Legal
Privacy policy
Last updated: 21 September 2026
This is a courtesy translation. The French version, politique de confidentialité, is the legally binding one.
Who we are
FramIQ is an iOS bike fitting app published by Gaspard Blanc, osteopath D.O. and bike fitter. It helps you optimise your position on the bike through video analysis, frame comparison and cleat setup.
Data controller: Gaspard Blanc, sole trader, 3C chemin du Néplé, 73420 Viviers-du-Lac, France. SIRET 930 445 325 00028.
For anything concerning your data: contact@gaspardblanc.fr.
There is no data protection officer: the business meets none of the three cases that require one under article 37 of the GDPR.
Data we collect
Only what the application needs to work.
| Data | Purpose | Storage |
|---|---|---|
| Apple ID email address | Account authentication | FramIQ server |
| Full name, optional | Account personalisation | FramIQ server |
| Body measurements | Biomechanical setup calculations | Device and server |
| Health history, optional | Tailoring recommendations | Device only |
| Analysis sessions | History and comparison | Device and iCloud |
| StoreKit transaction identifier | Managing paid access | FramIQ server |
Videos and images: all video analyses and photos are processed entirely on your device. No image and no video is ever sent to our servers or to any third party.
What we do not collect
- GPS location data
- Contacts and address book
- Browsing history
- Financial data: payments are handled exclusively by Apple
- HealthKit health data
- Advertising identifiers: there is no tracker and no advertising SDK in the application
Hosting and transfers
Your account and session data are stored on servers operated by Railway, in its European region, in Amsterdam, the Netherlands. Hosting does not take them outside the European Union. As Railway Corp. is a US company, its support may need to intervene from the United States for maintenance: that case is covered by the European Commission's standard contractual clauses set out in its data processing agreement.
iCloud synchronisation goes through Apple CloudKit, subject to Apple's privacy policy.
The framiq.fr website itself is hosted by Infomaniak Network SA, in Switzerland. Switzerland is covered by a European Commission adequacy decision: no additional safeguard is required for this hosting.
We do not sell, rent or share any personal data with third parties, except where the law requires it.
Crash reports, Firebase Crashlytics
FramIQ uses Firebase Crashlytics, a Google service, to detect and fix crashes. It is the only third-party service built into the app, and it serves technical stability alone: no data is used for advertising or audience measurement.
When the app crashes, Crashlytics sends Google a technical report containing the device model, the iOS version, the app version, the execution trace at the time of the crash and an anonymous installation identifier. That report contains no name, no email address, no body measurements, no health history and no image or video.
Legal basis: legitimate interests, article 6(1)(f) GDPR, namely keeping the application working and secure. Reports are kept for 90 days by Google, then deleted. Google acts as a processor. A transfer outside the European Union is possible, framed by the European Commission's standard contractual clauses. You can object to these reports being sent by writing to contact@gaspardblanc.fr.
Legal bases
- Performance of the contract: data needed for the application to work
- Consent: health history, collected optionally
- Legitimate interests: account security and fraud prevention
Retention periods
- Account data: for as long as the account is active
- Analysis sessions: until manually deleted, or until the account is deleted
- Data held locally on the device: until the app is uninstalled
- After account deletion: permanently erased within 30 days
- Web server logs: 6 months at most
- Crash reports: 90 days
Your rights
- Access: see the data we hold about you
- Rectification: correct inaccurate data
- Erasure: delete your account from the app, under Account then Delete my account
- Portability: obtain your data in a structured format
- Objection: object to certain processing
- Restriction of processing
- Withdraw your consent at any time where consent is the basis, without affecting what was done before
To exercise these rights, write to contact@gaspardblanc.fr. You will get an answer within one month. If it does not satisfy you, you may lodge a complaint with the French data protection authority, the CNIL: 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France. If you live in another EU country, you may also lodge it with your own supervisory authority.
Security
- Sign in with Apple, no password stored
- Authentication tokens kept in the encrypted iOS Keychain
- Communications encrypted over HTTPS/TLS
- Video and photo analysis processed locally on the device
Minors
FramIQ is intended for people aged 16 and over. We do not knowingly collect data about children under 16.
The website: cookies, logs and audience measurement
framiq.fr sets no cookie and uses no tracker: no audience measurement script, no advertising, no social media button. Nothing is written to or read from your device while you browse. That is why no consent banner is shown to you: there is nothing to consent to.
Fonts are served from our own servers, so no request is made to any third-party service while you read these pages. Only the shared report page, at framiq.fr/share/…, queries our own server, in order to display the report your practitioner prepared for you. That link is single-use and expires after 24 hours; the page cannot be indexed by search engines.
Server logs
Like any web server, the one hosting framiq.fr keeps a technical access log: IP address, date and time, page requested, response code, declared browser, referring page. That log is kept by our hosting provider, Infomaniak Network SA, in Switzerland.
- Purpose: keeping the site running and secure, and detecting abuse.
- Legal basis: legitimate interests, article 6(1)(f) GDPR.
- Retention: 6 months at most, then automatic deletion.
- Recipient: the hosting provider, acting as a processor. No third party.
Audience measurement
Site traffic statistics are produced from those server logs alone, by our hosting provider's statistics tool. No cookie is set, no measurement script is loaded in your browser, no data is passed to a third party, and the results only tell us which pages were read and how often. This falls within the exemption from consent that the CNIL provides for strictly necessary audience measurement, which is why you are not asked to choose.
Changes
This policy may change. Where a change is significant, you will be told through the application. The last updated date appears at the top of this page.
Contact
About the service: hello@framiq.fr
About your personal data or to exercise your rights: contact@gaspardblanc.fr