Last updated: 28th December 2024
In this Privacy Notice some of the words we use have capital letters. This is because we have given these words a particular meaning. These words are listed below:
Among the types of Personal Data that this Application collects, by itself or through third parties, there are:
Personal Data may be freely provided by the User, or, in case of Usage Data, collected automatically when using this Application. Unless specified otherwise, all Data requested by this Application is mandatory and failure to provide this Data may make it impossible for this Application to provide its services.
In cases where this Application specifically states that some Data is not mandatory, Users are free not to communicate this Data without consequences to the availability or the functioning of the Service.
Any use of Cookies – or of other tracking tools — by this Application or by the owners of third-party services used by this Application serves the purpose of providing the Service required by the User, in addition to any other purposes described in the present document.
Users are responsible for any third-party Personal Data obtained, published or shared through this Application.
The Data concerning the User is collected to allow the Owner to provide its Service, comply with its legal obligations, respond to enforcement requests, protect its rights and interests (or those of its Users or third parties), detect any malicious or fraudulent activity, as well as the following: Analytics, Beta Testing, Social features, Content commenting, Registration and authentication, Handling activity data, Platform services and hosting, Handling payments and Device permissions for Personal Data access.
We may use your Information for the following purposes:
| Service | Purpose of processing | Personal Data processed |
|---|---|---|
| Analytics |
Google Analytics (Universal Analytics) is a web analysis service provided by Google Ireland Limited (“Google”). Google utilizes the Data collected to track and examine the use of this Application, to prepare reports on its activities and share them with other Google services. Google may use the Data collected to contextualize and personalize the ads of its own advertising network. In order to understand Google's use of Data, consult Google's partner policy. |
Worldwide |
| Activity posts | The Activity Posts feature allows Users to record and share their workouts within the Application. Users can engage with shared posts by liking and commenting. Each User is solely responsible for the content they share, including comments made on others' posts. | username; first name; last name; profile photo; workout data; general activity data; |
| Content commenting | Content commenting services allow Users to make and publish their comments on the contents of this Application. Users are responsible for the content of their own comments. | username; first name; last name; public profile photo; |
| Registration and authentication |
By registering or authenticating, Users allow this Application to identify them and give them access to dedicated services. Depending on what is described below, third parties may provide registration and authentication services. In this case, this Application will be able to access some Data, stored by these third-party services, for registration or identification purposes. Direct registration (this Application) The User registers by filling out the registration form and providing the Personal Data directly to this Application. |
email address; first name; last name; ip address; password; username; date of birth; |
| Handling activity data |
This type of service allows the Owner to use the activity data collected by your device in order for this Application to operate or to provide specific features. This may include movements, heartbeat, change in altitude or data about the surroundings. Depending on what is described below, third parties may be involved in the activity tracking. Most devices allow for the User to control which Data is accessed or stored.
Apple HealthKit (Apple Inc.) |
general activity data |
| Public profile(this Application) |
The Public Profile feature allows Users to showcase selected personal information to others within the Application. This includes details such as their username, profile picture, and shared activity posts, depending on their privacy settings. The purpose of the Public Profile is to enable Users to connect and interact with the community. Users are encouraged to ensure the information they display aligns with their comfort level and the platform's guidelines. |
date of birth; first name; last name; gender; username; public profile image; workout data; general activity data; |
| Handling payments |
Unless otherwise specified, this Application processes any payments by credit card, bank transfer or other means via external payment service providers. In general and unless where otherwise stated, Users are requested to provide their payment details and personal information directly to such payment service providers. This Application isn't involved in the collection and processing of such information: instead, it will only receive a notification by the relevant payment service provider as to whether payment has been successfully completed.
Payments processed via the Apple App Store (Apple Inc.) |
payment data; |
Your Personal Data may be transferred to, and processed in, countries other than the country of which you are a resident. These countries may have data protection laws that are different from the laws of your country.
The following is a list of the main businesses who currently process data on our behalf in relation to the Castra Services:
| Name | Processing purpose(s) | Data Storage Location |
|---|---|---|
| DigitalOcean | Content hosting & serving | USA |
| Amazon Web Services | Content hosting & serving | Primary storage location is Ireland but content may be cached locally to improve content delivery performance |
|
Content hosting & serving Business email and analytics services |
Worldwide | |
| Apple Store(Apple Inc.) |
This Application uses a payment service provided by Apple Inc. that allows the Owner to offer the purchase of the app itself or in-app purchases. Personal Data processed to complete the purchases are processed by Apple, as described in the privacy policy for the App Store. |
Worldwide |
| RevenueCat |
We use RevenueCat to process and manage subscriptions from Apple and Google |
Worldwide |
Unless specified otherwise in this document, Personal Data shall be processed and stored for as long as required by the purpose they have been collected for and may be retained for longer due to applicable legal obligation or based on the Users’ consent.
We have put in place security measures to prevent your personal data from being accidentally lost, used, altered, disclosed, or accessed without authorization. We also allow access to your personal data only to those employees and partners who have a business need to know such data. They will only process your personal data on our instructions and they must keep it confidential. We have procedures in place to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach if we are legally required to.
We share your personal data within our group of companies which involves transferring your data outside the European Economic Area (EEA).
We are subject to the provisions of the General Data Protection Regulations that protect your personal data. Where we transfer your data to third parties outside of the EEA, we will ensure that certain safeguards are in place to ensure a similar degree of security for your personal data. As such:
We may transfer your personal data to countries that the European Commission have approved as providing an adequate level of protection for personal data by; or
If we use US-based providers that are part of EU-US Privacy Shield, we may transfer data to them, as they have equivalent safeguards in place; or
Where we use certain service providers who are established outside of the EEA, we may use specific contracts or codes of conduct or certification mechanisms approved by the European Commission which give personal data the same protection it has in Europe.
If none of the above safeguards is available, we may request your explicit consent to the specific transfer. You will have the right to withdraw this consent at any time.
Users may exercise certain rights regarding their Data processed by the Owner.
In particular, Users have the right to do the following, to the extent permitted by law:
Users are also entitled to learn about the legal basis for Data transfers abroad including to any international organization governed by public international law or set up by two or more countries, such as the UN, and about the security measures taken by the Owner to safeguard their Data.
Details about the right to object to processing
Where Personal Data is processed for a public interest, in the exercise of an official authority vested in the Owner or for the purposes of the legitimate interests pursued by the Owner, Users may object to such processing by providing a ground related to their particular situation to justify the objection.
Users must know that, however, should their Personal Data be processed for direct marketing purposes, they can object to that processing at any time, free of charge and without providing any justification. Where the User objects to processing for direct marketing purposes, the Personal Data will no longer be processed for such purposes. To learn whether the Owner is processing Personal Data for direct marketing purposes, Users may refer to the relevant sections of this document.
How to exercise these rights
Any requests to exercise User rights can be directed to the Owner through the contact details provided in this document. Such requests are free of charge and will be answered by the Owner as early as possible and always within one month, providing Users with the information required by law. Any rectification or erasure of Personal Data or restriction of processing will be communicated by the Owner to each recipient, if any, to whom the Personal Data has been disclosed unless this proves impossible or involves disproportionate effort. At the Users’ request, the Owner will inform them about those recipients.
Legal action
The User's Personal Data may be used for legal purposes by the Owner in Court or in the stages leading to possible legal action arising from improper use of this Application or the related Services. The User declares to be aware that the Owner may be required to reveal personal data upon request of public authorities.
Additional information about User's Personal Data
In addition to the information contained in this privacy policy, this Application may provide the User with additional and contextual information concerning particular Services or the collection and processing of Personal Data upon request.
System logs and maintenance
For operation and maintenance purposes, this Application and any third-party services may collect files that record interaction with this Application (System logs) or use other Personal Data (such as the IP Address) for this purpose.
Information not contained in this policy
More details concerning the collection or processing of Personal Data may be requested from the Owner at any time. Please see the contact information at the beginning of this document.
The Owner reserves the right to make changes to this privacy policy at any time by notifying its Users on this page and possibly within this Application and/or - as far as technically and legally feasible - sending a notice to Users via any contact information available to the Owner. It is strongly recommended to check this page often, referring to the date of the last modification listed at the top.
Should the changes affect processing activities performed on the basis of the User’s consent, the Owner shall collect new consent from the User, where required.