Last updated: October 6, 2026
This policy explains how Bemelio processes your personal data when you use the Bemelio mobile app and the bemelio.com website, in accordance with the General Data Protection Regulation (GDPR, EU Regulation 2016/679) and the French Data Protection Act.
Bemelio, a French SAS (single-shareholder simplified joint-stock company) with a share capital of €1,000, registered office at 321 Rue Odilon Lafage, 69490 Vindry-sur-Turdine, France, registered with the Villefranche-Tarare Trade and Companies Register under number 105 084 537, represented by its President, Esteban Remilleux.
Contact: contact@bemelio.com
What you create and share: goals, updates, posts, comments, polls, private messages, photos and videos.
Device type, operating system, app version, push notification token (with your consent) and internal usage statistics (features used), to run and improve the app.
Only if you use the run tracker (Run Tracker): Bemelio collects your precise GPS location, including in the background (screen locked or app not in the foreground), and only during a run you started yourself. This data is used solely to draw your route and compute distance, pace and splits. Collection stops as soon as you stop the run. You can revoke this access at any time in your device settings. Bemelio never sells or shares your location data.
Only if you choose to connect a sports service such as Garmin Connect. The service then sends us summaries of your completed activities: type, date, duration, distance, elevation, pace and, depending on the activity, its route. We use them only to suggest updates to you: nothing is published without your action, and you choose whether the route appears. We do not keep health measurements such as heart rate or calories, even when the service sends them. We never sell this data and never use it to train artificial intelligence models. You can disconnect the service at any time in the app: we then stop receiving data and delete the activity data we hold within 30 days. Updates you have published remain your content until you delete them. Your use of the connected service itself remains governed by its own privacy policy.
When you contact an expert from the app (visiting their website, calling, sending a contact request), we record the request and share with the expert the information needed to reply to you, including through Bemelio messaging.
For experts, merchants and advertisers: professional information (name, business, contact details, website) and data related to commissions and invoicing. Payments are processed by Stripe: we never see or store your card numbers.
We may contact professionals (coaches, shops, associations, app publishers) using their public business contact details to introduce Bemelio. They can object at any time by writing to us.
We don't collect your phone contacts or biometric data, and we never sell your personal data.
| Purpose | Legal basis (GDPR) |
|---|---|
| Creating and managing your account, social features, messaging, run tracking | Performance of a contract (Art. 6.1.b) |
| Connecting you with experts, payments and commissions | Performance of a contract (Art. 6.1.b) |
| Push notifications | Consent (Art. 6.1.a) |
| Importing your activities from a connected sports service (for example Garmin Connect) | Consent (Art. 6.1.a) |
| Newsletter | Consent (Art. 6.1.a) |
| Ad measurement with the Meta pixel | Consent (Art. 6.1.a) |
| Anonymous audience measurement, security, abuse prevention, service improvement | Legitimate interest (Art. 6.1.f) |
| Answering information requests, business outreach | Legitimate interest (Art. 6.1.f) |
| Content moderation, accounting obligations and legal requests | Legal obligation (Art. 6.1.c) |
Your data is only accessible to Bemelio and, for their part, to:
Some of these providers may process data in the United States. These transfers are covered by the EU-U.S. Data Privacy Framework or by the European Commission's standard contractual clauses.
_fbp cookie (90 days) and sends Meta the address of the page visited and technical information about your browser. It is never loaded on private pages (password reset, admin spaces, dashboards). Meta Platforms Ireland Limited is a joint controller for this collection; what it does with the data afterwards is governed by its own policy._fbp cookie: 90 days; your cookie choice: 6 months.You have the rights of access, rectification, erasure, portability, restriction and objection (including to business outreach), the right to withdraw your consent at any time and the right to set instructions for your data after your death. To exercise them, or to unsubscribe from the newsletter, write to contact@bemelio.com. We reply within 30 days at most. If you disagree, you can lodge a complaint with the CNIL, the French data protection authority (www.cnil.fr), or with the authority of your country.
Encrypted passwords (bcrypt), encrypted connections (HTTPS/TLS), secure storage of authentication tokens, rate limiting, regular backups, protection against injection and XSS attacks.
Bemelio is intended for people aged 13 and over. Bemelio has a zero-tolerance policy towards child sexual abuse and exploitation content and behavior. Our standards and how to report content are published on the Child safety page. If you believe a child under 13 is using Bemelio, write to us so we can delete their account.
This policy may change. Any significant change will be announced in the app. The date at the top of this page prevails.
Bemelio SAS, 321 Rue Odilon Lafage, 69490 Vindry-sur-Turdine, France · contact@bemelio.com