Privacy Policy
Buddy Tabata ("we", "us", or "our") respects your personal privacy and is committed to protecting your training data and biometric information. This Privacy Policy details our policies regarding the collection, storage, synchronization, and deletion of user information when you operate our Android mobile application (the "App") and associated synchronization infrastructure.
This policy is compliant with the European Union General Data Protection Regulation (GDPR, Regulation (EU) 2016/679), the California Consumer Privacy Act (CCPA / CPRA), and the Google Play Developer Program Policies (including Health Connect and Foreground Services policies).
1. Data Controller & Inquiries
- Data Controller: Dappso / Buddy Tabata Development Team
- Contact & Privacy Inquiries: contact.dappso@gmail.com
- Data Protection Officer (DPO): contact.dappso@gmail.com
2. Information We Process
A. Offline-First Local Storage Architecture
B. Optional Google Cloud Sync & Account Data
If you choose to sign in with your Google account to back up and synchronize routines across your devices:
- Account Identity: Google Account Unique Identifier (UID), email address, and profile display name managed through Firebase Authentication.
- Routine & Session Synchronization: Custom workout templates, intervals, rounds, and completed training history backed up to private Google Cloud Firestore security rules restricted exclusively to your authenticated user account.
C. Special Category Health Data (Android Health Connect - GDPR Art. 9)
Buddy Tabata optionally integrates with Android Health Connect to synchronize high-intensity training sessions with your central Android fitness ecosystem. Health Connect access requires your explicit, revocable granular permission:
- Workout Session Record (Write): Duration, start/finish timestamps, exercise session type (High-Intensity Interval Training / Tabata).
- Caloric Expenditure & Heart Rate (Write/Read): If enabled, calculates and records estimated active energy burned and syncs heart rate telemetry during workouts.
- Zero Third-Party Sharing: Health Connect data is never shared with third parties, data brokers, or advertisers, and is never used for marketing purposes.
D. Foreground Timer Service & Notification Usage
Buddy Tabata operates an Android Foreground Service during active workout execution with a persistent notification:
- Purpose: Ensures precision countdown timing, auditory countdown chimes, and tactile haptic cues when the screen is locked or the app is backgrounded.
- Notification Scope: Displays current interval status (Work/Break/Set Break), remaining seconds, and basic pause/resume playback controls.
- Zero Marketing Push: We never transmit marketing, promotional, or push notifications outside of an active workout session.
3. Zero Third-Party Advertising & Tracking
We do not include third-party advertising SDKs, behavioural trackers, or data monetization brokers. Your workout timings and training routines belong exclusively to you.
4. Data Retention & Erasure (Right to be Forgotten)
- Local Data: You may clear local training data at any time via Android App Settings or within the app's Data & Backup screen.
- Cloud Data Deletion: You can permanently delete your cloud account and all associated Firestore records with a single tap in the "Data & Backup" settings ("Delete Account & All Data"). All cloud records are permanently purged from Google Cloud servers.
- Exporting Data: You can export your complete historical workout logs to an open standard CSV spreadsheet at any time.
5. Your Rights Under GDPR & CCPA
Under European and Californian privacy regulations, you have the right to access, rectify, port, restrict processing of, or erase your personal data. You may exercise any of these rights directly through the in-app Data & Backup settings or by contacting contact.dappso@gmail.com.
6. Changes to this Policy
We may update this Privacy Policy periodically to reflect app updates and legal requirements. Any modifications will be posted directly to this portal with an updated effective date.