Polityka prywatności

SPORT2E Spółka z ograniczoną odpowiedzialnością is a company registered in Poland (KRS 0001148943), with its registered office at ul. Żurawia 32/34, 00-515 Warsaw, Poland (“SPORT2E”, “we”, “us”). We are the controller of your personal data and process it under the General Data Protection Regulation (GDPR) and the Polish Personal Data Protection Act.

This policy covers the Sportera mobile app for iOS and Android (“App”), the partner panel for gyms, studios and stores, and our website sportera.app (together, the “Services”). It explains what we collect, why, who we share it with and what your rights are.

You must be at least 18 years old to use the Services. If you are under 18, please do not create an account or send us personal data. If we learn that we hold data of someone under 18, we delete it.

Account and profile

• Sign-in data from Apple or Google: your name, email address and an account identifier.
• What you add to your profile: nickname, profile photo, cover images and bio, and, if you choose to add them, age, gender, height and weight.

Activity from Apple Health, Health Connect and Samsung Health

With your permission, the App reads your steps and workouts from Apple Health (iOS) or from Health Connect or Samsung Health (Android) to turn them into crystals. We only read this data: we never write to Apple Health, Health Connect or Samsung Health, never sell your health data, never use it for advertising and never share it with advertisers or data brokers. You can switch access off at any time in Apple Health, Health Connect or Samsung Health settings, but the App will then stop counting your activity.

Location

We use your location only at the moment you check in at a partner gym or an event, to confirm that you are there, and to show you the offers available in your country. We do not use location to count steps and we do not track it in the background.

Camera and photos

• Camera: partner venues use it to scan guests’ QR codes at the door of an event.
• Photos: you pick images from your gallery for your avatar, and partners for their logo and event covers. We only receive the images you choose.

Your activity in the App

Crystals and rubies, streaks, levels, daily tasks, challenges and pledges, friends and invite codes, offers you redeem with crystals, and events you sign up for and check in to.

Push notifications

If you allow notifications, we store your device’s notification identifier to send them. You can turn notifications off in the App or in your device’s settings.

Device and usage data

Device type, operating system, app version, language, time zone, IP address, a device identifier, crash reports, and how you use the App (screens you open, session length), so we can keep it working and improve it.

Partner venues

For gyms, studios and stores that join as partners: business name and type, contact person, email, phone or Telegram, venue addresses, logo and descriptions, the offers and events they publish, and the payment confirmations and invoices for their subscription.

When you contact us

The messages you send us and your contact details.

• We do not show ads in the App.
• We do not sell your personal data.
• There are no purchases for money in the App. Crystals and rubies are in-app rewards: they have no cash value and can’t be exchanged for money.
• We never use data from Apple Health, Health Connect or Samsung Health for advertising or marketing.

For each purpose, the GDPR requires a legal basis. Ours are listed below.

Creating and running your account, giving you crystals and rubies, offers, challenges and events

Performance of a contract

Reading steps and workouts from Apple Health, Health Connect or Samsung Health

Your explicit consent

Using your location at a check-in and to pick your country’s offers

Your consent

Showing your nickname, avatar and progress in leaderboards, friends and challenges

Legitimate interest

Sending push notifications

Your consent

Running partner accounts, subscriptions and invoices

Performance of a contract and legal obligation

Preventing fraud, such as faked activity or multiple accounts

Legitimate interest

Analytics, crash reports and improving the App

Legitimate interest

Answering your requests

Legitimate interest

Meeting legal duties and defending legal claims

Legal obligation and legitimate interest

The App complies with the Google API Services User Data Policy, including its Limited Use requirements, and with the Health Connect, Samsung Health and Apple HealthKit rules on health data.

• Other users see your nickname, avatar, level and progress in leaderboards, friends and challenges. They never see your health data, email or location.
• Partner venues see what they need to serve you: your nickname and redemption code when you use their offer, and your sign-up and check-in for their event.
• Service providers that run the Services for us under data processing agreements: Google Firebase (database, file storage, sign-in, analytics, crash reports and push notifications), Apple and Google sign-in, and website hosting.
• Authorities, when the law requires it.
• A buyer or successor, if SPORT2E is merged, acquired or sells its business, under the same protections.

Some providers process data outside the European Economic Area. When they do, we rely on an adequacy decision or on the European Commission’s Standard Contractual Clauses and other appropriate safeguards. To learn more, email team@sportera.app with the subject “International transfers”.

We keep your data while your account is active and only as long as we need it for the purposes above.

When you delete your account, it is deactivated at once and permanently deleted after 14 days; during those 14 days you can restore it by signing in. See how to delete your account, including without the App.

Records we must keep by law, such as partner payment invoices, are kept only as long as the law requires.

We use industry-standard measures to protect your data from unauthorised access, loss and misuse, including encrypted connections and restricted access to our systems.

Our website uses one cookie, which remembers the language you chose, and stores your light or dark theme in your browser. Both are needed for the site to work as you set it, so they don’t require consent. The website has no analytics or advertising cookies.

The App does not use cookies. It collects the device and usage data described above through Google Firebase.

You can delete or block cookies in your browser settings; the site will then fall back to its default language and theme.

You have the right to:

• access the personal data we hold about you;
• correct inaccurate data;
• have your data deleted;
• restrict or object to processing;
• receive your data in a structured, machine-readable format;
• withdraw your consent at any time, for example by turning off Apple Health, Health Connect or Samsung Health access, location or notifications, without affecting processing before the withdrawal;
• lodge a complaint with a supervisory authority. In Poland this is the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl.

To use any of these rights, email team@sportera.app. We answer within one month.

The Services may link to partners’ websites and other third-party services. What you share there is governed by their own privacy policies, and we are not responsible for their content or practices.

We may update this policy. We will publish changes on this page and in the App, update the date above, and tell you by email or in the App when the changes are significant.

Questions or requests about your data: email team@sportera.app.