Privacy Policy aiLigner App

Privacy notice for the Third of Life app

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) for the processing of personal data in connection with this app is:

Third of Life GmbH
Otto-Heilmann-Straße 17
82031 Grünwald
Germany

E-mail: info@third-of-life.com
Website: https://www.third-of-life.com

In addition, the privacy notices published on our website apply: https://www.third-of-life.com/pages/datenschutz.

2. Data processed in the app

In our app, in addition to the data described in our website privacy policy, we process the following personal data, insofar as you provide it in the app or save it in your profile:

Name
Body height
Body weight
Gender
E-mail
Name

This information is used to provide you with personalized functions and recommendations within the app (e.g., evaluations, calculations, product recommendations). No further medical diagnoses or special categories of personal data within the meaning of Art. 9 GDPR are processed.

In addition, further data may be processed for technical reasons when using the app, e.g., device information (operating system, app version, language settings), log data, as well as anonymous/non-directly attributable usage data (see especially sections on Sentry, Firebase Analytics, and Google Analytics).

3. Purposes and legal grounds of the processing

We process your data for the following purposes:

Creation and management of your user account in the app
Provision of app functions (e.g., profile settings, personalized calculations and recommendations)
Ensuring the stability, security, and error-free operation of the app
Evaluation of the use of our app to improve and further develop it based on anonymized or aggregated evaluations

The processing is based on the following legal grounds:

Art. 6 para. 1 lit. b GDPR (contract fulfillment), insofar as the processing is necessary to provide the app and its core functions.
Art. 6 para. 1 lit. f GDPR (legitimate interest), insofar as it concerns ensuring the technical stability and security of our app (in particular crash and error analysis with Sentry).
Art. 6 para. 1 lit. a GDPR (consent), insofar as you provide voluntary information or agree to the use of analysis tools (Firebase Analytics, Google Analytics) that are not strictly necessary for the pure use of the app. You can revoke your consent at any time with effect for the future in the app settings or by contacting us.

Processing for other purposes only takes place if this is legally required or you have expressly consented to such processing.

4. Use of Sentry (crash logging)

We use the service "Sentry" to monitor the stability and for error analysis of our app. Provider is Sentry, Inc., 45 Fremont Street, 8th Floor, San Francisco, CA 94105, USA (or the respective responsible European branch, if used).

Purpose of processing: detection and analysis of errors, crashes, and performance issues to ensure the functionality and security of the app.
Processed data: technical information at the time of the error (e.g., device type, operating system, app version, time of error, stack traces), possibly truncated IP address as well as application-related contexts, as far as technically necessary. Personal content (e.g., names, text entries) is not transmitted to Sentry if possible or is pseudonymized or removed before transmission.
Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest in a stable and secure app).
Order processing / third-country transfer: There is a data processing agreement with Sentry including standard contractual clauses according to Art. 46 GDPR to ensure an adequate level of data protection when processing in third countries (especially the USA).

You can object to processing within the scope of Sentry at any time for reasons arising from your particular situation. However, in this case, the app may no longer be reliably analyzed and improved.

5. Use of Firebase Analytics

We use "Firebase Analytics," an analytics service from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, to evaluate the usage of our app.

Purpose of processing: analysis of usage behavior (e.g., use of certain screens/functions, session duration) to optimize our app content-wise and technically.
Processed data: including device information (operating system, device type), app instance IDs, Firebase installation IDs, possibly device advertising IDs, event data about app usage.
We do not use Firebase Analytics for personalized advertising purposes, but only in aggregated or pseudonymous form for statistical evaluations.
Legal basis: Art. 6 para. 1 lit. a GDPR (consent), provided you have agreed to the use of Firebase Analytics in the app. Without your consent, Firebase Analytics will not be activated.
Data processing / Third-country transfer: Google acts as a processor based on the Google Cloud "Data Processing and Security Terms" with standard contractual clauses and further guarantees according to Art. 46 GDPR.

You can revoke your consent at any time with effect for the future in the app settings. Via corresponding Firebase functions (e.g. setAnalyticsCollectionEnabled(false)) data collection and transmission can be disabled.

6. Use of Google Analytics (App/Web Tracking)

If we use Google Analytics in addition to analyzing the use of our website or possibly the app, the following applies:

Google Analytics is a web and app analytics service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Purpose of processing: Evaluation of the use of our services, improvement of content, functions, and usability based on aggregated statistics.
Processed data: including IP address (usually shortened/anonymized), device and browser information, visited pages/content, interactions, approximate location data, as well as cookies or similar identifiers, if relevant for the respective platform.
We have – where available – activated IP anonymization so that your IP address is usually shortened within the EU/EEA before being passed on to Google.
Legal basis: Art. 6 para. 1 lit. a GDPR (consent). Google Analytics is only used if you agree; you can revoke this consent at any time with effect for the future.
Data processing / Third-country transfer: There is a data processing agreement with Google according to Art. 28 GDPR. Google may also process data on servers in third countries (especially the USA); protection is ensured through standard contractual clauses and additional security measures according to Art. 46 GDPR.

Information on how to disable cookies or tracking in your browser or app can be found in the settings of your device, your browser, or within the app, as well as in the help pages of Google Analytics.

7. Storage, Processors, and Transfer

Your personal data collected in the app is generally processed only by us and carefully selected service providers who support us in operating, maintaining, and further developing the app (e.g., hosting providers, technical service providers, Sentry, Google/Firebase).
These service providers process data exclusively on our behalf and according to our instructions based on data processing agreements pursuant to Art. 28 GDPR.
Your personal data will not be shared with other third parties or used for advertising purposes without your explicit consent.
Transfer to third countries outside the EU/EEA only takes place if there is an adequacy decision by the EU Commission or appropriate safeguards (e.g., EU standard contractual clauses).

8. Storage Duration and Deletion

We store your personal data as long as you have an active user account in the app.
If you delete your user account or request the deletion of your data, your personal data will be deleted or anonymized, subject to statutory retention obligations.
Data processed in analytics tools is usually automatically deleted or aggregated after the standard deletion periods provided by the providers; details can be found in the respective provider documentation (Sentry, Firebase, Google Analytics).
Statutory retention periods (e.g., from commercial and tax law) remain unaffected; after these periods expire, the relevant data will be deleted or anonymized.

9. App Stores and Permissions

Our app is provided through third-party platforms (e.g., Apple App Store, Google Play Store). When downloading and using these platforms, the respective providers process their own data (e.g., store account, payment data, usage data of the store platform) under their own responsibility. Please refer to the privacy notices of the respective providers.

If the app requests certain permissions on your device (e.g., internet access, notifications), this is solely to provide the respective function. You can adjust or revoke these permissions at any time in your device settings.

10. Security

We implement appropriate technical and organizational measures to protect your personal data against loss, misuse, unauthorized access, or unauthorized disclosure. These include, in particular, encrypted connections (e.g., TLS/HTTPS) and access restrictions to our systems.

11. Your Rights

You have the following rights regarding the processing of your personal data:

Right to information (Art. 15 GDPR)
Right to rectification (Art. 16 GDPR)
Right to erasure (Art. 17 GDPR)
Right to restriction of processing (Art. 18 GDPR)
Right to data portability (Art. 20 GDPR)
Right to object (Art. 21 GDPR) to processing based on Art. 6 para. 1 lit. e or f GDPR
Right to withdraw consent given at any time with effect for the future (Art. 7 para. 3 GDPR)

To exercise your rights, you can contact us at any time using the contact details provided above.

In addition, you have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data violates the GDPR.