly anonymised data
    • Fraud detection and Platform security
    • Compliance with legal obligations

    5. Legal Basis for Processing

    Personal data processing is based on:

    • Contract performance: processing necessary for the provision of the service (Article 6.1.b GDPR)
    • Legitimate interest: service improvement, security, fraud detection and AI model training on anonymised data (Article 6.1.f GDPR)
    • Legal obligation: compliance with tax and accounting obligations (Article 6.1.c GDPR)
    • Consent: for analytics cookies and optional marketing communications (Article 6.1.a GDPR)

    6. Data Recipients

    Personal data may be shared with the following recipients:

    • Stripe: payment processing (PCI DSS certified)
    • Cloud hosting provider: secure data storage
    • Club manager: under a club licence, the coach may access performance data of organisation members
    • Analytics tools: Google Analytics 4 and Microsoft Clarity, only after explicit user consent, for anonymised audience measurement
    • Artificial intelligence: certain usage data may be used in a strictly anonymised manner to improve platform features, including through AI models. These processes are carried out without direct user identification

    EYEGOFAST never sells, rents, or transfers personal data to third parties for commercial or advertising purposes.

    7. AI Coach and Automated Processing

    The Platform includes an automated recommendation system (AI Coach) that analyses user performance data to generate personalised training advice.

    • These recommendations are provided for informational and training purposes only
    • They do not constitute medical, paramedical, or professional sports advice
    • No automated decision producing legal effects or significantly affecting the user is made within the meaning of Article 22 GDPR
    • Users are entirely free to follow or disregard the proposed recommendations

    8. Data Transfers Outside the EU

    Some data may be transferred to countries outside the European Union through technical subcontractors (cloud hosting, payment processing, analytics tools). These transfers are governed by appropriate safeguards in accordance with the GDPR, including the European Commission's standard contractual clauses or adequacy decisions.

    9. Data Retention

    • Account data: retained for the duration of the subscription and 3 years after last activity, then deleted
    • Performance data: retained for the duration of the active account
    • Billing data: retained for 10 years in accordance with French tax and accounting obligations
    • Technical data (logs): retained for a maximum of 12 months
    • Anonymised data: irreversibly anonymised data is no longer considered personal data and may be retained indefinitely
    • Data after account deletion: deleted within 30 days, except for data whose retention is required by law

    10. User Rights (GDPR)

    Under the GDPR, you have the following rights:

    • Right of access: obtain a copy of your personal data
    • Right to rectification: correct inaccurate or incomplete data
    • Right to erasure: request deletion of your data ("right to be forgotten")
    • Right to restriction: restrict the processing of your data
    • Right to data portability: receive your data in a structured, machine-readable format
    • Right to object: object to data processing, including use for AI improvement
    • Right to withdraw consent: at any time for consent-based processing

    To exercise these rights, contact us via our Contact form.

    We commit to responding to any request within a maximum of 30 days.

    11. Intellectual Property and Data

    Aggregated, anonymised data and statistical results generated through Platform use are the exclusive property of EYEGOFAST.

    Users retain their rights over personal data in accordance with the GDPR. However, irreversibly anonymised data is no longer considered personal data and may be freely used by EYEGOFAST for service improvement.

    12. Data Security

    EYEGOFAST implements appropriate technical and organisational measures to protect personal data against unauthorised access, loss, destruction, or alteration, including:

    • Data encryption in transit (HTTPS/TLS)
    • Password encryption (hashing)
    • Strict database access control (Row-Level Security)
    • Secure hosting on certified cloud infrastructure
    • Payments processed by Stripe (PCI DSS certified)
    • Continuous monitoring and intrusion detection

    Despite these measures, no system can guarantee absolute security. In the event of a data breach, EYEGOFAST commits to notifying the competent authorities and affected users in accordance with Articles 33 and 34 of the GDPR.

    13. Minors

    Use of the Platform by a minor is subject to the agreement and responsibility of their legal representative. For minors under 16, consent to data processing must be given by the legal representative in accordance with Article 8 of the GDPR.

    14. Cookies

    Strictly necessary cookies

    The Platform uses essential technical cookies required for service operation (authentication, user session, security and abuse prevention). These cookies do not require prior consent in accordance with CNIL recommendations.

    Analytics cookies

    Subject to your explicit consent, the Platform uses the following analytics tools:

    • Google Analytics 4 (Google LLC), anonymised audience measurement (page views, session duration, source). Google Privacy Policy
    • Microsoft Clarity (Microsoft Corporation), anonymised behavioural analysis (heatmaps, session recordings). Microsoft Privacy Policy

    These scripts are only loaded after your acceptance via the consent banner. If refused, no analytics cookies are set and no tracking scripts are executed. No advertising cookies are used.

    Managing your preferences

    You can change your choice at any time by clicking the "Manage cookies" link in the footer. Your preference is saved and can be reset at any time.

    15. Complaint to the CNIL

    If you believe that your data processing does not comply with applicable regulations, you may file a complaint with the French Data Protection Authority (CNIL):

    • Website : www.cnil.fr
    • Address: CNIL, 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07

    16. Policy Changes

    EYEGOFAST reserves the right to modify this privacy policy at any time. Users will be informed of any substantial changes via Platform notification or email. The date of the last update is shown at the top of this page. Continued use of the service after modification constitutes acceptance of the updated policy.

    17. Contact

    For any questions regarding the protection of your personal data: Contact form

    In case of discrepancy between the French version and any translation, the French version prevails.