Privacy Policy

1. Who is responsible

The data controller is Tvrbo, based in Berlin, Germany. Contact: privacy@tvrbo.io.

2. What we collect

• Account data: email, password hash, display name.
• Training data: runs you log, weight entries, diary notes, photos.
• Technical data: device type, app version, error logs.
• Payment data: handled by our payment processor; we only store the purchase status, not card numbers.

3. Why we use it

To run the Service for you: sync data across devices, send transactional emails (e.g. password reset), and improve reliability. Legal basis under GDPR: performance of the contract (Art. 6(1)(b)) and our legitimate interest in keeping the Service secure and stable (Art. 6(1)(f)).

4. Where it lives

Application data is stored on servers located inside the European Union. Backups are encrypted and retained for a rolling 30 days.

5. Sharing

We use a small set of processors to operate the Service (hosting, transactional email, error monitoring, payments). Each is bound by a data processing agreement and operates within the EU or under an adequate transfer mechanism. We do not sell personal data and do not share it with advertisers.

6. Your rights

You have the right to access, correct, export and delete your data, to restrict or object to processing, and to lodge a complaint with a supervisory authority. You can export or delete your account from Settings, or email privacy@tvrbo.io.

7. Retention

We keep your data while your account is active. If you delete your account, content is removed from production within 30 days and from encrypted backups within 90 days.

8. Cookies

We use a minimal set of first-party cookies needed to keep you signed in and to remember your preferences. No third-party advertising cookies.

9. Changes

If we materially change this policy, we will notify you in the app or by email at least 14 days before the change takes effect.