Privacy Policy
We respect your privacy. This policy explains, in plain language, what data we process, why, where we store it, and what rights you have. Klaimed is a sports game; it uses your data only to make the app work, and never sells it.
Contents
1. Data controller
The Klaimed team (“Klaimed”, “we”) is responsible for processing personal data in connection with this app. For any question, request or data access/deletion enquiry: privacy@klaimed.app.
2. Data we collect
We collect only what the service needs to work:
| Category | Examples | Why |
|---|---|---|
| Account | Email, username, profile image | To create your account and sign you in |
| Activity & location | GPS route of a completed workout, distance, duration, pace, sport type | To turn your route into a territory (polygon) — the core function of the app |
| Health & fitness | Workout data imported from Apple Health or Strava | To bring your activity into Klaimed (only with your permission) |
| Social | Club membership, follows, feed interactions, shares | Community and club features |
| Device & usage | In-app interactions, device/OS info, crash logs, push token | To improve the product, fix bugs, send notifications |
| Purchase | Subscription status (verified via Apple/Google) | To unlock Pro features |
3. Purposes and legal bases
We process your personal data on these bases (GDPR Art. 6):
- Performance of a contract: your account, territory calculation, clubs, subscription.
- Consent: importing health/location data, notification permissions. You may withdraw consent at any time.
- Legitimate interests: security, fraud prevention, anonymous/pseudonymous product analytics.
- Legal obligation: statutory retention periods and responding to lawful requests.
4. Health and location data (special category)
Your activity routes and health/fitness data are treated as sensitive and given extra protection:
- We access Apple Health data on a read-only basis and only with your explicit permission; you can revoke it any time in iOS Settings → Health.
- Health and location data are never used for advertising, marketing or analytics and are never shared with third parties (an Apple HealthKit requirement).
- With Strava, we only retrieve data for your own activities, through the account you connected.
5. Third parties and transfers
We use a small number of processors to run the service. They process data only on our behalf and on our instructions:
| Service | Purpose | Location |
|---|---|---|
| Supabase | Database, authentication, backend | EU (Frankfurt) |
| Apple / Google | App distribution, subscription validation, notifications | Global |
| Firebase Cloud Messaging | Push notifications | Global (Google) |
| Strava, Apple Health | Activity import (with your permission) | Global / on device |
| Sentry | Error and crash reporting | EU |
| PostHog | Product analytics (anonymous/pseudonymous) | EU (cloud-EU) |
| Resend | Transactional email | Global |
| Mapbox | Map rendering | Global |
We do not sell your data and do not share it for advertising. Where a transfer outside the EU is necessary, we apply appropriate safeguards (e.g. standard contractual clauses).
6. Retention and security
Your data is stored in an EU data centre (Frankfurt). Access is restricted at row level (Row Level Security) and traffic is encrypted with TLS. We keep your data while your account is active and for any statutory retention period. When you delete your account, your personal data is permanently deleted or anonymised within a reasonable period.
7. Your GDPR rights
Depending on your jurisdiction you have the right to access, rectify, erase, restrict processing of, port and object to the processing of your data. You can export your data or delete your account from within the app, or send a request to privacy@klaimed.app. We respond within 30 days at the latest. Where processing is based on consent, you can withdraw it at any time.
8. Children's privacy
Klaimed is not directed at children under 13 and we do not knowingly collect data from anyone under 13. If you believe a child has provided us with data, please contact us and we will delete it.
9. Changes
We may update this policy from time to time. For material changes we will notify you in the app or by email. The current version always lives on this page; the “Last updated” date reflects the latest change.
10. Contact
For all privacy questions and requests: privacy@klaimed.app