Privacy Policy — Sportpilot mobile app

1. General information

The controller of personal data of Sportpilot mobile app users is SK SOFTWARE Sp. z o.o. with its registered office in Wrocław, ul. Niemczańska 33/6, 50-561 Wrocław, KRS: 0000562470, NIP: 9121876931, REGON: 361772763 (“SK SOFTWARE”).

We process data in accordance with Regulation (EU) 2016/679 (GDPR) and other applicable laws.

2. How do we obtain personal data?

• registration and logging into the app (trainee account),
• data entered while using app features (schedule, workout execution, notes),
• automatically from the device and the app (app/device identifier, OS version, error logs, events; optionally the advertising ID — if used),
• your consents and preferences (e.g., push notifications, marketing — if given).

3. How do we protect personal data?

We implement technical and organizational measures, including encrypted transmission (HTTPS/TLS), access control, password hashing, backups and security testing. Our collaborators are bound by confidentiality obligations.

4. Are data transferred outside the European Economic Area (EEA)?

As a rule, we do not transfer data outside the EEA. If it is necessary (e.g., use of Apple/Google/Firebase services), the transfer is carried out in accordance with the law and with appropriate safeguards (e.g., standard contractual clauses).

5. Use of data

We process users’ data for the following purposes:

• provision of app services: viewing appointments and workouts, self-guided execution of workouts according to instructions, synchronization and notifications,
• account service, authentication, technical support,
• security (fraud prevention, audit logs),
• statistical analyses and development of app features,
• operational contact with the user (e.g., schedule changes),
• — upon consent — marketing communications or newsletter.

Legal bases: Art. 6(1)(b) GDPR (necessity to provide services), Art. 6(1)(f) GDPR (legitimate interest — security, statistics, improvement), Art. 6(1)(a) GDPR (consent — e.g., marketing, notifications, extended analytics).

6. How long do we store personal data?

• for as long as you use the app and hold an account,
• until consent is withdrawn — for processing based on consent,
• for the period required by law (e.g., accounting) and necessary to establish or defend claims,
• for the time necessary to pursue the Controller’s legitimate interests, unless the user effectively objects.

7. Principles we follow

• lawfulness, fairness and transparency,
• purpose limitation and data minimization,
• accuracy and up-to-dateness,
• storage limitation,
• integrity and confidentiality of data.

8. When do we share personal data with other entities?

We do not sell users’ data. We may disclose data to:

• processors acting on our behalf (hosting/cloud, analytics, push notifications, server operations),
• Apple/Google providers to the extent necessary for app store and system services to operate,
• public authorities — only where required by law,
• in exceptional cases our client-partners (e.g., coaches/organizations), if it is functionally necessary to provide the service to the user.

In all cases the scope of data is limited to the minimum required, and processing is based on data processing agreements with appropriate security measures.

9. What rights does the user have?

The user has the right to:

• access their data and obtain a copy,
• rectification (update) of data,
• erasure (“right to be forgotten”),
• restriction of processing,
• data portability,
• object to processing (where the legal basis is legitimate interests),
• withdraw consent at any time (without affecting the lawfulness of processing prior to withdrawal),
• lodge a complaint with the President of the Polish Data Protection Authority (UODO).

10. Identifiers, analytics and app permissions

The app may use:

• device/app identifiers to maintain sessions and for diagnostics,
• mobile app analytics tools (e.g., Firebase Analytics/Crashlytics) — to the extent necessary for statistics and stability,
• push notifications (subject to your consent),
• other system permissions required by app features (e.g., internet access, notifications). Permissions can be changed in system settings.

The mobile app does not use browser cookies; local device storage necessary for the app to operate may be used.

11. How to contact SK SOFTWARE?

• by post: SK SOFTWARE Sp. z o.o., ul. Niemczańska 33/6, 50-561 Wrocław, Poland
• e-mail: kontakt@sportpilot.pl

12. Information on data processing for employees/contractors of our business partners (“contact persons”)

The data controller is SK SOFTWARE. We process your data because you are a contact person of a contractor or potential contractor. We process it to maintain ongoing contact, present offers, respond to inquiries, and invite you to events. The legal basis is our legitimate interest (Art. 6(1)(f) GDPR). Data are stored for as long as necessary to achieve these purposes or until you object and processing is stopped, unless another legal basis applies.