SPOZON Privacy Policy

Last updated: October 20, 2026 · Türkçe: Gizlilik Politikası

SPOZON ("the app", "we") is a social network for amateur athletes. This policy explains what data we collect, why and on what legal basis we process it, who we share it with, and your rights. We respect your rights under the EU/UK GDPR and Turkey's KVKK.

Controller: SPOZON, Istanbul, Türkiye · Contact: ozdemircanovali@gmail.com

Data we collect

• Account data: email address, username, full name, password (stored hashed; we cannot see it). If you sign in with Apple or Google we only receive your name and email address (with Apple you can choose "Hide My Email").
• Location (country and city): the country and city you choose at sign-up so you can compete in city and country rankings. If you tap "Use my location", your phone's location is used once to find your country and city and is not stored.
• Workout and route data: route, distance, duration, pace and elevation of workouts you record with GPS; and, if you allow it, workouts read from Apple Health or wearables (WHOOP, Fitbit, Garmin): sport, duration, distance, calories, heart rate.
• Body data: sex, birth year, height and weight. Used only to estimate calories and effort; never shown on your profile or to anyone else.
• Profile and posts: profile photo, bio, photos you post, captions, comments, likes, who you follow, club chat messages.
• Club and match data: your club, match scores, trophy points.
• Technical data: push notification token, your phone's time zone and language (for daily point limits and notification language).
• Crash reports and usage statistics: when the app crashes or hits an error, a technical report (error message, the code location, device model, operating system and app version) is sent. We also count a small number of in-app actions (for example: account created, club created or joined, matchmaking started, match finished, workout recorded, post shared, invite link shared or opened) to understand which features are used. These records are linked only to a random account ID; they do not include your email, name, username, messages, post contents, GPS location or route, and we do not derive your location from your IP address.

Why we process it and the legal basis

Purpose	Legal basis (GDPR Art. 6 / KVKK Art. 5)
Creating your account, signing you in, providing the app's features (posts, clubs, matches, rankings)	Performance of a contract
Recording workouts, estimating calories and effort	Performance of a contract; your explicit consent for health-related data (GDPR Art. 9(2)(a), KVKK Art. 6)
Reading Apple Health / wearable data	Your consent — you can withdraw it at any time
Preventing cheating and abuse, reviewing reports	Legitimate interest (fair competition and community safety)
Detecting and fixing crashes and errors; anonymous-style usage statistics to improve the app	Legitimate interest (a stable, working app)
Sending push notifications	Your consent (your phone's notification permission)

We do not show ads, we do not sell your data, and we do not use it for profiling or marketing. Usage statistics are not used for advertising and are not combined with data from other apps or websites.

Apple Health (HealthKit) data

• Apple Health data is read only if you allow it. You can revoke access at any time in iPhone Settings > Health.
• It is used only for points, statistics and sharing features inside the app.
• Health data is never used for advertising, marketing or data sales and is never shared with third parties.
• The app does not write any data to Apple Health.

Who can see your data

• Your profile (name, username, photo, city and country), posts and club information are visible to other SPOZON users. With a private account, only followers you approve can see your posts and workouts.
• Rankings show your name, points and city/country.
• Users you block cannot see your content.

Service providers and international transfers

Your data is shared only with providers needed to run the app:

• Supabase (database, authentication, file storage) — hosted on Amazon Web Services (AWS)
• Expo / Apple / Google (push notification delivery; authentication if you sign in with Apple or Google)
• WHOOP, Fitbit, Garmin — only if you connect them, to read your workouts
• Sentry (Functional Software, Inc.) — crash and error reports
• PostHog (PostHog, Inc.; EU data region) — usage statistics

These providers may be located outside your country or the EU. Transfers rely on the providers' Standard Contractual Clauses (SCCs) and the applicable transfer rules.

How long we keep data

We keep your data while your account is active. When you delete your account, all your data is permanently deleted and removed from backups within 30 days. Abuse reports may be kept for up to 1 year to prevent misuse. Crash reports are kept for up to 90 days and usage statistics for up to 1 year.

Your rights

Under GDPR Articles 15–22 (and KVKK Art. 11) you have the right to:

• Access and portability: download all your data as a single file (JSON) in Settings > Download my data.
• Rectification: edit your profile and body data in the app at any time.
• Erasure: permanently delete your account and all data (posts, comments, workouts, device connections) in Settings > Delete account.
• Withdraw consent: turn off Apple Health, device connections, location and notification permissions at any time.
• Object and restrict: write to us to object to processing based on legitimate interest (including crash reports and usage statistics).
• Complain: lodge a complaint with your local data protection authority.

Requests: ozdemircanovali@gmail.com — we respond within 30 days.

Security

Database security rules ensure each user can only access permitted data; all connections are encrypted (HTTPS). Wearable access tokens are stored on the server and never sent to the app.

Children

SPOZON is not intended for children under 13. In the EU, users under 16 (or a lower age set by your country) may use it only with parental consent.

Changes

If we update this policy we will change the date above and announce significant changes in the app.