REHAGYM APP TERMS OF USE

1. Introductory provisions

These terms of use (hereinafter the "Terms") set out the rules for using the RehaGym mobile and web application (hereinafter the "Application"), operated by RehaGym, s.r.o., registered office V jehličí 2121/8, Prague 4 – Krč, Company ID (IČO): 17248434, registered in the Commercial Register kept by the Municipal Court in Prague, Section C, File 368859 (hereinafter the "Operator").

Contact details of the Operator:

address: V jehličí 2121/8, Prague 4 – Krč, 142 00

e-mail: info@rehagym.cz

tel.: +420 790 421 111

The Application is intended for clients of the RehaGym centre and their personal trainers (hereinafter together also the "users"). By using the Application, the user confirms that they have read and agree to these Terms.

2. Who may use the Application

• Client: a person using the services of the RehaGym centre (a sports and rehabilitation centre at V jehličí 2121/8, Prague 4 – Krč) (hereinafter also the "client")
• Trainer: a person who trains clients at the RehaGym centre (hereinafter also the "trainer").
• Administrator: a person designated by the Operator with elevated access rights who manages the operation of the Application (hereinafter also the "administrator").

The Application is intended for persons aged 16 and over. Younger users may use it only with the consent of a legal guardian and under the supervision of a trainer.

3. Features of the Application

The Application offers in particular the following features:

• Display of personalised exercise plans and exercises for clients.
• Video lessons for clients (tutorials, exercise demonstrations, individual videos), including the option of streaming to a TV (Chromecast, AirPlay).
• Exercise calendar and push notifications.
• Statistics and motivation (overview of the user's activities, progress, results).
• Uploading and sharing of body measurements, body composition analyses and other documents.
• Administration for trainers (client management, uploading videos for clients, creating exercise plans and special exercises for clients).

In the future, the Operator may extend the features of the Application, for example with wearables integration (Apple Watch, Garmin, Fitbit), chat or an AI assistant, a payment module, community features (a client discussion forum, sharing of training achievements between clients, etc.), telemedicine or export of data to PDF. Users will be informed of material changes in advance directly by means of a notification within the Application.

The Application is available as a mobile app for iOS or Android, or as a web application at the web interface www.rehagym.cz.

4. Registration and access to the Application

Clients are registered exclusively through trainers, who create a client profile in the Application at the client's request by entering the client's first name, surname, e-mail address and telephone number.

After the client profile has been created, the client receives an activation e-mail or SMS at the contact details provided and completes registration by creating a password and agreeing to these Terms.

A client who has a client profile in the Application subsequently logs in using a login and password. In the future the Application may also support biometrics (Face ID, Touch ID).

Trainers are registered exclusively through the administrator, who creates the trainer's profile by entering the trainer's first name, surname and e-mail address and who at the same time assigns the trainer access rights to the individual parts of the Application so that each trainer can manage through the Application only the agenda of the clients they train. The trainer will be informed of the creation of the trainer profile by an activation e-mail and completes registration by creating a password and agreeing to these Terms.

Every user is obliged to protect their login details for the Application against misuse. The Operator is not liable for any misuse of the user's login details by a third party unless the Operator itself caused such misuse.

The Operator is entitled to block or cancel a client or trainer profile in the Application in the following cases:

• in the event of a serious breach of these Terms,
• in the event of a security incident (e.g. a threatened data leak from the Application as a result of a cyber attack, etc.),
• in the event of user inactivity (no login to the Application) for a period longer than 24 months,
• or at the user's request addressed to the Operator.

5. Rights and obligations of users

• The client has the right of access to their data stored in the Application and to all content uploaded to the Application by their trainer.
• The trainer uses the Application to manage their clients, upload content and create exercise plans for their clients in accordance with these Terms and the law. The trainer is responsible for the professional accuracy and lawfulness of all content they upload to the Application.
• All users of the Application are strictly prohibited from infringing the intellectual property rights to the Application (in particular from interfering in any way with the software infrastructure of the Application, including the source code, or from reverse engineering the application software), from uploading any offensive, harmful or unlawful content, from attempting to circumvent the security features of the Application, from misusing the Application for advertising or spam, or from sharing the content of the Application with third parties without the Operator's specific authorisation.

6. Data access and security

• The client has access to all of their own data.
• The trainer has access only to the data of their own clients, i.e. the clients they train, to the extent necessary for conducting training sessions, creating exercise plans and using the other services of the Application within the relevant trainer profile.
• The Operator's administrator has access to data in the Application to the extent necessary for the operation and support of the Application, incident resolution and fulfilment of the Operator's legal obligations.
• All data transfer between the user and the Application is encrypted (TLS).
• Data are stored in a secure database with role-based access restrictions (client, trainer, administrator).
• Access rights are set according to the principle of least privilege.
• All access and changes are logged for incident detection.
• Data are backed up regularly and a disaster recovery procedure is in place.
• Data may be shared only with the express consent and authorisation of the user to whom the data relate; data exports are secured.
• Users are obliged to report any suspected misuse of their user profile to the Operator of the Application without delay.

7. Intellectual property

The Application, its software, graphics, databases, texts and the Operator's videos are protected by intellectual property law. The user obtains only a non-exclusive, non-transferable and revocable licence to use the Application for personal (client) or professional (trainer) purposes.

By uploading content (e.g. videos, plans), the trainer grants the Operator a free-of-charge exclusive licence to use this content in the Application for the purpose of providing services to clients and for the internal development and testing of the Application, without any time, quantity, territorial or other limitation.

Without the Operator's prior written consent, the Application and its content may not be copied, distributed, rented, modified, made publicly available or otherwise commercially exploited beyond the scope of the licence.

8. Payments

Use of the Application is free of charge.

9. Liability and warranties

The Application is provided "as is". The Operator does not guarantee the uninterrupted availability or error-free operation of the Application and advises users that planned and unplanned outages of the Application or of its individual features may occur.

The Operator is not liable for any harm caused by outages, faults or non-functioning of the Application. Nor is the Operator liable for third-party services (e.g. internet connection, wearables, streaming devices, payment gateways, etc.).

10. Personal data protection

The controller of the personal data processed within the Application is the Operator. The Operator's contact details are provided directly in the Application.

The following personal data are processed through the Application:

• Identification and contact details of users (first name, surname, e-mail, telephone)
• Authentication data (login/password, or biometrics – biometric templates are not stored in the Application)
• Data on state of health and body parameters (sensitive data)
• Activity data (training sessions, progress, statistics)
• Technical and operational data (IP address, logs, device ID, notification settings)
  
  

Purposes and legal bases of processing:

• Provision and operation of the Application, including the use of its features by users, and user support (performance of a contract)
• Security and improvement of the Application, prevention of misuse (legitimate interest)
• Fulfilment of legal obligations (accounting, tax obligations)
• Health and body data, wearables integration, telemedicine, health-related notifications (explicit consent of the user)
• Marketing communications (consent or legitimate interest, depending on the nature of the communication)
  
  

Recipients and processors:

• IT service providers (hosting, storage, analytics, sending of notifications), payment gateways, streaming service providers, wearables integrations.

No user data will be transferred to any third country or to any international organisation.

Retention period: Ordinary user data are retained for the duration of the relevant user profile and for a further 24 months after its cancellation, unless the law requires a longer period. Logs and technical data usually for 12–24 months. Accounting and tax documents for the statutory periods.

Rights of data subjects: Every user has the right of access, rectification, erasure, restriction, portability, objection, withdrawal of consent (where consent is the legal basis for processing), and the right to lodge a complaint with the Office for Personal Data Protection (ÚOOÚ, www.uoou.cz).

Security: Data transfer is encrypted, access is role-based, all access and changes are logged, and data are backed up regularly. The user is obliged to protect their device and login details.

Detailed information can be found in the Personal Data Processing Policy available in the Application and on the website.

11. Final provisions

Push notifications are optional and can be adjusted in the Application settings. Some operational notifications may be necessary. The web application may use cookies and similar technologies – details are set out in the Cookie Policy available on the web interface.
The Operator is entitled to amend or supplement these Terms (e.g. when adding new features to the Application). Users will be informed of material changes directly by means of a notification in the Application at least 15 days before they take effect (except for changes required by law or for security reasons). If the user does not agree with the changes, they may stop using the Application at any time and request the cancellation of their user profile.

The user may request the cancellation of their user profile at any time through the Application. The Operator may terminate or restrict the user's access to the Application if the user breaches these Terms or for security reasons.

Technical problems and suggestions can be reported to the Operator through the support function in the Application or via the contact details provided on the Operator's website. If the client is a consumer, they have the right to out-of-court settlement of consumer disputes through the Czech Trade Inspection Authority (www.coi.cz).

These Terms are governed by the laws of the Czech Republic. Any disputes will be resolved by the competent courts of the Czech Republic; this is without prejudice to the mandatory rights of consumers.
The invalidity or ineffectiveness of any individual provision of these Terms does not affect the validity of the remaining provisions. The current wording of the Terms is always available in the Application and on the Operator's website.

Prague, 15 December 2025