The controller responsible for processing personal data under the General Data Protection Regulation (GDPR) is:
EDVORQ is a solo project. A data protection officer is not legally required and has not been appointed.
EDVORQ processes data required to provide training features, an optional account, cloud sync, Arena features, push notifications, support and account security. Your training data is not sold, used for advertising or shared with advertising networks.
This website is provided through Firebase Hosting. When you visit the website, technically required access data is processed, in particular IP address, date and time of access, requested file/URL, browser and device information and referrer where transmitted by your browser. This data is required to deliver the website, detect disruptions and prevent abuse. Legal basis: Art. 6(1)(f) GDPR.
The website currently loads fonts and icons from Google servers, in particular Google Fonts and Material Icons. Your browser may transmit technical connection data such as IP address, browser information and the requested resource to Google. Legal basis: Art. 6(1)(f) GDPR, our legitimate interest in a consistent and functional presentation of the website.
This website currently does not include Google Analytics, a cookie banner or advertising tracking. If analytics or marketing services are activated in the future, this Privacy Policy will be updated first and consent will be obtained where required.
If you contact us by email, we process your email address, the content of your message and related technical email metadata in order to respond to your request. Depending on the request, the legal basis is Art. 6(1)(b) GDPR or Art. 6(1)(f) GDPR. Statutory retention obligations remain unaffected.
For email verification and password reset, EDVORQ uses links on this website. Action codes from the link are transmitted to Firebase Authentication so that your email address can be verified or your password can be changed. Legal basis: Art. 6(1)(b) GDPR.
You can use core training features locally on your device without an account. An account is optional; it is required when you want to use cloud sync, Arena and community features, or sign in on multiple devices. When you sign in, the following data is processed depending on the selected method:
Authentication is provided through Firebase Authentication. Passwords for Apple or Google accounts are not transmitted to EDVORQ. Legal basis: Art. 6(1)(b) GDPR.
When you use an account, the following data may be stored in Firebase Cloud Firestore and synced with your account:
This data is used to provide your training history, progress display, sync between devices and app features. Legal basis: Art. 6(1)(b) GDPR.
EDVORQ includes Arena and community features. Depending on your use and visibility settings, the following data may be visible to other registered users or processed in connection with other users:
Private body data, detailed training logs and health data are not shown to other users as public profile information. Legal basis: Art. 6(1)(b) GDPR for community features you actively use and Art. 6(1)(f) GDPR for abuse prevention and moderation.
If you choose a profile photo, the app accesses your photo library after you grant permission. For a profile photo, the selected image file is first submitted privately to Firebase Cloud Storage and manually reviewed for compliance with the community rules. The image, your user ID, timestamp, file type, file size and review status are processed for this purpose. Until explicitly approved, the image is not visible to other users. Once approved, it is stored as a profile photo in the user and Arena profile and shown to other registered users according to the visibility settings. If rejected, the submitted image file is deleted; pending image files are deleted after 30 days without a decision. You can remove a pending or approved profile photo at any time in the app. For share cards, you can voluntarily choose a background or profile image; it is used on your device to create the card and is not uploaded by EDVORQ for that purpose alone. An image you create can be saved to your media library or shared through the operating system with recipients you select. EDVORQ does not automatically access your existing photos and does not analyze image content. Legal basis: Art. 6(1)(a) GDPR for media access, Art. 6(1)(b) GDPR for the profile and community feature you use, and Art. 6(1)(f) GDPR for abuse prevention and moderation.
The app uses local notifications and, where you allow them, remote push notifications through Firebase Cloud Messaging and the operating system push services, such as Apple Push Notification service (APNs). For this purpose, a push token, Firebase Installation ID and technical delivery information are processed. The token may be stored in your user account so that EDVORQ can notify you about follows, rivalries, challenges, ranking events or reminders. You can disable push notifications in your device settings. Legal basis: Art. 6(1)(a) GDPR and Art. 6(1)(b) GDPR.
On iOS, EDVORQ can use Apple Health after your explicit permission. The app reads your body weight to prefill an entry and writes completed strength workouts, the active energy included in those workouts, and weight you save in EDVORQ to Apple Health. With a connected Apple Watch, a recorded workout may also include heart-rate data. On Android, EDVORQ can use Health Connect after your explicit permission: the app reads the most recently available weight from a period of up to 30 days and writes weight and completed strength workouts. This health data is used only for training and progress features, never for advertising, marketing or sale of data. It is not published in the Arena. You can revoke permissions at any time in Apple Health, Health Connect or your device settings. Legal basis: Art. 6(1)(a) GDPR.
If you contact support, receive emails from EDVORQ or report users, we process the data required to handle the matter, in particular your message, email address, user ID, reported content, report reason, timestamps and technical delivery information. Reports may be forwarded by email to support so that abuse can be reviewed. Legal basis: Art. 6(1)(b) GDPR and Art. 6(1)(f) GDPR.
The EDVORQ app does not use in-app advertising, does not sell personal data and does not share your data with advertising networks. The processed data is used for app functionality, security, sync, community features, support and integrations you allow.
EDVORQ uses technical service providers where required for operation, security and delivery of the app and website.
Transfers to third countries, in particular the United States, may take place as part of these services. They are based on appropriate safeguards, in particular adequacy decisions, the EU-US Data Privacy Framework, standard contractual clauses or the respective providers' privacy terms.
Depending on the feature, processing is based on the following legal bases:
Personal data is stored for as long as your account is active or the processing remains necessary for the purposes described above. You can delete your account in the app. Upon confirmation, your authentication account is deleted and the automated cleanup of associated cloud data is started. This includes in particular your user profile, training data, Arena profile, profile photo including its submission and review status, follows, rivalries and blocks, to the extent that this data is linked to your account and technically covered by the deletion process. Locally stored EDVORQ app data is also removed from the device used in the deletion process.
Content you have already saved outside EDVORQ or shared with third parties cannot be removed from those recipients by deleting your account.
Data is generally transmitted in encrypted form. Firebase databases and storage areas are protected by security rules and role-based access. No technical system is completely secure; we work to keep permissions, rules and processes up to date according to the app's development stage.
Under the GDPR, you have in particular the following rights. You can exercise them at any time by email:
You can withdraw consent at any time with effect for the future, for example through app or device settings or by email.
You have the right to lodge a complaint with a data protection supervisory authority. The competent authority is in particular:
State Commissioner for Data Protection Saxony-Anhalt
Leiterstraße 9 · 39104 Magdeburg · Germany
EDVORQ is not directed specifically at children. If you are a minor, you should use EDVORQ only with the consent of your parents or legal guardians where this is legally required.
We may update this Privacy Policy if app features, technical service providers or legal requirements change. The current version is available on this page.
For questions about the processing of your personal data or exercising your rights, please contact:
Eduard Siks
Email: info@edvorq.com