Last updated: September 2026

1. Who we are

This Privacy Policy applies to the SIMS athlete app (Android application ID: gr.sims.members) and the website at https://sims.gr (together, the "Service"), provided by SIMS (Sports Information Management System), Georgiou Honiati 4, Thessaloniki 54454, Greece ("SIMS", "we", "us").

Your privacy is important to us. This policy explains what information we collect, why we collect it, how we use and protect it, and the rights you have.

2. Data we collect

Depending on how you use the Service, we may collect:

• Identity and contact information: first name, last name, email address, phone number, date of birth, gender, address.
• Membership information: membership type, payment history, subscription details, class/attendance records, gym and team affiliation.
• Health and fitness information: age group, weight, and medical conditions if you provide them voluntarily (for example in your profile).
• Photos: a profile photo you choose to upload using the camera or your device gallery.
• Payment information: processed securely by third-party payment processors. We do not store full credit card details.
• Usage and device data: app usage patterns, device information, IP address, and location data if enabled.

3. Device permissions

The Android app requests the following permissions only when needed for a feature you start:

• Camera: to scan QR codes for gym check-in / attendance and to take a profile photo.
• NFC: to check in at the gym using an NFC tag.

You can refuse or revoke these permissions in your device settings. Without camera or NFC, the related features will not be available. We do not use the camera or NFC in the background.

4. Purpose of processing

We use your data to:

• manage your membership and account,
• process payments and subscriptions,
• provide access to gym facilities and services,
• communicate with you about your membership, classes, and important updates,
• send app-related notifications and reminders,
• improve our services and the App,
• comply with legal obligations.

Legal bases under the GDPR include performance of your membership contract, your consent (where required, for example for certain health data or notifications), legitimate interests in operating and securing the Service, and legal obligation.

5. Third-party services

We may use third-party providers to operate the Service, including:

• payment processors (for example Stripe, Google Pay, Apple Pay),
• cloud hosting and data storage providers,
• analytics and performance monitoring services,
• push notification services (for example OneSignal),
• Google Sign-In if you choose to sign in with Google.

Your data is shared with these providers only as necessary to provide the Service, and they are contractually obligated to protect it.

6. Storage and security

We implement technical and organisational measures to protect your data against unauthorised access, loss, alteration, or misuse, including encryption in transit, secure authentication, limited access on a need-to-know basis, and regular security updates. No method of transmission or electronic storage is 100% secure, and we cannot guarantee absolute security.

7. Your rights (GDPR)

Under applicable data protection law, including the General Data Protection Regulation (GDPR), you have the right to:

• Access a copy of your personal data,
• Rectify inaccurate or incomplete data,
• Erase your personal data (subject to legal obligations),
• Restrict processing,
• Port your data to another provider,
• Object to certain processing,
• Withdraw consent where processing is based on consent.

To exercise these rights, contact us at info@sims.gr or use the account deletion page.

8. Data retention

We retain your personal data for as long as necessary to fulfil the purposes in this policy, unless a longer period is required or permitted by law (for example tax or accounting records). After membership ends, some data may be retained for legal obligations or legitimate business purposes.

9. Account and data deletion

You can request deletion of your account:

• In the app: Profile → Delete account. This permanently deactivates your account and you will no longer be able to sign in.
• On the web: follow the instructions at https://sims.gr/delete-account or email info@sims.gr.

After deactivation, data we are required to keep by law (for example payment history) may be retained for the legally required period. You may request full erasure under GDPR by email.

10. Children and minors

The Service is intended primarily for adults. People aged 14–17 may register only with explicit parental or guardian consent and supervision. We do not knowingly collect data from children under 14. If you believe a child under 14 has provided us with data, contact info@sims.gr so we can delete it.

11. Changes to this policy

We may update this Privacy Policy. The "Last updated" date at the top will change. Significant changes will be communicated in the app, by email (if we have an address), or by posting on this page. Continued use of the Service after changes take effect constitutes acceptance of the updated policy.

12. Contact

If you have questions, requests, or concerns about this policy or your data:

• Email: info@sims.gr
• Phone: +30 697 427 6253
• Address: Georgiou Honiati 4, Thessaloniki 54454, Greece

See also our Terms and Conditions.