Privacy Policy

1. Data Controller

The controller for the processing of personal data in the mydart apps and on this website is:

Malte Heyenga
Am Lövenicher Weg 1
41812 Erkelenz
E-Mail: kontakt@mydart.app

2. Scope

This privacy policy applies to the mydart app for iOS, the mydart app for Android and the website mydart.app. The analysis of your throwing technique takes place exclusively inside the apps on your device. The website provides information about the product and links to the app stores.

3. No User Accounts, Your Data Stays on Your Device

mydart has no user accounts. Registration is neither required nor possible. We collect neither your name nor your email address, and we keep no user profiles. All training sessions, throw data, analyses and settings are stored exclusively on your device and are not transmitted to our servers. We can neither view nor restore them.

4. What Data Reaches Us at All

None of your training data reaches us. The only personal or device-related data we process is:

• When you visit the website, technical access data such as IP address, browser type and time of access
• Anonymous counters from the apps covering app launches, opened views and the total number of analysed throws
• A hash derived from the device identifier together with the number of throws used, in order to count the free allowance per device
• The information you voluntarily send us in a support request or bug report
• Redeemed promo codes

5. Purposes of Processing

We process this data for the following purposes:

• Enforcing the free throw allowance
• Validating and invalidating promo codes
• Handling support requests and bug reports
• Improving and further developing the apps based on anonymous usage figures
• Providing and securing the website
• Ensuring the security of our systems and preventing abuse

6. Camera Use in the Apps

The apps access your device camera for throw detection. Image processing and pose detection run entirely on your device. Neither video or image recordings nor the measurements and body landmark coordinates calculated from them are transmitted to our servers. You grant camera access in your device settings and can withdraw it there at any time.

7. Purchases via the App Store and Google Play

The Pro subscription is concluded and billed exclusively as an in-app purchase through the Apple App Store or Google Play. Payment is handled entirely by the respective store operator using the payment method stored in your store account. Whether a subscription is active is verified by the app directly with the store on your device. We receive neither your payment details nor your billing address, only aggregated sales and payout reports with no reference to individual people.

• Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, Ireland
• Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland

Apple and Google process purchase and payment data as controllers in their own right. Their own privacy notices apply to that processing, and we have no influence over it.

8. Anonymous Usage Statistics

To see how much the apps are used, we count app launches, opened views and the total number of analysed throws. These counters are purely anonymous: they contain neither a user identifier nor a device identifier nor your IP address, and cannot be linked to any person. We do not embed any third-party analytics, tracking or advertising SDKs in the apps.

9. Free Throw Allowance

The free throw allowance is counted per device. To do so, the app transmits a hash derived from the device identifier together with the number of throws already used and the operating system. The hash cannot be reversed to identify your device, and neither a name nor an email address nor the content of your throws is linked to it. The legal basis is our legitimate interest in enforcing the free allowance under Art. 6 (1) (f) GDPR.

10. Support and Bug Reports

If you report a problem from one of the apps, we transmit your email address, optionally your name, your message and technical details about the platform, app and operating system version, device model and language to our support mailbox. You may voluntarily attach screenshots, screen recordings or log files and include an export of a training session. We process this information solely to handle your report on the basis of Art. 6 (1) (f) GDPR and delete it once the matter is closed and no statutory retention periods apply.

11. Promo Codes

If you redeem a promo code you received, for example at a tournament or through a partner, we store the code itself along with the time and number of redemptions. The code is not linked to you personally, and the unlocked access is stored exclusively on your device. Your IP address is used only briefly during redemption to limit the number of attempts and is not stored permanently.

12. Use of the Website

When you visit mydart.app, our server processes technical access data such as IP address, browser type, operating system, the page requested and the time of access. This data is technically necessary to deliver the page and serves the security and stability of operations. The legal basis is our legitimate interest under Art. 6 (1) (f) GDPR. Server log files are kept only for as long as necessary for these purposes and are deleted afterwards.

13. Cookies and Reach Measurement

The apps set no cookies and embed no tracking or advertising SDKs. On the website we use strictly necessary cookies for session management, language selection and storing your cookie settings. We do not use tracking or marketing cookies. Only if you consent to the "Analytics" category in the cookie banner do we load the web analytics service Umami Cloud, provided by Umami Software, Inc., 28 Geary St, Suite 650 #243, San Francisco, USA. Umami sets no cookies and builds no user profile. It counts page views and clicks on the app store buttons and processes technical data for this, such as IP address, browser, device type, screen size, language, referrer and the page requested. According to the provider, Umami's servers are located in the USA and the EU. You can withdraw your consent at any time with effect for the future via the "Cookie settings" link in the page footer. Links from the website to the app stores carry a campaign identifier so that we can tell from the Apple and Google store reports which page the app was found through. We receive those reports exclusively in aggregated, non-personal form.

14. Recipients and Service Providers

We only pass on data where this is necessary to operate the service:

• Our hosting provider, for running the servers and databases within the European Union
• Our email service provider, for sending and receiving support messages
• Apple and Google, in the course of processing in-app purchases, see section 7
• Umami Software, Inc. (USA), as the provider of web analytics, only with your consent, see section 13. Transfers to the USA are safeguarded by the European Commission's standard contractual clauses

We have data processing agreements under Art. 28 GDPR in place with every provider that processes personal data on our behalf. Data is never passed on for advertising purposes and is never sold.

15. Legal Bases

Enforcing the free allowance, validating promo codes, handling support reports, evaluating anonymous usage figures and operating the website and servers securely are based on our legitimate interest under Art. 6 (1) (f) GDPR. Camera access is based on your consent under Art. 6 (1) (a) GDPR, which you can withdraw at any time in your device settings with effect for the future. Web analytics with Umami on the website takes place only with your consent under Art. 6 (1) (a) GDPR and Section 25 (1) TDDDG. Apple and Google are responsible for processing your subscription.

16. Retention Period

Your training data resides exclusively on your device. You remove it by deleting individual sessions in the app or by uninstalling the app. We delete support messages once the matter is closed and no statutory retention periods apply. The hash used for the free throw allowance is stored for as long as the allowance applies. Website server log files are deleted after a short period. Anonymous counters and redeemed promo codes contain no personal reference and are unaffected.

17. Your Rights

Where we process data relating to you, you have the following rights:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object (Art. 21 GDPR)

Because we keep no user accounts, we normally hold no data that can be attributed to you. Support reports you sent us yourself are the exception. You can delete your training data at any time in the app or by uninstalling it. Independently of this, you have the right to lodge a complaint with a data protection supervisory authority, usually the authority where you habitually reside.

18. Data Security

Transmission between the apps, the website and our servers is TLS-encrypted throughout. Beyond that, we use technical and organisational measures to protect the data we process against manipulation, loss, destruction and unauthorised access. Because we keep no user accounts and store no training data on our servers, the amount of data that could be affected at all is small to begin with.

19. Contact

If you have questions about data protection or want to exercise your rights, you can contact us at any time: kontakt@mydart.app