Privacy Policy for CardioBoxer

1. Data Controller

The data controller responsible for your personal data is:

2. What Data We Collect

When you use the CardioBoxer app, we may collect and process the following types of data.

Account Data

We may collect:

• username or display name,
• email address,
• password or login authentication data,
• profile photo,
• account settings.

This data is used to create and manage your account, allow you to log in, display your profile, and provide app features.

Workout and Session Data

We may collect:

• workout results,
• training scores,
• session history,
• challenge results,
• leaderboard results,
• training statistics,
• machine connection data.

This data is used to save your workouts, show your progress, display results, and allow you to take part in rankings and challenges.

Social Features Data

If you use social features in the app, we may process:

• comments,
• followers and following lists,
• public profile information,
• interactions with other users,
• selected session information visible to other users.

This data is used to provide social features such as profiles, comments, following users, and viewing activity.

Payment and Subscription Data

CardioBoxer may offer subscription-based features or paid services.

Payments and subscription processing are handled by Stripe, our third-party payment provider. When you make a payment, Stripe may process information required to complete the transaction, such as payment method details, billing information, transaction status, and subscription status.

We do not store full payment card details on our servers.

Your payment data is processed according to Stripe's own terms and privacy policy.

Device and Technical Data

We may collect technical information necessary to operate and secure the app, such as:

• device type,
• operating system,
• app version,
• connection status,
• basic diagnostic information,
• technical logs related to app functionality.

This data is used to maintain app functionality, improve performance, secure the service, and fix technical issues.

3. App Permissions

The CardioBoxer app may request access to certain device features.

Camera

The app may request camera access to scan QR codes displayed on CardioBoxer machines. Camera access is used only for QR code scanning and machine connection.

Bluetooth

The app may request Bluetooth access to connect with compatible CardioBoxer machines. Bluetooth access is used only for machine connection and app functionality.

Location

CardioBoxer does not collect or use your location data.

4. How We Use Your Data

We use your data to:

• create and manage your account,
• allow you to log in to the app,
• connect the app with CardioBoxer machines,
• save workout sessions and results,
• show your session history,
• display leaderboard results,
• provide profile and social features,
• allow comments and user interactions,
• manage followers and following lists,
• provide subscriptions and paid features,
• process payment and subscription status through Stripe,
• provide customer support,
• improve app functionality and security,
• prevent fraud, abuse, cheating, or unauthorized use,
• comply with legal obligations.

5. Legal Basis for Processing

If you are located in the European Economic Area, we process your personal data based on one or more of the following legal grounds:

• Contract performance — to provide the app and its features,
• Consent — for optional permissions or optional features,
• Legitimate interest — to maintain, secure, and improve the app,
• Legal obligation — when we must retain or process certain information for legal, tax, accounting, or compliance reasons.

6. Public Profile, Comments, and Leaderboards

Some information may be visible to other users, depending on app functionality and your activity in the app.

This may include:

• username,
• profile photo,
• workout results,
• leaderboard position,
• comments,
• selected session information.

Please do not post private, sensitive, offensive, unlawful, or misleading information in your profile, comments, or other app areas.

7. Subscriptions and Payments

CardioBoxer may include subscription-based features or paid services.

Payments are processed by Stripe. Stripe may collect and process payment-related data necessary to complete transactions, manage subscriptions, prevent fraud, and comply with legal obligations.

We do not receive or store your full payment card details.

Subscription status may be stored in the app so that we can provide access to paid features.

8. Analytics and Crash Reporting

CardioBoxer does not currently use Firebase, Google Analytics, Crashlytics, or similar third-party analytics or crash reporting tools.

If this changes in the future, this Privacy Policy will be updated.

9. Advertising

CardioBoxer does not use third-party advertising in the app.

We do not use your personal data for advertising purposes and we do not sell your personal data.

10. Sharing Data with Third Parties

We may share data with trusted service providers only when necessary to operate the app and provide our services.

These may include:

• hosting providers,
• database providers,
• payment and subscription providers, including Stripe,
• app store platforms,
• customer support tools,
• legal or compliance authorities when required by law.

We do not sell your personal data.

11. Data Storage and Security

We use reasonable technical and organizational measures to protect your personal data against unauthorized access, loss, misuse, alteration, or disclosure.

However, no internet-based service can be guaranteed to be completely secure.

You are responsible for keeping your login details confidential and for protecting access to your device.

12. Data Retention

We keep your personal data only for as long as necessary to:

• provide the app and its features,
• maintain your account,
• process subscriptions and payments,
• provide customer support,
• comply with legal, tax, accounting, or regulatory obligations,
• resolve disputes,
• prevent fraud or abuse,
• enforce our Terms of Use.

When your data is no longer needed, we delete or anonymize it.

Some information may remain in backups for a limited period before being permanently deleted.

13. Account Deletion

You can delete your account directly in the CardioBoxer app by going to:

Settings → Delete Account

When you delete your account, we will delete or anonymize your personal data unless we are required to retain certain information for legal, security, fraud prevention, accounting, tax, or compliance reasons.

Account deletion may remove:

• your profile,
• your session history,
• workout results,
• comments,
• leaderboard data,
• followers and following lists,
• subscription-related app data.

Some payment records may be retained by Stripe or by us where required for legal, tax, accounting, fraud prevention, or compliance purposes.

You may also contact us regarding account deletion or personal data at: info@cardioboxer.app

14. Your Rights

Depending on your location, you may have the right to:

• access your personal data,
• correct inaccurate personal data,
• request deletion of your personal data,
• restrict processing,
• object to processing,
• request data portability,
• withdraw consent where processing is based on consent,
• lodge a complaint with a data protection authority.

To exercise your rights, contact us at: info@cardioboxer.app

15. Children

CardioBoxer is not primarily intended for children.

Children may use the app or connected CardioBoxer machines only with appropriate supervision from a parent, guardian, or responsible adult.

We do not knowingly collect personal data from children without appropriate consent where such consent is required by law.

If you believe that a child has provided us with personal data without appropriate consent, please contact us at: info@cardioboxer.app

16. Health and Safety Notice

CardioBoxer is an entertainment and fitness-related app. It is not a medical device and does not provide medical advice, medical diagnosis, or professional fitness guidance.

You should use CardioBoxer machines responsibly and stop exercising if you feel pain, dizziness, discomfort, shortness of breath, or any other health-related symptoms.

If you have any health condition or concern, consult a medical professional before using fitness or amusement equipment.

17. International Data Transfers

Depending on the service providers we use, your data may be processed in countries outside your country of residence.

Where required by law, we use appropriate safeguards to protect personal data transferred internationally.

18. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

If we make important changes, we may notify you through the app or by other appropriate means.

The updated version will be posted with a new "Last updated" date.

19. Contact

For questions about this Privacy Policy or your personal data, contact us at: