PRIVACY POLICY

1. Data Controller

Helga Deschmann , Roter Turm-Weg 11, 9900 Lienz, Austria

---

2. Data Collected

We may process:

• Name (optional)
• Email address
• Encrypted password
• Training and usage data
• Device information (e.g. operating system, app version)

No special category health data (Art. 9 GDPR) is processed unless voluntarily provided by the user.

---

3. Purpose of Processing

• Account management
• Storage of training progress
• Technical security
• Improvement of the app

---

4. Legal Basis

Art. 6(1)(b) GDPR (contract performance)
Art. 6(1)(f) GDPR (legitimate interest)

---

5. Data Retention

Data is stored as long as the account exists.
After deletion, data will be removed within 30 days unless legal obligations apply.

---

6. User Rights

Users have the right to:

• Access
• Rectification
• Erasure
• Restriction
• Data portability
• Objection

Complaints may be filed with the Austrian Data Protection Authority.

---

7. Security

We implement appropriate technical and organizational security measures.