Privacy Policy

Controller

This Privacy Policy explains how TEAM4BL LTD ("TEAM4BL", "we", "us", or "our") collects, uses, stores and protects personal data when you use our website, mobile applications, digital platforms, coaching programs, events or other related services (collectively, the "Services").

Controller:

Changes to this Policy

We may update this Privacy Policy from time to time to reflect changes in our Services, technologies, service providers or legal obligations.

If material changes occur, we will update the "Last updated" date above and, where required by law, provide additional notice.

Personal Data We Collect

A. Information You Provide

We may collect personal data when you:

• Register for an account
• Create or update a user profile
• Purchase subscriptions or digital products
• Participate in challenges, programs or events
• Fill out forms or surveys
• Contact customer support
• Communicate with us via email or social media
• Participate in promotions or other activities

Depending on the relevant Service, this may include:

• Name
• Email address
• Password or authentication credentials in protected form
• Profile information
• Postal address, where required
• Fitness goals and training preferences
• Feedback, comments and communications
• Information voluntarily entered into the application

For purchases made through our mobile application, payment transactions are processed directly through the Apple App Store or Google Play Store.

TEAM4BL does not receive or store full credit card numbers, bank account details or other complete payment credentials used for these in-app purchases.

We may, however, receive limited information relating to a transaction or subscription, such as:

• Product or subscription purchased
• Subscription status
• Start and expiration dates
• Trial status
• Renewal status
• Transaction identifiers
• Store-related purchase information
• Access or entitlement status

We collect only personal data that is necessary for the relevant purposes described in this Privacy Policy.

B. Automatically Collected Information

When you use our Services, certain technical information may be collected automatically, including:

• Device type and device information
• Operating system
• App version
• IP address
• Technical log information
• Browser information where applicable
• Timestamps
• Features accessed
• Session activity
• App usage information
• Training or program progress
• Subscription and purchase status
• Approximate location derived from an IP address

This information may be processed in order to operate the Services, maintain security, diagnose technical issues and improve functionality.

C. Health & Fitness Data

With your explicit permission, our mobile application may access certain health and fitness information from:

• Apple Health / HealthKit on iOS
• Google Health Connect on Android

Granting access is optional.

The app remains usable without granting access to Apple Health or Google Health Connect, except where a specific optional feature requires such data.

The health and fitness information accessed is limited to:

• Resting heart rate
• Heart rate variability (HRV)
• Sleep duration
• Training time

This information is used to:

• Personalize your fitness profile
• Provide weekly analyses
• Improve training recommendations
• Track your progress within the application

The technical access on iOS is implemented through Apple HealthKit and on Android through Google Health Connect.

We do not use:

• Facial recognition
• Facial identification
• Body tracking through a camera
• Depth cameras or TrueDepth data
• Biometric identification
• Augmented-reality body analysis

Health and fitness data:

• Is never sold
• Is not used for advertising
• Is not used for marketing
• Is not used for cross-service profiling
• Is not shared with data brokers
• Is not provided to RevenueCat
• Is not provided to our hosting provider
• Is processed only with your explicit permission
• Is used only for the user-facing functionality for which access was granted

You may withdraw your permissions at any time through your Apple Health, Google Health Connect or device settings.

Our use of Apple HealthKit data is intended to comply with Apple's applicable HealthKit requirements.

Our use of Google Health Connect data is intended to comply with Google's applicable Health Connect permissions and limited-use requirements.

D. Cookies and Similar Technologies

Our website may use cookies and similar technologies where necessary to:

• Operate the website
• Maintain security
• Remember user preferences
• Analyze website performance
• Improve user experience

Where required by applicable law, non-essential cookies or tracking technologies are used only after obtaining consent.

Our mobile application may use technical SDKs or similar technologies necessary to operate app functionality, subscriptions, security and analytics.

Legal Basis for Processing

Where the General Data Protection Regulation ("GDPR") applies, personal data is processed on one or more of the following legal bases:

Performance of a Contract

Processing may be necessary to:

• Create and operate your account
• Provide app functionality
• Provide purchased subscriptions
• Manage access to paid features
• Provide programs, challenges and other Services

Legitimate Interests

We may process data where necessary for legitimate interests such as:

• Maintaining security
• Preventing abuse or fraud
• Diagnosing technical problems
• Maintaining the stability of our Services
• Improving our Services

Where we rely on legitimate interests, we consider the interests and rights of users.

Legal Obligations

Certain information may be processed or retained where required for:

• Accounting
• Tax obligations
• Regulatory requirements
• Legal claims
• Compliance obligations

Consent

Where required, we rely on consent for activities such as:

• Health and fitness data access
• Optional marketing communication
• Certain analytics or tracking technologies

For health and fitness information that constitutes special-category personal data under Article 9 GDPR, we rely on your explicit consent.

You may withdraw consent at any time with effect for the future.

How We Use Personal Data

We may process personal data to:

• Provide and operate the Services
• Create and manage accounts
• Authenticate users
• Provide app functionality
• Manage subscriptions
• Verify purchases
• Determine access to paid content
• Deliver programs and training content
• Personalize user-facing functionality
• Track user progress
• Provide customer support
• Maintain technical infrastructure
• Detect fraud or abuse
• Improve our products and Services
• Communicate important service information
• Comply with legal obligations

We do not sell personal data.

Service Providers and Data Sharing

We use selected service providers to operate our Services.

Depending on the relevant functionality, these may include:

• IONOS for hosting and server infrastructure
• RevenueCat for subscription and entitlement management
• Apple for App Store purchases and subscriptions
• Google for Google Play purchases and subscriptions
• Email and communication service providers
• Technical service providers necessary for operating the Services

Service providers acting on our behalf may process personal data only to the extent necessary for the relevant service and subject to applicable contractual and data-protection requirements.

Health and fitness data accessed through Apple HealthKit or Google Health Connect is not shared with these service providers where it is processed exclusively on the user's device as described above.

We may also disclose personal data:

• Where required by law
• Where necessary to enforce our agreements or policies
• To protect legal rights or security
• In connection with a merger, acquisition, restructuring or sale of all or part of our business, subject to applicable data protection requirements

Specific Third-Party Services

A. IONOS – Hosting and Server Infrastructure

We use IONOS to provide hosting and technical server infrastructure for parts of our Services, including our application backend.

In connection with hosting and server operations, technical information may be processed, including:

• IP addresses
• Server requests
• Timestamps
• Technical logs
• Device or browser information
• Authentication-related information
• Information required to provide app functionality

Processing is carried out in order to provide the Services, maintain system security and ensure the availability and technical stability of our infrastructure.

Where IONOS processes personal data on our behalf, it acts as a service provider or processor in accordance with the applicable contractual arrangement.

B. RevenueCat – Subscription and Entitlement Management

We use RevenueCat, Inc. to manage subscriptions and in-app purchase entitlements within our mobile application.

RevenueCat helps determine whether a user:

• Has purchased a product
• Has an active subscription
• Is currently in a trial period
• Is entitled to access paid app features
• Has renewed, cancelled or lost access to a subscription

RevenueCat may process limited technical and transaction-related information necessary for these purposes.

Depending on the operating system and technical implementation, such information may include:

• App user identifiers
• Product identifiers
• Subscription identifiers
• Subscription status
• Purchase status
• Transaction identifiers
• Purchase or receipt information
• Google Play purchase tokens
• Apple transaction information
• Renewal information
• Trial information
• Expiration information
• Device or app-related technical information

RevenueCat does not process the user's underlying credit card or bank payment on behalf of TEAM4BL.

The financial transaction itself is processed through Apple or Google.

RevenueCat processes relevant customer personal data on behalf of TEAM4BL in accordance with the applicable contractual arrangement.

RevenueCat is based in the United States.

Where personal data is transferred outside the European Economic Area, appropriate safeguards are used as required under applicable data-protection law, including Standard Contractual Clauses where applicable.

C. Apple App Store

On Apple devices, digital purchases and subscriptions offered within our application are processed through the Apple App Store.

Apple processes the relevant transaction and payment information under Apple's own terms and privacy documentation.

TEAM4BL may receive limited subscription or transaction-related information necessary to:

• Verify a purchase
• Provide purchased functionality
• Determine subscription status
• Provide customer support
• Maintain entitlement information

TEAM4BL does not receive the user's complete payment card information from Apple for such in-app purchases.

Users manage Apple subscriptions through their Apple account and App Store settings.

D. Google Play Store

On Android devices, digital purchases and subscriptions offered within our application are processed through Google Play.

Google processes the relevant transaction and payment information under Google's applicable terms and privacy documentation.

TEAM4BL may receive limited information required to:

• Verify purchases
• Determine subscription status
• Provide purchased functionality
• Provide customer support
• Manage access rights

TEAM4BL does not receive complete credit card or bank payment information used by the user through Google Play.

Users manage Google Play subscriptions through their Google Play account.

International Data Transfers

TEAM4BL LTD is established in Cyprus, within the European Union.

Some service providers may process personal data outside the European Union or European Economic Area.

In particular, certain data processed through RevenueCat may be processed in the United States.

Where personal data is transferred to a country outside the EU/EEA and no applicable adequacy decision exists, we use or require appropriate safeguards under applicable data protection law.

These may include:

• European Commission Standard Contractual Clauses
• Adequacy decisions
• Additional contractual safeguards
• Appropriate technical and organizational security measures

Some providers, including Apple and Google, may process data internationally under their respective privacy frameworks and contractual safeguards.

Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected.

Retention periods may depend on:

• The duration of the user account
• The duration of a subscription
• The provision of Services
• Support requirements
• Security requirements
• Contractual obligations
• Tax and accounting requirements
• Legal claims
• Other statutory retention requirements

When personal data is no longer required, it is deleted or anonymized, unless continued retention is required by law.

Third-party providers such as Apple, Google and RevenueCat may apply their own retention periods to data processed independently or under their respective services.

Your Data Protection Rights

Where applicable, including under the GDPR, you may have the right to:

• Obtain access to personal data
• Request correction of inaccurate personal data
• Request deletion
• Request restriction of processing
• Object to processing
• Withdraw consent
• Receive certain data in a portable format
• Lodge a complaint with a supervisory authority

Consent may be withdrawn at any time without affecting the lawfulness of processing carried out before withdrawal.

Requests may be sent to:

For users in Cyprus, complaints may also be submitted to:

Office of the Commissioner for Personal Data Protection
Republic of Cyprus

Marketing Communications

If you consent to receive marketing communications, we may send information regarding:

• Product updates
• App updates
• Programs
• Challenges
• Events
• Promotions
• Offers

You may unsubscribe at any time by:

• Using the unsubscribe link provided in a marketing email
• Contacting us directly

Administrative or service-related communications may still be sent where necessary, for example:

• Security notices
• Account-related communications
• Subscription-related communications
• Important changes to the Services

Push Notifications

With your permission, our mobile application may send push notifications.

These may include:

• Training reminders
• Routine reminders
• Challenge updates
• Community information
• Product or app updates
• Service notifications

Push notifications can be disabled at any time through your device settings.

Subscriptions and In-App Purchases

Certain functionality within the mobile application may require a paid subscription or in-app purchase.

Purchases made through the mobile application are processed through:

• Apple App Store on supported Apple devices
• Google Play Store on supported Android devices

Available products, subscriptions, prices and offers may be provided or configured through the applicable app-store infrastructure and our subscription-management systems.

The applicable store presents the final purchase price before the transaction is confirmed.

Payments are processed directly by Apple or Google under their respective terms.

TEAM4BL does not independently process the user's credit card or bank account information for these in-app purchases.

We use RevenueCat to verify purchase and subscription status and to determine whether a user is entitled to access paid features.

RevenueCat does not replace Apple or Google as the payment processor.

For example, RevenueCat may receive confirmation that:

• A subscription is active
• A purchase has been completed
• A trial is active
• A subscription has expired
• A subscription has been renewed
• A subscription has been cancelled

Subscription billing, payment-method management and cancellation are generally handled through the user's Apple App Store or Google Play account, depending on the platform through which the subscription was purchased.

App Tracking Transparency

Where Apple's App Tracking Transparency ("ATT") framework applies, permission will be requested before tracking a user's activity across apps or websites owned by other companies where such permission is legally or technically required.

Users may deny or later withdraw such permission through the applicable device settings.

Denying tracking permission does not prevent access to basic app functionality unless a specific optional feature technically requires such permission.

Account Deletion

Users may request deletion of their account and associated personal data.

This may be done:

• Through an account deletion function inside the application, where available
• By contacting TEAM4BL at support@team4bl.com

After verification of the request, personal data associated with the account will be deleted or anonymized unless continued retention is required by law.

Certain transaction information held independently by Apple or Google may remain subject to the applicable provider's own legal retention requirements.

Children's Privacy

Our Services are not intended for children under the age of 16 unless expressly stated otherwise for a specific Service and permitted under applicable law.

We do not knowingly collect personal data from children under the applicable minimum age without the required authorization.

If we become aware that personal data has been collected from a child in violation of applicable law, we will take appropriate steps to delete that information.

Security

We implement appropriate technical and organizational measures designed to protect personal data.

These measures may include:

• Encryption
• Secure server infrastructure
• Access controls
• Authentication measures
• Restricted administrative access
• Monitoring for unauthorized access
• Secure communication protocols
• Regular technical maintenance

Nevertheless, no internet-based or digital system can guarantee absolute security.

Health and Fitness Disclaimer

TEAM4BL provides fitness, lifestyle and wellness-related information.

The Services are not intended to diagnose, treat, cure or prevent disease.

Content provided through the application or related Services does not constitute medical advice and does not replace consultation with a qualified physician or other healthcare professional.

Users should seek appropriate medical advice before starting a new training, nutrition or lifestyle program where this is appropriate for their individual circumstances.

Contact

If you have questions regarding this Privacy Policy or the processing of your personal data, please contact: