BigXTrain · Certify · Place

Privacy

BigX operates in Quebec and is subject to Law 25. This page names who is responsible, what is collected, and how to get it or delete it.

Person responsible for the protection of personal information

Required to be named and published under Law 25

[Name], [Title]
[privacy@bigx.com]
Montreal, Quebec

If nobody is designated, the law assigns this role to the person with the highest authority in the enterprise. Naming somebody is not a formality, it decides who receives a complaint and who answers to the Commission d’accès à l’information.

What is collected, and why

CategorySensitivePurpose
Name, email, phoneNoYour account and how we contact you
Training sessions and workoutsNoYour own history, and your trainer's coaching
Body weight and measurementsYesCalculating your energy expenditure and targets
Injuries and health notesYesSo a trainer does not program around an injury they do not know about
Food you log, including photosYesYour diary, and your trainer's review if you have allowed it
PaymentsNoProcessed by Stripe. BigX does not store card numbers
Sensitive information is consented to separately. Health data cannot ride along on a general terms checkbox. The nutrition tracker asks for its own explicit consent, and sharing your record with your trainer is a second, separately revocable consent, because those are two different things.

Your rights

Get your data. A copy of everything BigX holds about you, in a structured, commonly used format. Download it now.

Correct it, or withdraw consent. Withdrawing consent for health data stops the tracking and removes the record; it does not delete your training history or your certification.

Complain. To the person named above first, and to the Commission d’accès à l’information du Québec if that does not resolve it.

Where the data lives

The database is hosted in Montreal. That was a deliberate choice: Law 25 requires a privacy impact assessment before personal information is communicated outside Quebec, and keeping the record here makes that a much shorter document.

Still to complete before launch: a privacy impact assessment covering the two things that do leave Quebec, which are the application servers and, if it is switched on, the photo recognition service. Both are listed in the go-live brief and neither is optional.