Security and privacy

To fetch your classes you log in with the same email and password as in the gym’s app. The login goes straight from your browser to the gym’s server (nordicwellness.brpsystems.com). Your password never reaches Svettkollen’s server and isn’t stored anywhere.

Svettkollen only fetches attended and missed classes, bookings, queue spots and your membership. Nothing is booked, cancelled or changed at the gym.

A button like “Sign in with Google” has to be offered by the gym itself, and none of the gyms do today. As soon as one does, Svettkollen will switch to that login.

If you tick “Remember me”, a login key from the gym is kept in your browser, never your password. The key is only used to fetch new classes, e.g. for automatic updates. Remove it with “Disconnect” under Import or with “Delete all data”.

The gym’s profile holds your personal ID number, address, phone number and email. Svettkollen only reads your first name, when you joined and your home club. The rest is never stored, shown or exported.

Without an account, everything stays in your browser.

With an account, a copy of your classes, membership and settings is kept, so you can reach them from all your devices. Your gym password and login key are never sent to the account, and neither is the first name from the gym.

Friends you approve only see what you choose to share. If you create a training feed, anyone with the link can read it until you turn it off.

A Health Connect export is read in your browser, and the file itself is never uploaded. GPS tracks are never read, and data from Google Fit is skipped.

Health data needs an account and is saved only there, as summaries: workouts with times, heart rate, calories and distance, daily steps, sleep and VO₂max. Heart rate is saved per minute, never second by second, and is only used to link the watch’s workouts to your classes.

Friends never see your health data. The training feed includes it only if you turn on “Include health data” under Settings.

“Delete health data” under Manage data removes your health data and keeps your classes from the gym.

Svettkollen anonymously counts which pages and features are used, and how many requests a fetch makes to the gym. None of it is linked to your account, and the IP address is shortened.

1. Open Import, then the Network tab in your browser’s developer tools (F12).
2. Log in and fetch your classes.
3. Your password is only in the auth/login request to nordicwellness.brpsystems.com, never in any request to Svettkollen.

“Delete all data” under Manage data removes everything in this browser and, when you’re signed in, the copy in your account too. “Delete account” under Settings removes the account itself.