The controller responsible for processing personal data under the General Data Protection Regulation (GDPR) is:
EDVORQ is a solo project. A data protection officer is not legally required and has not been appointed.
EDVORQ processes data required to provide your account, training features, cloud sync, Arena features, push notifications, support and account security. Your training data is not sold, not used for advertising and not shared with advertising networks.
This website is provided through Firebase Hosting. When you visit the website, technically required access data is processed, in particular IP address, date and time of access, requested file/URL, browser and device information and referrer where transmitted by your browser. This data is required to deliver the website, detect disruptions and prevent abuse. Legal basis: Art. 6(1)(f) GDPR.
The website currently loads fonts and icons from Google servers, in particular Google Fonts and Material Icons. Your browser may transmit technical connection data such as IP address, browser information and the requested resource to Google. Legal basis: Art. 6(1)(f) GDPR, our legitimate interest in a consistent and functional presentation of the website.
This website currently does not include Google Analytics, a cookie banner or advertising tracking. If analytics or marketing services are activated in the future, this Privacy Policy will be updated first and consent will be obtained where required.
If you contact us by email, we process your email address, the content of your message and related technical email metadata in order to respond to your request. Depending on the request, the legal basis is Art. 6(1)(b) GDPR or Art. 6(1)(f) GDPR. Statutory retention obligations remain unaffected.
For email verification and password reset, EDVORQ uses links on this website. Action codes from the link are transmitted to Firebase Authentication so that your email address can be verified or your password can be changed. Legal basis: Art. 6(1)(b) GDPR.
An account is required to use the app. Depending on the sign-in method selected, in particular the following data is processed:
Authentication is provided through Firebase Authentication. Passwords for Apple or Google accounts are not transmitted to EDVORQ. Legal basis: Art. 6(1)(b) GDPR.
When you use EDVORQ, the following data may be stored in Firebase Cloud Firestore and synced with your account:
This data is used to provide your training history, progress display, sync between devices and app features. Legal basis: Art. 6(1)(b) GDPR.
EDVORQ includes Arena and community features. Depending on your use and visibility settings, the following data may be visible to other registered users or processed in connection with other users:
Private body data, detailed training logs and health data are not shown to other users as public profile information. Legal basis: Art. 6(1)(b) GDPR for community features you actively use and Art. 6(1)(f) GDPR for abuse prevention and moderation.
If you choose a profile photo, the app accesses your photo library after you grant permission. The selected image may be uploaded to Firebase Cloud Storage and the related image URL may be stored in your user profile and Arena profile. If you use the "Share Workout" feature, the app may save an image generated by you to your media library or share it through the operating system. EDVORQ does not automatically access your existing photos and does not analyze image content. Legal basis: Art. 6(1)(a) GDPR and Art. 6(1)(b) GDPR.
The app uses local notifications and, where you allow them, remote push notifications through Firebase Cloud Messaging and the operating system push services, such as Apple Push Notification service (APNs). For this purpose, a push token, Firebase Installation ID and technical delivery information are processed. The token may be stored in your user account so that EDVORQ can notify you about follows, rivalries, challenges, ranking events or reminders. You can disable push notifications in your device settings. Legal basis: Art. 6(1)(a) GDPR and Art. 6(1)(b) GDPR.
On iOS, EDVORQ can use Apple Health after your explicit permission. The app can read your body weight from Apple Health and write completed workouts, active energy and weight to Apple Health. This data is used only for training and progress features and not for advertising. You can change permissions at any time in Apple Health or iOS settings. Legal basis: Art. 6(1)(a) GDPR.
If you contact support, receive emails from EDVORQ or report users, we process the data required to handle the matter, in particular your message, email address, user ID, reported content, report reason, timestamps and technical delivery information. Reports may be forwarded by email to support so that abuse can be reviewed. Legal basis: Art. 6(1)(b) GDPR and Art. 6(1)(f) GDPR.
The EDVORQ app does not use in-app advertising, does not sell personal data and does not share your data with advertising networks. The processed data is used for app functionality, security, sync, community features, support and integrations you allow.
EDVORQ uses technical service providers where required for operation, security and delivery of the app and website.
Transfers to third countries, in particular the United States, may take place as part of these services. They are based on appropriate safeguards, in particular adequacy decisions, the EU-US Data Privacy Framework, standard contractual clauses or the respective providers' privacy terms.
Depending on the feature, processing is based on the following legal bases:
Personal data is stored for as long as your account is active or the processing remains necessary for the purposes described above. You can delete your account in the app. This deletes in particular your authentication account, user profile, training data, Arena profile, profile photo, follows, rivalries and blocks, to the extent that this data is linked to your account and technically covered by the deletion process.
Local data on devices where you are not signed in or that are not syncing can only be deleted on the respective device. Please delete the app data there as well where necessary.
Data is generally transmitted in encrypted form. Firebase databases and storage areas are protected by security rules and role-based access. No technical system is completely secure; we work to keep permissions, rules and processes up to date according to the app's development stage.
Under the GDPR, you have in particular the following rights. You can exercise them at any time by email:
You can withdraw consent at any time with effect for the future, for example through app or device settings or by email.
You have the right to lodge a complaint with a data protection supervisory authority. The competent authority is in particular:
State Commissioner for Data Protection Saxony-Anhalt
Leiterstraße 9 · 39104 Magdeburg · Germany
EDVORQ is not directed specifically at children. If you are a minor, you should use EDVORQ only with the consent of your parents or legal guardians where this is legally required.
We may update this Privacy Policy if app features, technical service providers or legal requirements change. The current version is available on this page.
For questions about the processing of your personal data or exercising your rights, please contact:
Eduard Siks
Email: info@edvorq.com