Privacy Policy

1. Introduction

BiathlonHub ("we", "us", "our") is committed to protecting your privacy. This policy explains how we collect, use, and safeguard your personal data when you use our biathlon training application.

We comply with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

2. Data Controller

3. Data We Collect

3.1 Account Information

• Name and email address
• Date of birth (for age verification)
• Language preference
• Billing information (processed by Stripe; we do not store credit card details)

3.2 Athlete Data

• Athlete profiles (name, birth date, physical measurements)
• Shooting session records and statistics
• Training diary entries and activities
• Equipment information
• Event and competition data

3.3 Health Data (with consent)

• Sleep duration and quality (from Apple Health / Health Connect)
• Heart rate variability (HRV) and resting heart rate
• Workout activities and heart rate data
• Weight and VO2max estimates

3.4 Menstrual Cycle Data (with consent, female athletes only)

• Period start and end dates
• Basal body temperature readings
• Cycle phase calculations

Note: Cycle data is treated as sensitive health data with additional encryption. It is never shared with coaches or third parties without explicit, separate consent.

3.5 Technical Data

• Device type and operating system
• App version and crash reports
• Usage analytics (anonymized)

4. How We Use Your Data

We use your data to:

• Provide and improve the BiathlonHub service
• Sync your data across devices
• Process payments and manage subscriptions
• Send service-related communications
• Analyze usage patterns to improve the app (anonymized data only)
• Comply with legal obligations

5. Legal Basis for Processing

We process your data based on:

• Contract: To provide the service you signed up for
• Consent: For health data, cycle data, and marketing communications
• Legitimate Interest: For security, fraud prevention, and service improvement
• Legal Obligation: For tax records and regulatory compliance

6. Data Storage and Security

Your data is protected by:

• Storage on EU-based servers with encryption at rest and in transit
• Local device storage with device security features (passcode, biometrics)
• Secure API communication using HTTPS/TLS
• Regular security audits and updates

Data is stored locally on your device for offline access and synced to our servers when connected.

7. Data Sharing

We do not sell your personal data.

We may share data with:

• Coaches/Athletes: Only data you explicitly choose to share
• Stripe: For payment processing
• Legal authorities: When required by law

8. Data Retention

• Active accounts: Data retained while your account is active
• Deleted accounts: Personal data purged within 30 days
• Billing records: Retained for 7 years (legal requirement)
• Anonymized analytics: May be retained indefinitely

9. Your Rights (GDPR)

Under GDPR, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate data
• Erasure: Request deletion of your data ("right to be forgotten")
• Portability: Export your data in a machine-readable format
• Restriction: Limit how we process your data
• Objection: Object to certain processing activities
• Withdraw Consent: Withdraw consent at any time (without affecting prior processing)

To exercise these rights, go to Settings > Privacy & Data, or email privacy@biathlonhub.com.

10. Children's Privacy

BiathlonHub does not knowingly collect data directly from children under 16 without parental consent.

Coaches may create athlete profiles for minors, but are responsible for obtaining appropriate parental consent.

Users under 16 must have parental consent to register, provided during the registration process.

11. International Transfers

Your data is primarily stored within the European Economic Area (EEA). If transferred outside the EEA, we ensure appropriate safeguards (Standard Contractual Clauses or adequacy decisions).

12. Changes to This Policy

We may update this policy periodically. Material changes will be communicated via in-app notification or email. Continued use constitutes acceptance.

13. Contact Us

For privacy-related inquiries:

You also have the right to lodge a complaint with a supervisory authority in your country of residence.