Your data.
How we handle it.

This policy explains what personal data the Arkeon app and the arkeonsport.com website process, why, who sees it, how long we keep it and how you can decide. We wrote it in plain words: when a technical term is needed, we explain it the first time it appears. The text is the same in the app and on the website. If something isn't clear, write to privacy@arkeonsport.com.

1. Who is the data controller

The data controller is whoever decides why and how your personal data is used, and is legally responsible for it. For the Arkeon app and the arkeonsport.com website the joint controllers are:

Matteo Magalotti and Alessio Chialli, founders of Arkeon

Address: via Ospedalicchio 40, San Giustino (PG), Italy

They decide together why and how your data is used (joint controllers, Art. 26 GDPR), and you can exercise your rights against either of them by writing to privacy@arkeonsport.com. The company that will run Arkeon hasn't been set up yet: when it is, we'll say so here and let you know. In this policy “Arkeon”, “we” and “us” mean the controllers; Arkeon is also the name of the app.

How to contact us

For anything about your data write to privacy@arkeonsport.com, or open Settings › Account › Other requests about your data. For other matters use the right address, so your request goes straight to whoever handles it:

• support and questions about the app: support@arkeonsport.com
• problems with other users (posts, comments, Moments, chats, profiles): abuse@arkeonsport.com
• errors in a feature (foods, sectors, malfunctions): report@arkeonsport.com

Data Protection Officer (DPO)

A DPO (Data Protection Officer) is a person who checks, on behalf of an organization, that personal data is processed according to the law. Arkeon hasn't appointed a DPO at the moment: for any privacy question write to privacy@arkeonsport.com. If we appoint one, we'll add their contact details here.

Independent controllers and processors

For some data another party decides, and is responsible for it on its own, with its own privacy policy: this is called an independent controller. These are:

• the professional you collaborate with, for the data you open to them (see section 9, “Professionals and collaborations”)
• Apple and Google, when they sell subscriptions in the App Store and Google Play, and Apple when it delivers notifications to iPhones
• Polar and Wahoo, Apple Health and Google Health Connect, for the data they store themselves
• the map, place, weather and food services and the phone's location service, for their own logs (see section 13, “Who receives the data”)

The providers that work for us, for example whoever hosts the database, are instead data processors: they use the data only on our behalf, following our instructions and a contract with us. The list is in section 13, “Who receives the data”.

2. Where this policy applies and to whom

Personal data is any information that makes it possible to identify a person, even when combined with other information: a name, an email, a photo, a GPS track, a recorded heartbeat. Processing data means doing something with it: collecting it, saving it, using it, showing it, sending it to someone, deleting it.

This policy follows articles 13 and 14 of the European data protection regulation (Regulation (EU) 2016/679, known as the GDPR) and the Italian Personal Data Protection Code, the Italian law on personal data (Legislative Decree 196/2003, as amended by Legislative Decree 101/2018, here the “Italian Privacy Code”). Article 13 covers the data you give us, article 14 the data we receive from others: from an app you connect, from a professional, from another user.

Where and for whom it applies

• In the Arkeon app for iPhone and Android and on the arkeonsport.com website. The text is the same in the app (Settings › Privacy policy) and on the website.
• For people who use the app as athletes and for people who use it as professionals (coaches, nutritionists, physiotherapists and the other roles in the app).
• For people who visit the website or write to us, even without an account.
• For people who appear in other users' content without having uploaded it: someone added to a post, named in a chat, shown in a photo or noted down by a professional among their contacts. If you don't have an account and think some content concerns you, write to abuse@arkeonsport.com; for requests about your data, to privacy@arkeonsport.com.

It describes the latest version of the app: some protections work on the phone and apply only with the app up to date. Arkeon is for people aged at least 16 (see section 20, “Minimum age and minors”).

What it doesn't cover

The data that stays with the services of other companies you use with Arkeon (App Store, Google Play, Apple Health, Health Connect, Polar, Wahoo), the use the professional you collaborate with makes of your data, and the external websites you open from Arkeon, such as the link of a discount code: their own privacy policies apply to these.

Related documents

• Terms of Service: the rules for using Arkeon.
• Professional's obligations: for professionals, what receiving athletes' data involves. They see it when they ask an athlete to collaborate.

3. What data we process and where it comes from

Here you'll find the types of personal data we process and where they come from. Why we use them is in section 4, “Why we use your data”, who receives them in section 13, “Who receives the data”, how long we keep them in section 15, “How long we keep data”.

What is required

To create an account you need a name, username, email, password, date of birth and biological sex, plus three confirmations: you accept the Terms of Service, you state that you've read this policy and you give consent to health data (see section 5, “Health data”). Without these, you can't use Arkeon.

Everything else is optional: if you don't enter some data or don't use a feature, we don't have that data. Some features, though, become less accurate or don't work: without weight and height some calculations, such as calories, are less accurate; without the location permission you can't record a GPS track; without your yes to data, Arky gives only general advice. Every phone permission is optional too (see section 18, “Your phone: permissions and stored data”).

Where it comes from

• From you: what you write, choose, record and upload in the app.
• From your phone and sensors, when you use a feature that needs them: GPS, barometer, camera, microphone, Bluetooth sensors.
• From the apps and services you connect: Apple Health, Health Connect, Polar, Wahoo and the workout files you import.
• From other users: when they add you to a post, message you, comment, report you or block you. The professional you collaborate with can record measurements, notes, programs and payments about you.
• From providers: subscription status (from Apple and Google, through RevenueCat), food data, weather, place names, terrain elevation.
• From our team (decisions on reports, sanctions, checks on qualifications) and from the app itself (calculations on your data, technical logs).

Account and profile

• Name, username (your @), email, date of birth. We store your password only as a “hash”, meaning it's turned into a code from which the password can't be worked out.
• The consents and confirmations you give or withdraw, with type, text version, date and time.
• Sign-in sessions: IP address (the number that identifies your internet connection), device and browser type, last access.
• Your plan (FREE, PLUS or PRO) with its expiry date and any activation code.
• Profile photo, cover, bio, tagline (the short description under your name), city chosen from a list of municipalities, discount codes, personal records.
• Athlete data: biological sex, height, weight, units of measurement and training thresholds, meaning maximum, resting and threshold heart rate, FTP (the power you can hold for about an hour), threshold pace and CSS (the swimming threshold).
• Your privacy choices, followers, people you follow and sign-up date.

Workouts, body and wellbeing

Many of these are health data, which has special protection (see section 5, “Health data”).

• Workouts: sport, date and time, duration, distance, elevation gain, pace or speed, heart rate, power, cadence, calories, load; exercises, sets, weights, reps, rate of perceived exertion (RPE) and reps in reserve (RIR); your answers to “How did it go?” (physical effort, mental fatigue, soreness); for swimming, lengths, strokes and stroke count; tests, records and races.
• The session in progress, which we save while you train so you can resume it after a problem or from another phone, with the readiness score, meaning how ready you felt to train (tiredness, soreness, motivation), at the moment you started it. Your daily readiness score is calculated by the phone and we don't keep it.
• Body: weight, composition (fat and lean mass), circumferences, progress photos.
• Resting heart rate, HRV (the variation in time between one heartbeat and the next), sleep with stages and a score for the night, steps, VO₂max (an estimate of aerobic capacity), stress, active calories.
• Wellbeing check-ins (sleep, energy, soreness, mood, motivation, stress, hunger), mindfulness, recovery sessions, blood tests, injuries and measurements such as blood pressure, oxygen saturation, temperature or blood sugar, recorded by you or by your professional.
• Nutrition: food diary with quantities, calories and nutrients, water, salt, supplements, goals you set yourself, foods and recipes you add.
• Planner, programs, goals, monthly challenges.

Even data that doesn't look medical can reveal something sensitive: choosing “Gluten-free” in AI Chef, or a collaboration with a doctor or a psychologist.

Location, apps and sensors

• GPS tracks, routes, privacy zones, location sent in chat, places searched and profile city: see section 6, “Location, GPS tracks and maps”.
• Data read from Apple Health and Health Connect, workouts and measurements from Polar and Wahoo, values from Bluetooth sensors, contents of FIT, GPX and TCX files and of Garmin .zip archives: the exact list is in section 10, “Devices, sensors and connected apps”.

Community, messages and support

• Posts with text, photos, activity data and map, weather, gear, people you trained with and visibility; comments, Daps (Arkeon's “like”), saved posts, shares.
• Moments, meaning photos and videos visible for 24 hours, with who viewed them, Daps and replies; follows and requests, blocks, groups; sectors, meaning sections of a route with a leaderboard, and your times on them; foods you share.
• “Invite a friend”: your invitation code, who invited you and who you invited, the dates (when you use the code, the deadlines, when you complete the steps), the steps completed and the gifted days of PLUS, current or set aside (see section 4, “Why we use your data”).
• Chats: text, photos, videos, documents, voice messages, polls, shared posts, location, answers to a professional's first contact form, with date, edits, reads and mutes. If you turn on your online status, we don't save it.
• In-app and push notifications. For push notifications we save the code that identifies the phone for notifications (token) and the system (iOS or Android), not the phone's name.
• Video calls with a professional: audio, video and chat go through the video call provider. We don't record them.
• Support requests and collaboration proposals: subject, type, priority, text, email, attachment, account, app and system version (from the browser also the browser and page); for proposals, name or company, website and budget. To prevent abuse we record account, IP, type and time of each submission. The emails you write to us, with attachments.
• Reports, team decisions and sanctions: see section 8, “Reports, blocks and moderation”.

Arky, professionals and subscriptions

• Arky: questions, conversation, result cards, memory notes, choices in the forms, tone, consents and how many requests you use, without the content. With your yes, also the data you have in the app (see section 11, “Arky, Arkeon's artificial intelligence”).
• Professionals: the shared categories, the history of the collaboration, what you exchange and what the professional records about you, reviews; for professionals, their profile, qualification checks, PDF letterhead, noted contacts, templates, automations, time in the Coaching area (see section 9, “Professionals and collaborations”).
• Subscriptions: you buy PLUS and PRO in the App Store or Google Play, which handle the payment: we don't see your card. RevenueCat, the service that manages subscriptions, tells us the product, period (trial included), purchase and expiry dates, store country and transaction codes; we keep a log of payment events. Arkeon doesn't collect payments between you and a professional.

Technical data

• Error reports (Sentry): they're sent only when the app hits an error or closes by itself. They contain the type and details of the error, the app's last technical actions (screens, requests without their parameters, technical messages), phone model and system, language, time zone, memory and free space, battery, screen, connection type, app version and your account ID, a code without name or email (before signing in, a random installation code). No usage sessions, performance measurements, screenshots or screen recordings.
• Server logs: account, feature used, time and outcome of requests, without the content. Server errors also go to Sentry, with the account ID. The logs of the platform that hosts the server also keep IP, device and browser, the full address of the request (which can contain IDs or search words) and the approximate area derived from the IP.
• On the phone and on the website: see section 18, “Your phone: permissions and stored data” and section 21, “The arkeonsport.com website”.

Other people's data

If you enter other people's data (people you add to a post, people you mention in chat, people in your photos, contacts you note down as a professional), do it only if you're allowed to, for example if the person agrees.

What we don't collect

• Your menstrual cycle and related data (contraception, fertility, symptoms).
• Your phone's contacts and your calendar events.
• The phone's advertising ID: we don't use it and on Android the app blocks it. We don't track you across other companies' apps and websites, which is why on iPhone we don't ask for tracking permission.
• Your card or bank account details.
• Your location in the background when you're not recording an activity.
• On Android, physical activity recognition and the phone's audio files.

4. Why we use your data

We use your data only for the purposes written here (the law calls them “purposes of processing”). For each one we state the legal basis, meaning the reason the law accepts for using data (art. 6 GDPR). Ours are four:

• Contract (art. 6.1.b): the data is needed to give you the service you ask for when you accept the Terms.
• Consent (art. 6.1.a): we use the data only if you say yes, and you can withdraw it whenever you want. Health data needs explicit consent (art. 9.2.a), meaning a yes you give specifically for it.
• Legitimate interest (art. 6.1.f): a concrete interest of ours, balanced against your rights. You can object (see section 16, “Your rights”).
• Legal obligation (art. 6.1.c): a law requires us to do it.

Account

Creating your account, signing you in, keeping you signed in, recovering your password, sending you account emails and replies to your requests. With your date of birth we check that you're at least 16 and keep some features off until you turn 18. What you save stays in your account, so you find it on every phone.

Basis: contract.

Workouts, LogBook and calculations

Recording and storing workouts (including from Health, Health Connect, Polar, Wahoo, files and sensors), LogBook, planner, programs, goals, records, races and food diary; showing you history and charts; calculating load, calories, zones, records and ARK FUEL (the daily score from 0 to 100, see section 12, “Automated decisions and profiling”); saving the session in progress.

Basis: contract and, for health data, your explicit consent (see section 5, “Health data”).

Location and maps

• Recording the track, saving routes, privacy zones and sectors, sending your location in chat: contract. Reading the phone's GPS is strictly necessary for these features (art. 122 of the Italian Privacy Code) and happens only with the phone's permission.
• Opening the maps where you are: the “Location on maps” consent.
• Weather, elevation, estimated roads and climb names: legitimate interest in giving you a complete and correct activity summary using the minimum data. You object by writing to privacy@arkeonsport.com.

Profile, posts and community

• Showing other members your profile and what you publish with the visibility you choose; managing followers, private account, people added to posts, Saved, groups, chats, notifications and search: contract.
• Showing others a health data item that you choose to make visible (heart rate or calories in a post, the mood of a mindfulness session, a review of a doctor or a psychologist): your explicit consent for that content, which you give by making that choice (art. 9.2.a). Heart rate and calories start hidden; the choice made at the end of an activity also applies to later activities, until you change it. You withdraw it by hiding the data, changing the post's visibility or deleting it.
• “Let people find you by sex”, “by age” and “by weight” and the city for searching by distance: consent, which you give by turning on the switch or choosing the city; for weight, explicit consent (art. 9.2.a).

Sector leaderboards

Showing other members your times on sectors (see section 7, “What other users see”): legitimate interest in offering complete leaderboards, a central part of the Arkeon community. You object by turning off “Appear in leaderboards”. Heart rate on leaderboards: explicit consent, which you give by turning on “Share heart rate”.

Discover feed

Ordering other people's posts according to your interests, with a calculation that stays on the phone (see section 12, “Automated decisions and profiling”): legitimate interest in showing you relevant posts.

Professionals

• Showing a professional the categories you open to them: your explicit consent, item by item (arts. 6.1.a and 9.2.a).
• Professional profile, professional search and professional tools: contract with the professional.
• Storing and showing you what the professional records about you (programs, measurements, check-ins, appointments) and organizing video calls: contract with you and the legitimate interest of you and the professional in working together in the app; for health data, your explicit consent to health data.
• Private notes and payments the professional notes down about you: they use them as an independent controller, and we store them in the app on their behalf.
• The time of the messages exchanged with the professional, without the text, for their statistics: the professional's legitimate interest in knowing their response times.
• Qualification checks: contract and legitimate interest in protecting athletes from people who don't have the qualifications they claim.
• Log of collaboration requests and acceptances of the Professional Terms: legitimate interest in preventing abuse and harassment and in being able to prove acceptance.

Devices and connected apps

Connecting services, reading sensors and importing files: contract and, for health data, explicit consent. The code that recognizes an already imported file: legitimate interest in avoiding duplicates.

Arky

• Running Arky, included in the PLUS and PRO plans: contract.
• Sending Anthropic what you ask or choose: your consent, which you give with “I agree, continue”. If you write information about your health in your questions, or choose an AI Chef style that can reveal it, it's explicit consent (art. 9.2.a).
• Sending Anthropic the data you have in the app and your memory notes: the explicit consent “Yes, use my data”.
• Usage log and request limits: contract and legitimate interest in preventing abuse and controlling costs.

The details are in section 11, “Arky, Arkeon's artificial intelligence”.

Subscriptions

Knowing which plan you have and unlocking the features included: contract. Purchases are sold and collected by Apple and Google: Arkeon doesn't issue invoices, because the seller is the store.

Invite a friend

Creating your code; when you use a friend's code, linking you to them, checking the steps and giving you both the days of PLUS and the Arky requests; showing the person who invited you how far you've got. The rules are in the Terms of Service, section 4.

• The steps are worked out from data already in the app: how many activities of at least 10 minutes you've logged and on which days, whether you have a profile photo and how many people you follow. Of each activity only the duration and the day count, and we don't copy this data anywhere else.
• The person who invited you sees only your name, your @, your profile photo, how many of the 3 steps you've done and whether time has run out (see section 7, “What other users see”).
• You send the link yourself, with the app you choose: we don't know who you send it to until that person uses the code. No new recipients: the data stays in our databases, with the providers in section 13, “Who receives the data”.
• We keep it as long as the account exists (see section 15, “How long we keep data”).

Basis: contract, because you take part yourself, at your request, by sharing your code or using a friend's.

Support and requests about your data

Replying to you: contract. Handling requests about your data (copy, correction, deletion and the others): legal obligation. Anti-abuse log of submissions: legitimate interest in preventing automated submissions and abuse of the form.

Safety and moderation

• Receiving reports, deciding, giving reasons and informing the people involved: legal obligation under Regulation (EU) 2022/2065 on digital services (DSA, arts. 16 and 17), plus the legitimate interest in keeping the community safe and defending ourselves in case of dispute.
• Blocking a person: contract. Log of blocks and alerts to the team: legitimate interest in recognizing people who harass several users and in protecting the community.
• Suspending or closing an account: contract, with the statement of reasons required by the DSA.
• Checking access, limiting overly frequent requests, keeping technical logs: legitimate interest in protecting the service.
• If you report an Arky reply that contains data about your health, we use it only to review the report, with the explicit consent to health data.

Error reports

Finding and fixing errors and crashes in the app (see section 3, “What data we process and where it comes from”): legitimate interest in making the app work. We read this data from the phone without asking for your consent because it's needed to run the service you use (art. 122 of the Italian Privacy Code). You can object at any time by writing to privacy@arkeonsport.com (see section 16, “Your rights”).

Proof of consent and legal protection

• Keeping the consent log, with text version, date and time (for choices recorded before October 11, 2026, the phone's time): legal obligation, because we must be able to prove that consent was given (art. 7.1 GDPR).
• Enforcing or defending a right of ours before a court or an authority and responding to lawful requests from authorities: legal obligation or legitimate interest and, for health data, art. 9.2.f GDPR.

The website

Showing and protecting the website: legitimate interest in running the website and defending it from attacks. Sign-up, sign-in and replies to messages: contract. See section 21, “The arkeonsport.com website”.

What we don't do

• No advertising and no selling of your data.
• No promotional emails or notifications. On the FREE plan you see invitations in the app to switch to PLUS or PRO, chosen only based on your plan.
• We don't use your data to train artificial intelligence systems.

If one day we want to use your data for a new purpose, we'll first update this policy and, when the law requires it, ask for your consent.

5. Health data

Much of the data in a sports app says something about your health. The law calls it “data concerning health” and protects it more than other data (art. 9 GDPR and, in Italy, art. 2-septies of the Italian Privacy Code, which among other things forbids making it public).

What it includes

Weight, body composition and measurements, progress photos; heart rate, HRV, VO₂max and the other heart and breathing values, such as blood pressure and oxygen saturation; sleep, steps and calories; wellbeing check-ins; blood tests, injuries, hydration and supplements; food diary and nutrition goals; workouts with heart rate and power; data from Apple Health, Health Connect, Polar, Wahoo and Bluetooth sensors; the calculations made on this data, such as load, calories, zones and ARK FUEL.

Entering it is optional: you can use Arkeon without filling in the LogBook or connecting devices. Consent, on the other hand, is always required.

Consent is required to use Arkeon

We use this data only with your explicit consent (art. 9.2.a GDPR), a choice separate from accepting the Terms. Arkeon is built around this data: without this consent you can't use it. This applies to all accounts, professionals included.

You give it by ticking a box, never pre-ticked: when you sign up in the app, or on the “Before you start” screen if you already had an account or are signing in for the first time on a phone other than the one you signed up with. Next to the box you'll find what data it covers, why it's needed and who sees it. We record it with the text version, date and time. If you're 16 or 17 you give it yourself: we don't ask for your parents' consent.

How to withdraw it and what happens

You can withdraw it whenever you want in Settings › Manage consents › Health data. Before you confirm, the app warns you. After withdrawing:

• you can't use Arkeon until you give it again: only the screen to give it again, delete your account or sign out remains
• you can no longer download a copy of your data from the app: download it first from Settings › Account › Download a copy, or request it at privacy@arkeonsport.com
• our server stops saving new workouts from Polar and Wahoo, and the app stops reading Health and Health Connect
• Arky no longer receives your data
• the data already saved stays in your account until you delete it or delete your account

Withdrawal applies from that moment on: what we did before, with your consent, remains lawful.

Careful: withdrawing doesn't close what you share with professionals. Anyone collaborating with you keeps seeing the categories you opened to them, until you turn them off or end the collaboration. If you want them to stop, do it before withdrawing, or write to privacy@arkeonsport.com.

Where it comes from

From what you write and record yourself, from sensors, from the apps and files you connect (see section 10, “Devices, sensors and connected apps”), from the app's calculations and from your professional, if you open the Measurements category to them: they can assign you measurements (for example blood pressure, blood sugar or lactate) and enter their values, which stay in your account even if they remove the assignment.

What we do with it

We show you history, charts and trends in the LogBook and in posts. We calculate load, calories, zones, records, the score for the night and ARK FUEL, the daily score from 0 to 100; with the check-in we save a score from 0 to 100 based on your answers. These are fixed rules, not artificial intelligence (see section 12, “Automated decisions and profiling”). We don't use it for advertising or marketing and we don't sell it. These are numbers to help you train better, not diagnoses: Arkeon isn't a medical device and doesn't replace a doctor's advice.

Who sees it

• You.
• Other members, only what you publish: in new posts heart rate and calories start hidden, on leaderboards heart rate appears only with “Share heart rate”, and weight only as a 10 kg band with “Let people find you by weight” (see section 7, “What other users see”).
• The professionals you collaborate with, for the categories you open (see section 9, “Professionals and collaborations”).
• Anthropic, for Arky, only if you say “Yes, use my data” (see section 11, “Arky, Arkeon's artificial intelligence”). What you write yourself in a question, though, reaches Anthropic in any case.
• The people in a chat with you, if you write a health data item there. The beginning of the message also appears in the recipient's notification.
• The technical providers that work for us, starting with Supabase, which stores the data in the European Union, in Ireland.

Only you see the injuries in the LogBook and your progress photos.

How long we keep this data is in section 15, “How long we keep data”.

6. Location, GPS tracks and maps

We use your location only in the features you start. It's sensitive data: a track can show where you live, where you work and what your habits are.

When we use it

• when you record an activity with GPS: running, cycling, e-bike, walking, hiking, open water swimming, multisport
• in outdoor tests, such as a timed run: here the track isn't saved, only the results remain
• to open the Sectors, Explore routes and New route maps where you are, only with the “Location on maps” consent
• when you send your location in a chat

Professional search doesn't use the phone's location. Each time the phone's permission is needed, and “While Using the App” is enough: without it, you can't record activities with GPS or send your location in chat, but the rest of the app works.

With the screen locked

While you record, GPS keeps running even with the screen locked or another app open, until you stop recording. On Android a persistent notification shows this, on iPhone the location indicator. When you're not recording, the app doesn't use your location in the background. The “Always” permission (on Android “Allow all the time”) is optional and we ask for it only once: on iPhone it lets the recording resume if the system closes the app. On Android a notice appears first, and with “Not now” the recording carries on anyway.

On the lock screen (on iPhone from iOS 17, also in the Dynamic Island) a panel shows sport, time, distance, pace or speed and the Pause/Resume button; on Android the same things are in the notification. It doesn't show where you are and its data stays on the phone, but anyone who looks at your locked phone can see it.

Recording

The app reads the GPS about once a second. If GPS is lost, it measures the climb with the phone's barometer (on iPhone the “Motion & Fitness” permission is needed): we save the calculated climb and elevation, not the pressure. With a Bluetooth sensor, its data, such as heart rate, is added to each point.

During recording the track stays on the phone in a backup copy, updated about every 10 seconds and deleted at the end. The workout you've just finished, with the full track, then stays on the phone for up to 18 hours, so you can make a post from it. Your live location doesn't reach our server.

When you finish:

• the track is saved in your account, on our servers in the European Union, already trimmed by privacy zones. For each point we keep position, time, elevation, speed and, if you had a sensor, heart rate
• the post gets a simplified version of the route. If you've turned on privacy zones, others get it without the start and end
• a copy of the workout stays in the cloud, so you can resume it after a crash or from another phone. It contains the full track, without the privacy zone trimming: we remove it as soon as the workout is saved, and in any case after 7 days. The professional doesn't see the track in this copy; if you opened Workouts to them, they see the steps and sets of the session

Arky doesn't receive the coordinates of your tracks.

Privacy zones

In Settings › Privacy controls › Privacy zones there's the “Hide start and end” switch, off from the start. When you turn it on you choose a distance: 200, 500 or 1,000 meters. We save only that distance, no addresses or phone location.

• We don't show others the points at the start and finish of the activity that lie within that distance of where you start or finish. If the whole activity lies inside it, others don't see a map. A pass through that area in the middle of the route stays, because the track isn't split.
• It applies only to others: you see those parts in grey. Our server keeps them aside and only you can read them.
• It applies to the post map of all activities, wherever they come from, including those already saved: if you change the distance, the trimming is redone on all your posts; if you turn the switch off, the maps are whole again.
• The track saved in your account, instead, is trimmed only once, when it's saved: tracks already saved stay as they are, and your times on sectors in the trimmed parts don't count. For activities coming from Polar or Wahoo our server saves the full track: only you see it, and times on sectors, elevation, estimated roads and the sectors you create from that activity also work on it.
• It doesn't apply to the cloud copy, the backup copy and the just-finished workout that stays on the phone.

Maps

Maps come from OpenFreeMap, through the Cloudflare network: the phone downloads from there the images of the area you're looking at, also while you record or look at someone else's post, and they see the phone's IP and the area, not your name.

With the “Location on maps” consent the app reads your location once, to open the map where you are: we don't save it, and only the map frame reaches our server, to look for sectors and public routes in that area. Without consent the maps still work, but they don't start from where you are.

Routes

In New route you place from 2 to 30 points on the map. Our server sends them, with sport and preferences, to openrouteservice, which calculates the route on roads; elevation comes from Terrain Tiles. The route is saved in My routes and at first only you see it. You can follow it while recording and export it with “Download the GPX file” to the app you choose.

With the “Public” switch, on the route's page, you share it:

• registered users find it in Explore routes; with a private account only your followers, never people who are blocked
• they see name, sport, date, the whole route, distance, elevation gain, elevation profile and your name with your photo. Privacy zones don't apply to routes: if it starts from your home, that shows
• they can export it as GPX and save a copy in their routes. The copy stays theirs, without your name, even if you later make the route private or delete it

You can make it private again whenever you want, with the same switch.

With “Share outside the app” you send a link to the route, even if it's private. Whoever opens the link, even without an account, sees the name, sport, distance, elevation gain and the map of the route on the arkeonsport.com website and in the preview of messaging apps, but not your name. We store the map image on our server together with the link. The link stops working if you delete the route or your account. A link to someone else's route opens the app without showing anything about the route.

Sectors

A sector is a timed section of a route, from 100 meters to 50 km, that you create from one of your activities with “Create sector”. At first it's public: all registered users see its shape, name, elevation, length and gradient. With “Private sector” only you see it. You can edit and delete the sectors you created; others can propose a change to you anonymously, which applies by itself if you don't reply within 7 days.

The app doesn't show who created a sector. Today, though, your account's technical code, without name or email, can still be read by registered users with technical tools.

When you save a track, our server compares it with the sectors and saves your times: time, date and time of day, average heart rate and VAM (climbing speed, in meters per hour). It does this for all tracks, including those of private activities: you always see your own times. When others see them is explained in section 7, “What other users see”. The number of times and athletes shown on a sector also counts private activities, without saying whose they are.

Weather, elevation and estimated roads

• Weather: for outdoor activities with a map, the app sends the server the first point of the post's map, already trimmed, and the start time. The server rounds the point to about 1 km and asks Open-Meteo for the weather. The weather goes into the post and whoever sees the post sees it; there's no switch to turn it off.
• Elevation and elevation gain: our server downloads from Terrain Tiles the terrain tiles (about 2 km) crossed by activities, sectors and routes.
• Estimated roads: if the track has gaps (GPS lost, app closed by the phone), the server sends openrouteservice the two ends of each gap. In the post the estimated road is a gray line, which doesn't count toward the kilometers.

For routes, weather, elevation and estimated roads the external services see our server's address, not yours, and don't receive your name. Who they are is in section 13, “Who receives the data”.

Place names

To name the summit, town and road of a climb, also in other people's activities, the app first looks in the OpenStreetMap places in our database. If it doesn't find them, it sends the climb's points to Overpass and Nominatim, two services based on OpenStreetMap. Nominatim also gets the text you search for: the city of your profile or of a group, a professional's location. The request goes through our server or, if the server gets no response, from the phone. Today these services refuse our server, so in practice it's sent from the phone and they see your IP address. The server doesn't save the text you search for. For an open-water swim where you haven't chosen sea, lake, river or ocean, the app sends Overpass, from the phone, one or two points of the post's map, already clipped by your privacy zones, to tell which water you swam in.

Profile city

To search for athletes by distance we use the city chosen in your profile, rounded to about 1 km, not the phone's location, and the distance isn't shown. A professional's location, on the other hand, is shown with its address and exact position (see section 9, “Professionals and collaborations”).

Location in chat

Only when you tap “Location” in a chat does the app read the GPS once (accurate to about 100 meters) and turn the coordinates into an address with the phone's service (Apple on iPhone, Google on Android), which receives the coordinates. The message contains the address and a Google Maps link with the coordinates, and the chat members see it, including people who join later. If a member opens the link, it's their phone that sends the coordinates to Google. The notification shows only “Location”.

Who sees your tracks

• You see everything.
• Others see the post's map according to the visibility you choose (see section 7, “What other users see”). The map doesn't hide itself: to not show it, choose “Private”; privacy zones hide its start and end.
• The professional you collaborate with doesn't receive your tracks: they see the maps of your posts like any other user.
• If you share the image of a post with the map outside the app, from then on it's handled by whoever receives it.

Photos you upload lose their location, videos don't (see section 7, “What other users see”). How to delete a track and how long we keep it is in section 15, “How long we keep data”.

7. What other users see

One rule applies across the whole app: “Everyone” means all registered Arkeon users, not anyone on the internet. Without an account you can't read profiles, posts, comments, groups or leaderboards, and there are no public web pages of profiles or posts: the links arkeonsport.com/u/... and arkeonsport.com/post/... lead to the website's home page. Images are the exception (see “Photos and videos” below).

Your profile

Every registered user sees, even with a private account: name, @, profile photo and cover; bio, tagline, city and province, if you add them; number of followers, people you follow and posts; the PLUS or PRO badge and your role (for example professional); your sign-up date; the sports you practice, counted only on activities the viewer can already see; the discount codes you choose to show. Anyone who searches for your name or your @ finds you.

Sex, date of birth, weight, height and email don't appear on your profile. The exceptions depend on you: the “Let people find you” switches (below) and a collaboration with a professional (see section 9, “Professionals and collaborations”).

Private account

At first your account is public. You make it private in Settings › Privacy controls. With a private account, people who want to follow you send you a request, which you accept or decline; “Everyone” posts, Moments, the Stats tab and the lists of followers and people you follow are seen only by your followers; your times leave the sector leaderboards. Your profile header stays visible and a search by name still finds you. If you go back to public, pending requests are accepted automatically. The lists of followers and people followed of a public account are visible to every registered user: today there's no switch to hide them.

Posts

For each post you choose the visibility:

• Everyone (“Public” on the card): all registered users; with a private account, only your followers
• Followers (“Followers only” on the card): only people who follow you
• Private: only you

At the end of an activity and in New post the choice starts from “Everyone”; you can change it later too with “Edit visibility”. Workouts that come in by themselves from Health, Health Connect, Polar or Wahoo start as “Private”, unless you choose in Settings › Synced workouts to have them go out by themselves with “Everyone” or “Followers” (only those finished in the last 3 days). If you also have a professional profile, you choose which profile the post appears on.

An activity post shows the workout data (times, distance, elevation gain, pace, power, exercises, effort), weather, gear, device, what you ate or drank if you add it, the mindfulness mood and the map, trimmed by privacy zones.

Details in the post

In “Details in the post”, at the end of an activity, you choose what to hide from others: pace or speed, power, heart rate, calories, exercises with sets, weights and reps, number of exercises. Hidden data is actually removed from the post others read; you see it from a copy that's yours only.

Heart rate and calories start hidden: heart rate is health data, and calories can reveal weight, age and sex. You show them only if you turn them on. The choice at the end of an activity also applies to later activities, the one in Edit post only to that post. In New post (workout from a file) they start hidden and you show them from Edit post. In workouts coming from Health, Health Connect, Polar or Wahoo, which start as “Private”, heart rate stays hidden even when you change the post's visibility: you show it from Edit post. Posts published with earlier versions of the app stay as they were. Effort score, mindfulness mood, notes and map can't be hidden.

Profile stats

The Stats tab counts, for the viewer, only the activities they can already see (including those they were added to and accepted), and uses only their date and time, sport, duration, distance, elevation gain, sets, reps and tonnage (the total kg lifted in the session): never titles, places, exercise names, the weights of single sets or heart rate.

If you turn on “Times, power and max lifts in Stats” (Settings › Privacy controls, off at first), viewers also see your best times over distances (also over triathlon and duathlon race distances, with leg and transition times), your best power and your squat, bench and deadlift maxes (the heaviest single lift, or the estimate from your sets), taken from the same activities; when off, only you see them.

Comments and Daps

Comments and Daps (Arkeon's “like”) are seen by whoever sees the post, with the name and photo of the person who left them: a comment of yours under an “Everyone” post is read by all registered users, even if your account is private. The post's author can hide or pin other people's comments. A hidden comment doesn't appear in the app, but stays saved until its writer deletes it, and with technical tools someone who sees the post could still read it.

People you trained with

Whoever publishes can add the people they trained with. Until the invited person accepts, their name doesn't appear: only the author and the invited person see the invitation. After that, who was there is seen by whoever sees the post, according to the author's choice in “Who sees who you trained with” (“Everyone” at first, “People you follow” or “No one”), and the post can also appear on the profile of the person who accepted. The author can remove a person from Edit post. Today there's no command to leave a post by yourself after accepting: ask the author or write to privacy@arkeonsport.com.

Moments

Moments are photos or short videos (up to 15 seconds) that registered users see for 24 hours; with a private account, only your followers. People you've blocked and people you choose in Moments Settings › “Hide moment from” don't see them. Afterwards they stay in your archive, visible only to you. You see who viewed them, the Daps and the replies; in the same way, when you view someone else's Moment, the author sees that you viewed it. Replies arrive in chat. In Moments Settings you choose who can reply to you and whether your Moments can be sent in chat (“Sharing in messages”): our server enforces this, but it can't stop someone from copying the file's link into a message.

Groups

A group's name, description, images, location, rules and founder are seen by all registered users, even for private or invite-only groups. The member list of a public group is seen by every registered user, that of a private group only by its members.

• Posts written on the board of a public group start as “Everyone” and are seen by every registered user, including non-members.
• A post of yours shared in a group reaches members according to its visibility: a “Private” post doesn't go through, a “Followers” post only reaches members who follow you.
• When you publish an activity, the app suggests your groups for the same sport already selected: you can remove them.
• On your profile your groups are shown according to “Who can see your groups”, in Edit profile (“Your followers” at first, or “Everyone” or “Nobody”).

Chats

Messages are seen by all current members of the chat, including those written before they joined, and by no other user. In a group, only its creator or an admin can add people, and whoever is added joins without having to accept. In “Who can message you” you choose who can write to you or add you to a group (“Everyone” at first, “People you follow” or “No one”); the professional you collaborate with can always write to you.

• Other members see when you joined the chat and whether you muted it.
• Read receipts, on from the start: others see when you've read. If you turn them off, they see at most your last read from before and you don't see when they read; others can see whether you have them on.
• Online status, off from the start: if you turn on “Show when you're online”, it's seen only by people who have a chat with you, never by blocked people, while you're using messages.
• If you leave a chat, the messages you wrote stay for the others, with your name and photo. A link to a photo, video or voice message that a member has already opened works until it expires (1 hour for voice messages, 7 days for other files), even if they leave the chat in the meantime.

Sector leaderboards

Other registered users see one of your times on a sector only if:

• the activity has a post of yours set to “Everyone”, not written inside a group
• your account isn't private
• “Appear in leaderboards” is on and you haven't excluded that activity with “Hide this activity from leaderboards”
• you haven't blocked each other

The leaderboard shows name, photo, date and time, time, pace or speed, VAM, how many times you've done the sector and the post; “Most regular” counts the times in the last 90 days. “Appear in leaderboards” is on from the start, except for people we know are 16 or 17, and you turn it off whenever you want in Settings › Privacy controls: your times stay yours only. Heart rate is shown only if you turn on “Share heart rate”, off from the start.

Letting people find you

In Explore, registered users search for athletes by name, sport, sex, age and distance; leaderboards can also be filtered by sex, age and weight.

• Sex, age and weight: you appear in these filters only if you turn on “Let people find you by sex”, “Let people find you by age” or “Let people find you by weight” in Settings › Privacy controls. They're off from the start and can be turned on only from age 18, with your date of birth in your profile. Only the 10-year band (for example 30-39) and the 10 kg band of your profile weight (for example 70-80 kg) count. The app doesn't show the sex of the people found, but with “Let people find you by sex” on, your sex reaches the phone of whoever filters, and it could be read with technical tools.
• Distance: it counts only if you choose your city in Edit profile (see section 6, “Location, GPS tracks and maps”).
• Sport: it's inferred only from the posts the searcher can already see.
• People under 18, or without a date of birth, don't appear in the filters by sex, age, weight or distance.

Photos and videos

Post photos, profile photos, covers, Moments, gear photos, images of groups and group chats and professional profile images are kept in public storage spaces: anyone with a file's link can open it even without an account and outside the app. The links are hard to guess. Those of your files contain your account's technical code, those of group and chat images the group's or chat's code; the list of other people's files can't be viewed. Other files are private (see section 19, “How we protect data”).

• Before uploading a photo (JPEG, PNG, HEIC/HEIF and WebP), anywhere in the app, the app removes the metadata from the file, meaning the data hidden inside the photo: GPS location, phone model, date and time the photo was taken and the like. Only the orientation stays.
• Videos, GIFs and PDFs are uploaded as they are: if the phone saved the location inside a video, it stays in the file. Only photos are published in posts.
• When you delete a post, remove a photo in Edit post or delete a Moment, the file is deleted, unless it's still needed: in another post of yours, as the photo of your bike or shoes, or as evidence for an open report, in which case it stays until the account is deleted. Until then, photos deleted with old versions of the app and those chosen but not published also stay. A Moment's file can be opened with its link even after the 24 hours, until you delete it.

Other things others see

• Foods you share with the community are seen by registered users without your name; today, though, your account's technical code can still be read with technical tools.
• The link to your profile or to a post, and your profile QR code, take people who don't have Arkeon to the website's home page. “Send in chat” sends a post's title and link: the recipient sees it only if the visibility allows it.
• “Invite a friend”: the person who invited you sees on their invitations page your name, your @, your profile photo and how many of the 3 steps you've done, never your activities; you see the name, @ and photo of the person who invited you. Nobody else sees who invited whom.
• With “Shareable image” the app creates on the phone an image of the activity, with the numbers, map and charts you choose, including heart rate: where it goes next is up to you, and from there we can no longer control it. In a leaderboard image other people's names don't appear.
• When you follow someone, give a Dap, comment or invite someone, the other person receives a notification with your name (see section 18, “Your phone: permissions and stored data”). It isn't sent between people who have blocked each other, and blocked people don't see your content (see section 8, “Reports, blocks and moderation”).

What stays yours only: Saved, the records in Settings › Personal Records (PR), monthly challenges, your block list, privacy zones, routes you don't make public (see section 6, “Location, GPS tracks and maps”), injuries and progress photos. If you put photos or names of other people in your content, publish them only if they agree.

8. Reports, blocks and moderation

To protect the people who use Arkeon, and as required by the EU Digital Services Act (DSA, Regulation (EU) 2022/2065), you can report content and people and block anyone you don't want to run into. The team can remove content and suspend or close accounts.

What you can report and what we save

With “Report”, in the “···” menu or on the content's screen, you report posts, comments, profiles and professional profiles, messages and chats, groups, Moments, reviews, sectors, public routes, leaderboard times, Arky replies and, if you're an athlete, the collaboration requests you receive. You can't report your own content. Shared foods are reported from the food's page. For serious or urgent cases, or if you don't have an account, write to abuse@arkeonsport.com.

When you report we save:

• who reported, what and when, the reason you choose and the details you add
• if you state that the content is illegal, your explanation, which is required, and the statement of good faith
• the author and a copy of the content, which the system saves by itself as evidence, because the content might change or disappear. For a message it's the text and the reference to the attachment; for a profile, name, @, bio, photo and cover; for an Arky reply, the text (up to 4,000 characters), which can contain data about your health; for a collaboration request, the message and the data requested

You can have only one open report at a time for the same content.

Who sees it and how we decide

It's reviewed by the team members authorized to moderate; the person you reported doesn't know it was you. While it's open, the team can also open the photo, video or voice message of the reported message. You follow your reports in Settings › Privacy controls, with status, date and outcome; for foods also with the reasons.

Decisions are made by a person on the team, not by an automated system. The possible outcomes are:

• Content removed: posts and comments become invisible to others; messages, Moments and reviews are deleted; a sector is hidden; a public route goes back to being visible only to its creator; a time leaves the leaderboard. Linked photos, videos and voice messages (of posts, Moments and messages) are deleted within a few minutes. If the content is illegal or serious, the file can stay as evidence in a restricted space that only the team sees.
• Reviewed: the team took action in another way, for example with a sanction.
• Dismissed: the team found no violation.

The person who reported receives a notification with the outcome, without the reasons. The author of removed content receives the reasons written by the team and the address to dispute them: abuse@arkeonsport.com.

A hazard on a sector (hairpin or blind bends, damaged surface, dangerous junction or traffic, roadworks, dangerous descent, other) can be reported only by someone who has done it. It doesn't go to the team and doesn't remove the leaderboard: on the sector's page everyone sees how many reports there are for each type, never who made them. You can withdraw yours whenever you want, and anyone who has done the sector can remove it for everyone with “No longer there”.

Blocks

You block a person from their profile or from the “···” menu. From then on:

• you and the blocked person no longer see each other's posts, comments, Moments, stats and leaderboard times, and you can't comment, give Daps or follow each other; follows, follow requests and social notifications between you are deleted
• you can't open a new chat or add each other to a group. In the one-to-one chats you had, old messages stay readable and new ones are rejected. In a group you're both in, their messages disappear only from your app: they keep seeing yours
• a collaboration with a professional ends, and for 30 days they can't send you a new request
• name, @ and photo stay readable with technical tools, but the app doesn't show them your profile

Only you see your block list, in Settings › Privacy controls › Blocked accounts, where you can also unblock. Each block also goes into a log (who blocks whom and when), which stays after unblocking. If an account is blocked by 3, 10 or 25 different people within 30 days, the team receives an alert with its @ and the number of blocks, not the names of the people who blocked it. Here too, a person decides.

Account suspension and closure

If an account breaks the Terms of Service, the team can:

• suspend it for 1 to 365 days: you can sign in to the app and see the reason, end date and contacts, but the app can't read or change your data until the suspension ends
• close it: access is blocked, open sessions are closed, collaborations end and the account disappears for all other users, as with a block

Every sanction has a reason and a written statement of reasons, which you receive with the address to dispute it, abuse@arkeonsport.com. If the sanction comes from a report, the person who made it receives only the outcome.

During a suspension you can delete your account from the app, but “Download a copy” doesn't work: request the copy of your data at privacy@arkeonsport.com. With a closed account, to delete it, get the copy or exercise your other rights, write to the same address.

Disclosures to authorities

We disclose data to authorities only when the law requires or allows it, for example at the request of judicial authorities. The DSA (art. 18) requires us to notify them when we have information that gives rise to a suspicion of a criminal offence threatening someone's life or safety.

We use data from reports and blocks only for moderation and to defend ourselves in case of dispute, never for advertising or for the feed. The legal bases are in section 4, “Why we use your data”, the retention times in section 15, “How long we keep data”.

9. Professionals and collaborations

In Arkeon you can be followed by a professional (for example a coach, a registered nutritionist, a doctor or a physiotherapist) and, if you're a professional, follow your athletes.

Who is responsible for the data

For the athlete data they receive, the professional is an independent controller: they decide how to use, store and protect it, and they're directly responsible for it. They receive it only within the limits of your choices. With the Professional Terms and the “Professional's obligations” page we ask them to use it only for the collaboration and not to pass it on to others. For data they've already received you can also exercise your rights directly with them. For the data the professional enters in the app for their work (private notes, payments, contacts, appointments) the controller is the professional: Arkeon keeps them on their behalf, as a processor, under the agreement required by Art. 28 GDPR that the professional accepts together with the Professional Terms.

Finding and contacting a professional

• Professional search uses the filters you choose (category, sport, language, price and others), not the phone's location, and doesn't save what you search for.
• A professional can prepare a first contact form: your answers reach them as the first message in chat, before any collaboration or consent. That's why the app warns you not to write health data there.
• Collaboration requests come only from the professional, with a message, the areas of work, the data they ask for and sometimes an expiry date. You can accept, decline, ask them to revise it, report it or block. After a decline or a block they must wait 30 days, and there are limits on the number of requests: to enforce them we keep a log of events, which users don't read.

What they see during the collaboration

When you accept you choose what to share with five items. They all start off, including the “Before” history: you turn them on yourself, one by one, and above the items you can see the ones the professional asked for. You can also accept without sharing anything.

• Workouts: sessions with sport, duration, distance, elevation gain, average and maximum heart rate, power, calories, load, perceived exertion, mental fatigue and soreness after the session, notes, steps and sets; records, races, planner workouts
• Nutrition: food diary, hydration, supplements, planner meals
• Measurements: weight, circumferences, body composition, skinfolds and other body measurements
• Check-ins and photos: answers to their questionnaires, with photos
• Wellness: recovery check-ins, mindfulness, recovery and meditation sessions in the planner

For each item you choose whether to show only the data from the collaboration (“During”) or also earlier data (“Before”). You can change your mind whenever you want from “Shared data”: an item you turn off is no longer visible to them, not even for periods already closed.

Besides the items you turn on, they see:

• name, @, photo and date of birth, which is used for your age and for automatic birthday wishes; you too can read theirs with technical tools
• your sex, if you turned on Measurements
• what you send them: messages, shared diary, habits and tasks, videos and photos for technique or posture checks, check-in answers

They don't receive your GPS tracks or your chat and memory with Arky: they see the maps of your posts like any other user. While the collaboration is ongoing, even when paused, you can message each other in chat even if you've limited who can write to you.

When the collaboration ends

It ends when you or the professional end it, when it expires, when you block them or when the team closes it. From then on they no longer receive new data. They keep, read-only, only the data dated within the collaboration period, for the items you haven't taken away from them: nothing from before, nothing from after. The acceptance sheet explains this rule before you accept.

• You can take this data away from them too whenever you want from Coaching › Past collaborations, with “Remove access to this period too”. It can't be undone.
• If you don't, access lasts until one of you deletes their account: today there's no other expiry.
• From there, today, you can't remove the shared diary, the habit and posture logs, the check videos and photos you sent them, or their private notes: they stay with them. You can ask them to delete them or write to privacy@arkeonsport.com.
• The programs they sent you stay available to you.

What the professional writes and notes down

• Training programs and, only if they're a verified nutritionist, dietitian or doctor, meal plans: you accept or decline them, and they see whether you've viewed them.
• Check-in questionnaires, comments on your sessions, habits and tasks, measurements they record about you, document expiry dates noted without a file (for example the sports medical certificate).
• Appointments, with reminders for both of you. If you turn on “Phone calendar”, the app copies them into your phone's calendar (see section 18, “Your phone: permissions and stored data”). For video calls, when they're active, our server creates a room on Daily (see section 13, “Who receives the data”): we don't record the calls, and the room closes by itself 3 hours after the end of the appointment.
• Private notes about you, which you don't see.
• Payments they note down (title, amount, due date, status, notes), which only they see, with a reminder every morning, and session packages, which you see too. Arkeon doesn't collect payments or act as an intermediary in payments between professional and athlete.
• Contacts of interested people, including people outside the app: they handle them as controller, and it's up to them to inform those people.

They can turn on automations, off at first, that send you messages or check-ins by themselves (inactivity, birthday, deadlines, missing measurements, after a workout): they run on their phone. Our server also alerts them to 14 days without workouts and to your new records, only if you turned on Workouts. In their area the app calculates for each athlete a score from 0 to 100 (consistency, check-ins, wellness, trend, records), which isn't saved and doesn't lead to automated decisions about you.

If you have an active collaboration with a professional for workouts, Arky reminds you of it and still prepares a draft: at the end you choose whether to put it in the planner in place of their data (“Overwrite planner”) or keep it only in chat. If you said yes to Arky, what Arky receives can include the program name and the planner sessions prepared by the professional.

Reviews

You can review a professional if you collaborated in Arkeon or if they authorize you. All registered users see the review, with your name and photo, and you can edit or delete it whenever you want. Reviewing a doctor, a psychologist, a physiotherapist or a nutritionist suggests you were their patient: the app reminds you of this, so don't write details about your health.

If you're a professional

• The professional area requires the PRO plan and acceptance of the Professional Terms, in the “Before coaching your athletes” sheet. We record the date and version of acceptance using our server's clock.
• Your professional profile is seen by all registered users, not by people without an account: name and photo, categories, introduction, sports and specializations, certifications with images, languages, ways of working, years of experience, price list, “verified” badge and locations with full address and exact position on the map. If you work from home or only online, enter only the city: the app reminds you of this. The address of your location goes to Nominatim to find the coordinates (see section 6, “Location, GPS tracks and maps”).
• With “Visible in search” off you leave the search results, but registered users can still read your profile. If your PRO expires, your profile doesn't accept new clients but stays visible.
• The details for your PDF letterhead (name, contacts, address, VAT number or tax code, logo) are read only by your app, for the PDFs you create and decide to share.
• Qualification checks: categories regulated by law (registered nutritionist, dietitian, doctor, physiotherapist, psychologist) appear only after a manual check by the team. You enter country, first and last name as in the professional register, professional body, province and registration number, and you can upload your card or a certificate; the team checks the public register. Only you and the team see the application and documents. Badges and verified categories are assigned only by the team, normally after the application. Checks approved more than 12 months ago go into a list that the team reviews manually.
• For your statistics we use the time of the messages exchanged with your athletes, not the text, for your response time, and the time you spend in the Coaching area, for your “Work hours”. We measure this time only for professionals.
• Your copy of the data contains what you wrote or set up yourself, not the data athletes shared with you: that's in each athlete's copy.

What happens when one of you deletes their account is in section 15, “How long we keep data”.

10. Devices, sensors and connected apps

You can bring into Arkeon data from watches, sensors and other apps. It's all optional and starts only when you turn it on, from Settings › Devices and integrations or, for sensors, during a workout. Connecting a service doesn't require an extra consent: the Terms and the consent to health data apply (see section 5, “Health data”). If you withdraw it, the app stops and our server doesn't save new workouts from Polar and Wahoo.

We use the data coming from these sources only for the Arkeon features you use: it reaches professionals, Anthropic or posts visible to others only by your choice. We don't use it for advertising or marketing and we don't sell it. Today we have no direct connections with other brands, for example Garmin: their data arrives only through Health, Health Connect or a file. If we add one, we describe here what we read before turning it on.

Apple Health and Health Connect

On iPhone Arkeon can read data from Apple's Health app; on Android, data from Health Connect, which on phones set to Italian is called “Connessione Salute”. Only after your permission, which you give item by item in the Health or Health Connect window. We read this data, and nothing else:

• weight, VO₂max, resting heart rate, HRV
• steps, sleep with stages (deep, light, REM, minutes awake), active calories
• workouts: type, times, duration, distance, GPS route with elevation, heart rate during the workout, name of the device that recorded them (for example Apple Watch)
• swimming: meters, lengths or intervals, strokes, rests and place (pool or open water); from Health also stroke count
• on Android, only if you allow it, also data from more than 30 days before the connection

We don't write anything to Health or Health Connect.

You start the first import yourself with “Import from Health” or “Import from Health Connect”, choosing “Last year”, “Last 3 years” or “Full history”. After that, only with the consent to health data active, the app rereads the last 7 days by itself when you open it or it comes back to the foreground, at most once every 5 minutes. With the app closed or in the background it reads nothing.

• We save one value per day for each measurement and the sleep stages, with a score for the night calculated by the app.
• Runs, rides, swims (including in the pool) and multisport, such as triathlon, come in as “Private” posts: you publish them only if you want, or you choose in Settings › Synced workouts that those finished in the last 3 days go out by themselves, with “Everyone” or “Followers”. Walks and other workouts without a GPS route (gym, indoor trainer, treadmill) don't come in.
• Of a workout's heart rate we keep the average and maximum; values every 5 seconds only for swims without a route, until their post is created.
• Tracks are trimmed with privacy zones, like those recorded with the app.
• The data goes from the phone directly to our servers in the European Union: we don't save it on iCloud, and Apple and Google don't receive it from us. Team members read it only if you ask us to (for example in a support request), for security or because of a legal obligation.

To stop the reading: on iPhone open Health, tap your photo at the top right, then “Apps” (on iOS 18 “Apps and Services”) › Arkeon; on Android open Health Connect › App permissions › Arkeon. What has already arrived stays in your account: you delete it item by item (the measurement in the LogBook, the activity post), by deleting your account or by writing to privacy@arkeonsport.com, because there's no command that deletes everything at once. Careful: as long as Arkeon can read Health or Health Connect, a measurement you delete in the LogBook comes back at the next read, if it's from the last 7 days, or with a new import, if it's within the period you choose. To stop it coming back, also delete it in Health or Health Connect, or remove the permission first. On Android, the privacy policy link in the Health Connect permissions window opens this policy.

Polar and Wahoo

To connect, you tap “Connect Polar” (or “Connect Wahoo”) and authorize on the brand's website, which doesn't show us your password. The brand gives us an access key and your ID with them, which we keep on the server, where the app doesn't read them. We also send Polar an ID of your Arkeon account, to register you as a connected user; otherwise, we send the two brands only the requests to read your data and, when you disconnect, the revocation of access.

• Polar (Polar Electro Oy, Finland): workouts from the last 30 days arrive by themselves when you open the app (at most every 15 minutes) or when you tap “Sync now”, with times, duration, distance, calories, sport, average and maximum heart rate, GPS route with elevation and device name, and the watch file, from which the app works out heart rate, power, cadence and laps point by point and, for swims and multisport, lengths, strokes and legs. From your physical profile we read weight, VO₂max, resting and maximum heart rate.
• Wahoo (Wahoo Fitness LLC, USA), when the connection becomes available: when you connect we read workouts from the last 90 days, then Wahoo notifies our server for every saved workout and the import starts by itself. We read the workout file: distance, times, calories, climb, route with elevation, device name and, point by point, heart rate, power, cadence and laps; outdoor rides with a track and swims come in, not indoor trainer, treadmill, gym and multisport. Of each Wahoo notification we record only the type and the IDs.
• Workouts start as “Private”, unless you choose in Settings › Synced workouts to have them go out by themselves (only those finished in the last 3 days). When a workout arrives from Wahoo we let you know with a notification on your phone, which you can turn off on the same page. The watch's original file, when it arrives, is kept only until the app creates the activity. The server saves the full track (see section 6, “Location, GPS tracks and maps”).

Polar and Wahoo are independent controllers of the data in their services, under their own privacy policies: https://www.polar.com/en/legal/privacy-notice and https://eu.wahoofitness.com/privacy-policy. We are the controller of the data imported into Arkeon.

To disconnect, tap “Disconnect Polar” (or “Disconnect Wahoo”): we revoke access with the brand and delete the key. You choose between “Disconnect and keep my workouts” and “Disconnect and delete imported data” (workouts, posts, LogBook entries and measurements from that brand). If the brand doesn't respond we don't change anything, and you can try again. You can also delete the workouts you kept later, with “Delete data imported from Polar” (or from Wahoo). You can also remove access from your Polar or Wahoo account: when the brand refuses one of our requests, we delete the key, and workouts already imported stay until you delete them. If you delete your account, we revoke access.

Bluetooth sensors

During a workout you connect sensors from “Pair sensor”, and smart trainers or treadmills from their own panel, with the Bluetooth permission. We read:

• heart rate strap: beats per minute, not the intervals between one beat and the next
• power meters: watts, left/right leg balance, cadence
• speed and cadence sensors: wheel and crank revolutions
• smart trainers: speed, cadence, power and distance
• treadmills: speed, incline and distance
• e-bikes: speed, cadence, rider power, battery and kilometers

Smart trainers, treadmills and e-bikes can also send other values (for example energy, time, heart rate or lights): the app doesn't use or save them. With smart trainers and treadmills the app only reads: it sends no commands, so it doesn't change their resistance, speed or incline. The data goes into the track, the workout and the post. The name and code of the last sensor stay only on the phone, to reconnect it. Nearby devices belonging to other people also appear in the search: you see them only on screen and we don't save them; to find an already paired e-bike the app looks at the phone's list of Bluetooth devices, without saving it. Bluetooth isn't used to know where you are: on iPhone it stays active in the background only to keep sensors connected during a workout; on Android 11 and earlier the phone asks for the location permission to search for sensors, but that's an Android rule and the app doesn't use your location for this.

Workouts uploaded from files

With “Upload workout” (from the + button) or from New post you upload the file from a watch or another app: GPX, TCX, FIT or the Garmin Connect .zip. The app reads it on the phone: route, times, elevation, heart rate, power, cadence, balance, laps, lengths and strokes, calories and sport; from a FIT file also the device's brand, model and serial number and the time the file was created; from a GPX the name of the app or device and of the track.

• We don't upload the original file: we save the track and a file with all its points (positions, times, elevation, speed and heart rate), both already trimmed by privacy zones.
• For some activities, such as swimming and multisport, we save a code made from the brand, the device's serial number and the file's time, so as not to import the same workout twice.
• The device name appears in the post. For virtual rides (for example Zwift or MyWhoosh) we don't save coordinates or elevation.

11. Arky, Arkeon's artificial intelligence

Arky is Arkeon's AI coach: an artificial intelligence (AI), meaning a program that writes its replies by itself. It isn't a person: it says so already in the chat greeting, and what it prepares carries its name (for example “Arky program, …”). Its replies can contain errors and aren't medical advice.

Arky is included in the PLUS and PRO plans and is used only from its chat. If you don't use it, nothing reaches Anthropic; on the FREE plan you see the buttons with a padlock and no request is sent.

What it does

From the chat menu: “Ask a question” about training, nutrition and recovery; “Build me a training plan”, starting from a form; “Request an assessment”, a short judgment on a workout, a week, recovery, nutrition, progress or the plan you're following.

AI Chef isn't in the menu: it opens from the chef's hat next to the name of every meal with at least one food, in the same chat. Arky asks whether you want “Same foods” or “Different foods” and writes a recipe with that meal's calories and macros. If you ask for a recipe in words in the chat, Arky offers to open AI Chef: there you choose the ingredients yourself, in a form.

Arky doesn't prepare diets: no meal plans, portion weights, calories or macros to follow calculated for you. A personalized diet can be prepared only by a doctor, a registered nutritionist or a dietitian: Arky gives general guidance and suggests a verified nutritionist in the app.

Who receives the data: Anthropic

Arky uses Anthropic's AI models. The contract is with Anthropic Ireland, Limited. The data is stored in the United States, with Anthropic PBC; to prepare the reply it can also be processed in the data centers of its providers in other countries. Anthropic is a data processor: it uses the data only to prepare your reply.

• Requests are sent from our server: Anthropic doesn't see your IP address.
• We don't send it your name, username, email or account ID. What you write yourself, though, is sent as it is, even if it contains names or other data.
• Under contract Anthropic doesn't use this data to train its models.
• It deletes questions and replies within 30 days. If a request breaks its usage policies, it can keep it for up to 2 years, and the scores of its safety checks for up to 7 years.
• The transfer outside the European Union is protected by standard contractual clauses (see section 14, “Data outside the European Union”).

Before the first request

The first time you tap an Arky feature, the “Before you start with Arky” notice appears: it says that what you ask goes to Anthropic, in the United States, and what is sent with and without your data. Arky starts only after you tap “I agree, continue”. We record the acceptance with text version, date and time. You withdraw it in Settings › Manage consents › “Arky and Anthropic”: at the next request the notice appears again.

Without your data: general advice

At first Arky gives only general advice. Only this is sent to Anthropic:

• the question and the last exchanges in the chat (at most 8)
• with AI Chef from a meal's hat: the type of meal, the foods in it, including your own or those shared by other users, their grams, the meal's calories and macros, the choice between “Same foods” and “Different foods”, default time and servings
• with AI Chef from the form: meal, time, servings, styles (for example “Vegan” or “Gluten-free”) and the ingredients chosen from the catalog, including your own or those shared by other users; in “Before or after training” also the sport, duration and intensity of the session, which the app suggests from today's planner and you can change
• the app language, the tone you chose (Coach, Athlete or Minimal), the phone's date and time zone

A style like “Gluten-free” can suggest an intolerance or a belief: we use it only for that recipe. AI Chef doesn't use weight, energy needs or goals: from the hat, the calories and macros are those of the meal, not needs calculated for you. The recipe's calories and macros are calculated by the app, not by the AI.

Every question goes through two automated checks. First a smaller Anthropic model reads the question, together with your 2 previous messages, and only says whether it's about sport and which topic: if it's off topic, the app replies with a ready-made text and doesn't deduct any requests. Then a filter in the app looks for risk signals, such as eating disorders, overtraining or symptoms: if it finds them, Arky doesn't reply and the app advises you to talk to a professional. So even a question Arky doesn't answer has already reached Anthropic.

With your data: “Yes, use my data”

For personalized advice choose “Yes, use my data”. It's a single choice, which you find in chat, in Settings › Arky (“Advice based on your data”) and in Settings › Manage consents (“Arky: advice based on your data”). Without it, Arky doesn't prepare plans or assessments. We record the yes and the withdrawal with text version, date and time. People who said yes before October 11, 2026, with an older text, are asked again when they update the app.

With the yes, for questions and assessments our server prepares a summary of your data, with dates and the comparison with your personal average. Sent to Anthropic:

• sex, age (not your date of birth), height, weight, days when you can train
• thresholds: maximum, resting and threshold heart rate, FTP, threshold pace, swimming threshold
• the last 6 months of sleep, HRV, resting heart rate, perceived stress and weight; recovery check-ins from the last 14 days
• workouts from the last 6 months: sport, session name, duration, distance, volume, elevation gain, average heart rate and power, fatigue, load, swimming
• the planner for the next 7 days (for assessments also up to 28 days back)
• nutrition: only the totals of calories, protein, carbohydrates and fat for yesterday and today (up to 7 days for assessments), not the names of foods, and the goals you set yourself
• active goals, records, latest races (name, placing, time) and tests
• the active notes in Arky's memory, the question and the last exchanges in the chat

For an assessment also the results of the app's checks on your data and, with “The plan I'm following”, the program name and week. Much of this is health data, and it can contain texts written by others, such as the name of a session prepared by your professional.

For the training plan less data is sent: the choices in the form (sport, goal and the specific goal if you write it, race and date, days, session length, areas where you have an injury), a summary of the last 8 weeks in the chosen sports and the “Injury or limitation” notes in your memory. The yes given for the plan also turns on “Advice based on your data” for questions and assessments: the text you see before answering says so.

Arky doesn't receive your location or GPS tracks, messages in chats with other people or photos.

You can change your mind whenever you want in the same places or by tapping “General advice only” in chat. If you withdraw the consent to health data, Arky doesn't receive your data even with the yes on. Withdrawal applies to subsequent requests.

Plan and memory

The plan is a draft in “Program preview”: it becomes yours only with “Add to planner”, and the sessions go into the planner, where you change or delete them like the others. If a professional sees your workouts, they see these sessions too. If you have an active collaboration for workouts, Arky reminds you of it and instead of “Add to planner” you find “Overwrite planner”: the draft goes into the planner in place of the professional's data, or you keep it only in chat.

In Settings › Arky › Arky's memory you write up to 20 notes about yourself (Goal, Injury or limitation, Current situation, Preference, Other), of at most 200 characters, also with an expiry date. Only you see them: the professional sees neither the notes nor the chat with Arky. Arky reads them only with “Advice based on your data” on. It doesn't write notes by itself, with one exception: if in chat you tell it a goal no longer interests you, or you set a new one on the same measure (for example “I want to get to 74 kg”), and fixed rules confirm the change, Arky applies it by itself and tells you so in chat. The old “Goal” note is turned off but stays in the list; for a new goal Arky adds a note with the new text. In the same way it closes or replaces the matching active goal in the LogBook. A “Goal” note without an expiry date, unchanged for 12 months, turns off by itself.

What stays with us

• The chat: the last 60 messages, on the phone and in our database in the European Union, so you find them on every device. “New chat” clears it in the database too.
• A usage log of each request (feature, amount of text, times, model, estimated cost, requests deducted), without the content, and the count of the month's requests.
• Technical logs without the text of questions, notes and replies: errors linked to your account and, if the safety filter is triggered, the type of signal (nutrition, overtraining or health). The logs of the platform that hosts the server can also keep the topic and the parts of the summary used.

The retention times are in section 15, “How long we keep data”. On every Arky reply, card or preview you can tap “Report” (see section 8, “Reports, blocks and moderation”). If you're 16 or 17 you can use Arky and give these consents yourself.

12. Automated decisions and profiling

An automated decision is made only by a program, without a person looking at it, and has legal effects on you or affects you in a similarly significant way (art. 22 GDPR). Profiling is the automated use of data to evaluate personal aspects, such as fitness, health or interests.

No significant automated decisions about you

Arkeon doesn't make automated decisions of this kind. Removing content, suspending or closing an account, checking a professional's qualifications: a person on the team decides.

The automated rule with the greatest weight concerns age: if your date of birth says you're under 16, the app doesn't let you sign up and doesn't accept it in Edit profile. If you think it's a mistake, write to privacy@arkeonsport.com: a person reads the request.

Calculations on your data

To help you read your data the app makes calculations with fixed rules written by us, not with artificial intelligence. It's a form of profiling, because it evaluates your fitness and your recovery:

• Effort Score and ARK load of each session. Effort, from 0 to 100, says how hard you pushed compared with the most you can sustain for that duration: from power, heart rate, pace, your gym sets or the fatigue rating you give. ARK load is Effort multiplied by the hours, and it weighs more as the hours go by, if you rarely do that sport or if the session is longer than your usual: for this it looks at how often and for how long you did that sport in the last 3 months.
• Calories of workouts: from power, or with well-known formulas that use speed, heart rate, weight, age and sex.
• ARK FUEL: a daily score from 0 to 100. It starts from 70, a day at your average, and each rule adds or subtracts points by comparing today with your average over the previous 6 weeks (sleep, HRV, resting heart rate, load, check-ins, nutrition). It appears only with enough days of data and is calculated on the phone.
• Records: the app looks for new records by itself in the activities you record or import.
• Estimated time on routes: how long it would take you, estimated from your activities of the same sport in the last 12 months (your speed by gradient, on long climbs and on long outings; the most recent count more). With few activities it uses published formulas with your weight and your FTP or threshold pace. It doesn't use heart rate and only you see it, also on other people's routes.
• Energy needs, with published formulas (for example Mifflin-St Jeor): suggestions you use only if you want.

They're indications: they don't decide anything for you and aren't medical advice. The legal basis is that of the source data: contract and explicit consent to health data.

Other automated rules

• Arky: the topic check, the risk signal filter, the check that there's enough data for an assessment (if there isn't, the request isn't sent and we don't deduct requests), the alert when a professional already follows your workouts, changing a goal only if you say so (see section 11, “Arky, Arkeon's artificial intelligence”). What Arky prepares remains a suggestion.
• Leaderboards: a time set at a speed impossible for the sport is automatically left out; you still see it among your times.
• “Invite a friend”: a rule checks the invited friend's steps on its own and, once they're done, gives you both the days of PLUS. Cancelling a reward for abuse is decided by a person on the team; if you think a step wasn't counted, write to support@arkeonsport.com.
• People aged 16 or 17 don't appear in searches by sex, age, weight or distance.
• Limits against abuse: on requests to Arky in a short time, on reports (20 per hour), on support requests (10 per hour) and on collaboration proposals (3 per hour). If you exceed them, try again later.
• Alert to the team when different people block the same account (3, 10 or 25 times within 30 days): then a person decides.
• Professional tools: the score from 0 to 100 for each athlete, the alerts on inactivity and records, the automations they turn on (see section 9, “Professionals and collaborations”). Choices about your path are made by the professional.

The Discover feed

In the Discover tab of the home screen the app orders other people's posts based on the sports you practice, those of the people you follow, your city or province and what you do in the app (profiles you visit, posts you open, Daps, comments, shares). The weight of these actions halves every 14 days. The calculation happens on your phone: what you do doesn't reach our servers and is deleted when you sign out. The basis is our legitimate interest in showing you relevant posts. There's no switch to turn this ordering off: if you don't want it, use the Following tab, with posts from the people you follow.

What you can do

You can ask us how a calculation works, dispute its result and ask for a person to review it: write to privacy@arkeonsport.com. For the Discover feed ordering, today objecting by email isn't enough: the calculation happens on your phone and we can't turn it off remotely. You can use the Following tab, and what the phone has collected is deleted when you sign out.

13. Who receives the data

We don't sell your data, we don't use it for advertising and we don't give it to advertisers. Only the parties on this list receive it, each for its own part of the work. We require the providers that work for us, by contract, to protect it at least as much as described in this policy; the services we don't have a contract with (maps, places, weather and foods) receive only the minimum needed for the feature (see below). Apple and Google (for subscriptions), Polar and Wahoo process the data as independent controllers, under their own privacy policies.

A data processor is a company that processes data on our behalf, only for what we ask it to do and with a contract that obliges it to protect the data (art. 28 GDPR). An independent controller decides by itself how to use the data it receives and is directly responsible for it, with its own privacy policy.

Within Arkeon

• Other users: what you publish, according to your choices (see section 7, “What other users see”). Anyone with the link of a published photo can open it even without an account.
• The professionals you collaborate with, independent controllers for the categories you open (see section 9, “Professionals and collaborations”).
• The Arkeon team: authorized people read only what they need for their task (support requests, reports, verification applications, technical logs for security and maintenance). Of chat messages they see only the reported ones.

Providers that work for us

They are data processors.

• Supabase (Supabase Pte. Ltd., Singapore): database, account sign-in, file storage, server functions and automatic account emails. It receives all the app's data. The database and files are in Ireland, on Amazon Web Services servers; the app's requests also go through the Cloudflare network.
• Sentry (Functional Software Inc., USA, data in Germany): error reports from the app and from the server, with the account ID; the app asks it not to store the IP. For each support request it receives an alert with number, type and a few technical indicators, without text, email or IP (if something goes wrong, also the account ID).
• RevenueCat (RevenueCat Inc., USA): manages subscriptions bought in the app. It receives the account ID, store purchases (product, price, country, receipt), technical data about the phone and the IP. Not your card.
• Expo (650 Industries Inc., USA): sends push notifications. It receives the phone's notification code, an installation code and the text of each notification, which it doesn't keep (see section 18, “Your phone: permissions and stored data”).
• Google (Google Ireland Limited and Google LLC, USA): delivers push notifications to Android phones on our behalf (Firebase Cloud Messaging). It receives the phone's notification code and the text of each notification.
• Anthropic (Anthropic Ireland, Limited; data stored in the United States by Anthropic PBC): Arky's artificial intelligence. It receives what you ask and, only with “Yes, use my data”, your data (see section 11, “Arky, Arkeon's artificial intelligence”).
• Daily (Daily, Co., USA): video calls with the professional, if you use them. Audio, video, the name you enter before joining, the chat, the shared screen and the IP go through Daily.
• Microsoft (Microsoft Ireland Operations Ltd): email for the @arkeonsport.com addresses, so the emails you write to us.
• Cloudflare (Cloudflare Inc., USA): hosts the arkeonsport.com website (see section 21, “The arkeonsport.com website”).

Independent controllers

• Apple (Apple Distribution International, Ireland) and Google (Google Ireland and Google Commerce, Ireland): they sell the subscriptions in the app and collect the payment, of which we receive only the status. Apple also delivers push notifications to iPhones.
• Polar and Wahoo, if you connect your account (see section 10, “Devices, sensors and connected apps”).
• The phone's location service (Apple or Google), which turns the location you send in chat into an address, and Google Maps, if a chat member opens that link from their phone.

Map, place, weather and food services

We don't have a contract with these services: they provide open data and handle their logs as independent controllers. They receive only what the feature needs, never your name, email or account ID.

From your phone, so with your IP address:

• OpenFreeMap (Hyperknot Software Kft., Hungary), through the Cloudflare network: the map images
• Nominatim (OpenStreetMap Foundation, United Kingdom) and Overpass (FOSSGIS e.V., Germany): the text you search for, the area of the climbs whose name we show and one or two points of open-water swims
• Open Food Facts (France): the foods you search for and the barcodes you scan

From our server, without your IP:

• Open-Meteo (OpenMeteo GmbH, Switzerland): a point rounded to about 1 km and the date, for the weather
• openrouteservice (HeiGIT gGmbH, Germany): the route points and the ends of the gaps in the track
• Terrain Tiles on Amazon Web Services (USA): portions of terrain, for elevation and elevation gain

Exactly what they receive is in section 6, “Location, GPS tracks and maps”.

Authorities and legal defense

We disclose data to authorities only when the law requires or allows it (see section 8, “Reports, blocks and moderation”). We can also use the necessary data to defend a right of ours before a court, with our legal advisers.

For some of these recipients the data leaves the European Union: see section 14, “Data outside the European Union”.

14. Data outside the European Union

The database and files are in the European Union, in Ireland. Some providers, though, are based outside the European Economic Area (the European Union plus Iceland, Liechtenstein and Norway) or also process data from there. The GDPR allows this only with a safeguard that protects the data as in Europe:

• Adequacy decision: the European Commission has established that the country protects data as the European Union does. This applies to the United Kingdom (decision renewed on December 19, 2025) and to Switzerland.
• EU-US Data Privacy Framework (DPF): the American companies that join it commit to following protection rules recognized by the European Commission.
• Standard contractual clauses: a contract with a text approved by the European Commission, which obliges whoever receives the data to protect it as in Europe.

Provider by provider

• Supabase: the contracting company is based in Singapore and technical support also comes from the United States, but the database and files stay in Ireland. Server functions run in the Supabase data center closest to the person using the app: if you're in Europe, in Europe. Safeguard: standard contractual clauses.
• Sentry (USA): error reports are kept in Germany; only the data of our account with Sentry (settings and team members) stays in the United States. Safeguards: DPF and standard contractual clauses.
• RevenueCat (USA): subscription data is kept in the United States. Safeguard: standard contractual clauses.
• Expo (USA): the codes and text of notifications go through the United States. Safeguards: DPF and standard contractual clauses.
• Anthropic: contract with Anthropic Ireland, storage in the United States with Anthropic PBC, processing also with its providers in other countries. Safeguard: standard contractual clauses.
• Google, for notifications on Android phones: DPF and standard contractual clauses.
• Daily (USA), for video calls: DPF and standard contractual clauses.
• Microsoft: our email stays in the European Union; for limited transfers to Microsoft Corporation, in the United States, DPF and standard contractual clauses.
• Cloudflare (USA), which hosts the website and is the network used by Supabase and OpenFreeMap: DPF and, for the website, standard contractual clauses.
• Terrain Tiles on Amazon Web Services (USA): it receives from our server only portions of terrain, without data that identifies you. Amazon participates in the DPF.
• Nominatim (OpenStreetMap Foundation, United Kingdom): adequacy decision. The foundation also uses the distribution network of another provider, which must follow its rules.
• Open-Meteo (Switzerland): adequacy decision. It also has servers in North America and doesn't say which ones requests reach; in any case it receives only a point rounded to about 1 km and a date.
• Apple and Google, as independent controllers for payments (and Apple for iPhone notifications), transfer data under their own privacy policies: Apple with standard contractual clauses, Google with DPF and standard contractual clauses.
• Wahoo (USA), if you connect your account: we send it the connection codes, the requests to read your workouts and, when you disconnect or delete your account, the revocation. Your workouts come from Wahoo to us. Wahoo doesn't participate in the DPF and we don't have standard contractual clauses with Wahoo: this transfer happens because you ask us to connect your account, and without it we couldn't do so (art. 49, paragraph 1, letter b of the GDPR).
• These stay in the European Union: Polar (Finland), OpenFreeMap (Hungary), Overpass and openrouteservice (Germany), Open Food Facts (France).

If the DPF were to fall

The DPF is valid today, but a challenge against it is still pending before the Court of Justice of the European Union. With the American providers that work for us and participate in it, standard contractual clauses also apply, and they would remain in any case.

You can ask us for a copy of the safeguards by writing to privacy@arkeonsport.com.

15. How long we keep data

We keep data only for as long as needed. The basic rule: it stays as long as you have the account, or until you delete it. For some data there are shorter times, which kick in automatically.

As long as you have the account

These stay as long as the account exists, unless you delete them first: profile, measurements, workouts, GPS tracks, routes, privacy zones, records, posts, comments, Daps, messages, Moments in the archive, Arky's memory and its request count, device connections, preferences, consent log, sanctions, verification record and a professional's time in the Coaching area.

• “Invite a friend”: code, invitations and gifted days of PLUS stay as long as the account exists. If someone you invited deletes their account, their invitation is deleted and the days you've already received stay yours; if the person who invited you deletes theirs, your invitation stays without the link to them.
• Chat messages: no expiry. They stay until whoever wrote them deletes them or deletes their account.
• Chat with Arky: the last 60 messages, until you tap “New chat”.
• Sign-in sessions, with IP and device type: until you sign out on that phone or delete your account. If you uninstall the app, change phone without signing out or sign in with “Stay signed in” off, the session stays recorded on our servers until you delete your account: today it doesn't expire by itself.
• Polar and Wahoo access key: until you disconnect, remove access from the brand or delete your account.
• Data you shared with a professional: after the collaboration ends they keep only the data from that period, until you take it away from them from Coaching › Past collaborations or one of you deletes their account.

When you delete something

• Measurements, records, meditation or recovery sessions, shared diary entries, free workouts, templates and programs: they stay hidden for 30 days, then are deleted (a measurement that came from Health or Health Connect can come back: see section 10, “Devices, sensors and connected apps”). Recipes used in a meal program, posture routines assigned to an athlete and meal programs still in the planner stay as long as they're needed, then are deleted, never before 30 days.
• Activity post: when you delete it you find “Also delete the GPS route”, already on (not for multisport). This way the track, times on sectors and track file are deleted immediately (the latter within a few minutes), and the workout stays in your history without a map. For activities that came from Health, Health Connect, Polar or Wahoo only a row with sport, date and totals remains, which is used to avoid importing them again.
• If you delete only the post, the track stays in your account: to delete it later write to privacy@arkeonsport.com or delete your account. One that came from Polar or Wahoo becomes the minimal row; if it had times on sectors, the route and times stay hidden for up to 30 days, then are deleted.
• Deleted activities: after 30 days they lose route, points, elevation, times on sectors and track file in any case. Only the minimal row remains.
• Post photos and Moments: see section 7, “What other users see”. We keep who viewed one of your Moments for up to 30 days after the end of its 24 hours.
• Messages deleted for everyone: they disappear immediately, and the linked photos, videos, documents and voice messages right after (the automatic cleanup runs every 15 minutes). “Delete for me” hides the message only for you.
• Arky's memory notes: for 90 days we keep only a code and the date, without the text, to keep your devices in sync.

Times that kick in automatically

• Workout copy in the cloud: the GPS track is removed as soon as the workout is saved, and in any case after 7 days. The rest of the copy (steps, times, sets) stays as long as the account exists.
• Heart rate values of swims from Health and Health Connect: until the post is created. Original files that came from Polar or Wahoo: until the app creates the activity.
• In-app notifications: 12 months, or less if you delete them earlier.
• Reports: open ones until the team's decision; closed ones, with the copy of the content and the reasons (including for foods), 12 months after the decision. Hazard reports on sectors: until you withdraw them, someone who has done the sector taps “No longer there”, the sector is deleted or you delete your account. Files kept as evidence of illegal or serious content (see section 8, “Reports, blocks and moderation”): today they don't have an automatic expiry, and we delete them when they're no longer needed for the case or for our defense.
• Block log (who blocked whom and when): 180 days, even after unblocking.
• Support requests, collaboration proposals and data requests: 24 months from submission, with the attachment. Anti-abuse log of submissions (account, IP, type and time): 90 days.
• Errors of our server, with the account ID: 30 days.
• Usage log of Arky and of the weather, place, route and elevation services (account, feature and time, without content or coordinates): 90 days.
• Log of payment events, including failed ones: 90 days.
• Wahoo notifications: 90 days.
• Documents uploaded for a professional's verification: until the team's decision, and at most 30 days if they remain without an application.
• Temporary data for the Polar or Wahoo connection: it expires after 10 minutes and is deleted within 2 days.
• Pending server operations: 7 days.
• Weather already requested (rounded point and time, without data about you): 12 months. Place names: 90 days.

When you delete your account

Deletion starts as soon as you confirm it in Settings › Account › Delete account and can't be undone. These disappear immediately from our databases: profile, photos, measurements, workouts, GPS tracks, records, posts, comments, Daps, Moments, the messages you wrote, followers, current blocks (their log stays for a limited time, see below), the reports you made (or their link to you), collaborations with professionals (with what the professional had written about you: notes, payments, logs), recorded consents, chat, Arky's memory and choices, usage log and request count, your “Invite a friend” code, the invitation you joined with and the link to the friends you invited, your foods, recipes and programs, and the files you uploaded. We revoke access to Polar and Wahoo, if they were connected, and ask RevenueCat to delete your purchase history. Your username becomes available again. Other users' notifications that show your name are deleted too.

These remain, for the time stated:

• the chats you created, which pass to another member without your messages (a chat with nobody left in it is deleted, with its files)
• the sectors and groups you created, without your name, with the name, description and images you had given them
• the programs and plans a professional had prepared for you, which stay with them without the link to your account
• reports made by others about your content, for up to 12 months from the decision: no longer linked to your account, but with the content's technical ID and the copy, which can contain your name
• the support requests you sent, with the contact email and the text but without the link to the account: for up to 24 months from submission (the attachment is deleted immediately)
• technical logs: server errors for up to 30 days, support anti-abuse log and payment events for up to 90 days, blocks you had made for up to 180 days, without your name
• in other people's posts you had been added to, a technical code that no longer leads to any profile

Deleting your account doesn't cancel a subscription: cancel it first with Apple or Google, where you bought it. An account closed by the team stays on our servers until you ask for it to be deleted.

Deleting your account without the app

You can also ask for your Arkeon account to be deleted without the app, for example if you've already uninstalled it. Write to privacy@arkeonsport.com from the email you signed up with, with the subject “Delete my Arkeon account” and your username. We'll ask you for a confirmation from that email and delete the account and data as described above, within one month. First cancel your subscription with Apple or Google, if you have one.

With providers

Some copies aren't in our database and follow the providers' retention times:

• Database backups: Supabase makes them every day and keeps them for 7 days, then replaces them. Deleted data can stay in a backup for at most this time. We use them only to restore the service after a failure.
• Technical logs of the Supabase platform (app requests, sign-ins, IP addresses): 7 days.
• Sentry: at most 90 days. What has already been sent isn't deleted when you delete your account.
• Anthropic: within 30 days, unless it's needed to check a breach of its usage policies (in that case up to 2 years, and the scores of its safety checks up to 7).
• RevenueCat: until we ask for deletion, which we do when you delete your account.
• Expo: the phone's code as long as it's needed to send notifications; it doesn't keep the text of notifications.
• Cloudflare, Daily, Apple, Google, Polar and Wahoo: according to their privacy policies.
• The emails you write to us: for as long as needed to reply and to be able to prove how we replied.

On your phone

What stays on the phone and when it's deleted is in section 18, “Your phone: permissions and stored data”. In addition, the workout you've just finished stays on the phone for up to 18 hours, with the full track, so you can make a post from it.

16. Your rights

The GDPR gives you several rights over your data, and exercising them is free. You use many of them yourself in the app. For everything else write to privacy@arkeonsport.com, or open Settings › Account › Other requests about your data: the support form opens with the type “Privacy and personal data”.

What they are and how to use them

• Access (art. 15): knowing what data we have about you and getting a copy. In Settings › Account › Download a copy you prepare right away on the phone, free and on any plan, a .zip file with one file for each type of data, GPS tracks and routes in GPX format, the list of files you uploaded and a text explaining the contents. The copy doesn't include the actual files (photos, videos, voice messages, documents: only their list), messages written by others in your chats, sign-in sessions, private notes and payments a professional noted down about you, copies of content reported by others and data kept by providers. For these, write to us.
• Rectification (art. 16): correcting wrong data. You edit your profile, measurements, workouts and posts in the app; for everything else write to us.
• Erasure (art. 17): you delete individual content in the app, or the whole account from Settings › Account › Delete account. What disappears and what remains is in section 15, “How long we keep data”.
• Restriction (art. 18): asking us to keep the data without using it, for example while we check a dispute you've raised.
• Portability (art. 20): getting the data you gave us in a format that other programs can read too. The app's copy already is (JSON and GPX), and GPX tracks can be imported into other sports apps. If you want us to send it directly to another service, we'll do so if it's technically possible.
• Withdrawal of consent (art. 7): you withdraw a consent whenever you want, where you gave it (see section 17, “Your choices, all in one place”). Withdrawal applies from that moment and doesn't make what was done before unlawful. Without the consent to health data, though, the app doesn't work (see section 5, “Health data”).
• Automated decisions (art. 22): not being subject to decisions made only by an automated system with significant effects on you (see section 12, “Automated decisions and profiling”).

Your right to object

You can object at any time, on grounds relating to your situation, to everything we do based on our legitimate interest (art. 21). These cases, in section 4, “Why we use your data”, are marked with “legitimate interest”. After your objection we stop, unless there are legitimate grounds stronger than yours or the data is needed to defend a right before a court.

• Sector leaderboards: turn off “Appear in leaderboards” in Settings › Privacy controls.
• App error reports: write to privacy@arkeonsport.com.
• Discover feed ordering: today there's no switch (see section 12, “Automated decisions and profiling”).
• Everything else: write to privacy@arkeonsport.com or open Settings › Account › Other requests about your data.

We don't do marketing. If one day we do, you'll always be able to object, without giving reasons.

How we respond

• We reply by email within one month of the request. If the request is complex, or we receive many, we can take another two months: in that case we tell you within the first month, explaining why.
• To protect your data we may ask you to confirm that the request comes from you, for example by writing to us from your account email or from the app after signing in. We don't ask for documents unless they're needed.
• If we can't do what you ask, we tell you within one month, explain why and remind you that you can lodge a complaint with the Garante or go to court.
• For data a professional has received you can also contact them directly, since they're its independent controller.

Complaint

If you think we process your data improperly, you can lodge a complaint with the Garante per la protezione dei dati personali, the Italian Data Protection Authority (Piazza Venezia 11, 00187 Roma; phone +39 06 696771; protocollo@gpdp.it; PEC protocollo@pec.gpdp.it; https://www.garanteprivacy.it), or with the authority of the European Union country where you live, work or where you think the breach took place. You can also go to court. If you like, write to us first: it's often sorted out quickly.

After death

Under the Italian Privacy Code (art. 2-terdecies), after a person's death the rights over their data can be exercised by someone with their own interest, someone acting to protect them or someone with deserving family reasons. If you don't want this to happen, you can forbid it with a written statement sent to privacy@arkeonsport.com. Family members can ask us to close the account by writing to the same address.

17. Your choices, all in one place

In short, where each choice about your data is turned on and off, and how it is at the start.

Settings › Manage consents

• Health data: required to use Arkeon. Here you can only withdraw it: the app stops until you give it again, or you delete your account (see section 5, “Health data”).
• “Arky: advice based on your data”: off until you say yes (see section 11, “Arky, Arkeon's artificial intelligence”).
• Location on maps: off until you turn it on (see section 6, “Location, GPS tracks and maps”).
• “Arky and Anthropic”: your acceptance that what you ask Arky goes to Anthropic.
• Accepted documents: the versions of the Terms and the Privacy Policy.

Settings › Privacy controls

• Private account: off from the start.
• Read receipts: on from the start.
• Appear in leaderboards: on from the start (off for people we know are 16 or 17).
• Share heart rate: off from the start.
• Let people find you by sex, by age and by weight: off from the start; they can be turned on only from age 18, with your date of birth in your profile.
• Privacy zones, “Hide start and end”: off from the start; when on, others don't see the start and end of your activities, including those already saved (see section 6, “Location, GPS tracks and maps”).
• Your reports, Follow requests, Blocked accounts.

Other choices

• Settings › Arky: “Advice based on your data”, the tone and Arky's memory.
• Settings › Push notifications: all, or item by item in three sections (Social, Coaches and professionals, System); chat messages have their own item too. A single chat is muted from its info.
• Settings › Phone calendar: off from the start.
• Settings › Devices and integrations: Health, Health Connect, Polar and Wahoo.
• Settings › Account: Download a copy, Other requests about your data, Delete account.
• Messages › Message settings: “Show when you're online” (off from the start) and “Who can message you” (“Everyone” at first, “People you follow” or “No one”).
• Moments Settings: who can reply to you, “Sharing in messages”, “Hide moment from”.
• Edit profile: city, discount codes, “Who can see your groups”.

When you publish

• The visibility of each post: “Everyone”, “Followers” or “Private”.
• “Details in the post”: what to hide from others; heart rate and calories start hidden.
• Settings › Synced workouts: whether workouts that come in by themselves stay private, go out by themselves or are shown to you for review, the phone notification and the sector leaderboards.
• “Who sees who you trained with” and “Hide this activity from leaderboards”.
• When you delete an activity post, “Also delete the GPS route” is already on.
• From the “···” menu of a profile or a piece of content: Report and Block.

With professionals

The five items to share, each with “During” or “Before”, are changed from “Shared data”. After the collaboration ends you can also remove the data from that period from Coaching › Past collaborations › “Remove access to this period too” (see section 9, “Professionals and collaborations”).

On the phone

• You give and remove permissions (location, camera, microphone, photos, Bluetooth, calendar, notifications, Health, Health Connect) from the phone's settings and from the Health and Health Connect apps (see section 10, “Devices, sensors and connected apps” and section 18, “Your phone: permissions and stored data”).
• When you sign in, if you turn off “Stay signed in” your sign-in isn't kept on the phone.

18. Your phone: permissions and stored data

Some features need a phone permission: the authorization iOS or Android asks you for before an app uses, for example, the camera or your location. We ask for them when they're needed, usually the first time you use the feature; the notifications one at the end of the initial setup or in Settings › Push notifications. You can say no: you only lose that feature, the rest of the app works. You can change them whenever you want from the phone's settings. The phone permission isn't GDPR consent: the data follows the legal basis of the feature (see section 4, “Why we use your data”).

The permissions the app can ask you for

• Location while using the app: recording activities, showing you where you are on the sector and route maps, sending your location in chat (see section 6, “Location, GPS tracks and maps”).
• Location always: optional, and we ask for it only once. The track already keeps running with the screen locked with the previous permission; on iPhone “Always” also lets the recording resume if the system closes the app. Even with “Always” the app uses your location only while you're recording.
• Camera: photos and videos for Moments and chat, video calls with professionals, profile QR codes and food barcodes. Codes are read on the phone; we look up the barcode in the Open Food Facts catalog, which sees the phone's IP.
• Microphone: audio for videos, voice messages, video calls.
• Photos and videos: choosing what you upload and saving Moments and the images you create to your library, only when you ask. On Android the app doesn't ask to read audio files or the location saved in photos.
• Calendar: only if you turn on “Phone calendar” in Settings. The app creates its own calendar, “Arkeon - Appointments”, with your appointments with professionals (title, times, place, with whom, notes, video call link). Of the other calendars it reads only the list and their accounts, never your events, and nothing reaches us. If the calendar is synced with iCloud, Google or others, that service receives the appointments. If you turn the option off or sign out, the calendar is deleted.
• Bluetooth: connecting the sensors you choose (see section 10, “Devices, sensors and connected apps”).
• Motion & Fitness (iPhone): using the barometer to measure the climb when GPS is lost.
• Notifications: the phone receives from Apple or Google a code for notifications (the token, see section 3, “What data we process and where it comes from”) and passes it to Expo, the service that sends them. We save that code and the phone's system, not the phone's name, and remove it when you sign out on that phone. Reminders are scheduled by the phone; we copy their list to the database so you find it on every device.
• Health (iPhone) and Health Connect (Android): reading, if you choose, workouts and measurements already saved on the phone (see section 10, “Devices, sensors and connected apps”).
• Clipboard: the app never reads it; it only writes to it when you tap a copy command, for example for a link or a discount code.

The app doesn't ask for your contacts, iOS Reminders or, on Android, physical activity recognition.

What notifications say

Push notifications go through Expo (USA) and then Apple or Google, and can appear on the lock screen.

• Chat messages: the sender's name (in a group also the group's name) and the first 240 characters of the message, or the attachment type, such as “Photo”, “Voice message”, “Location” or a document's name. They don't come from muted chats or from blocked people.
• Follows, Daps, comments, people added to a post, groups, change proposals, outcome of your reports: the name of whoever did the action and the text, up to 240 characters.
• Professional area (check-ins, diary, programs, appointments, payments, documents, collaborations, reviews, verification) and alerts about your account (suspensions, removed content): only “Arkeon” and a generic sentence, without names, values, amounts or reasons. You see the details inside the app.

If you don't want previews on the lock screen, change them in the phone's settings or mute the chat. A private account doesn't change the notifications you receive.

What stays saved on the phone

To work offline too and faster, the app keeps on the phone:

• access to your account, if you leave “Stay signed in” on when you sign in; if you turn it off, access lasts until you close the app
• copies of your data (profile, planner, check-ins, drafts, chat and memory with Arky, the track you're recording) and the changes waiting to reach our servers when you're back online
• some phone choices: language, consents, versions of the Terms and Privacy Policy accepted, “Stay signed in”, the last email used to sign in and the code of the last account that used the phone, plus the code of an invitation opened before signing in, which the app uses once as soon as you sign in and then deletes

They're kept in the app's private space, protected by the system; the app doesn't add its own encryption, so protect your phone with an unlock code. When you sign out, or another account signs in on the phone, we delete your account's data, the appointments calendar and what the Discover feed has learned from what you do; the phone choices and the temporary memory described below stay. Uninstalling the app removes everything.

• Temporary memory (cache): the images you look at stay for a while in a temporary memory, including private ones, such as progress photos. It isn't cleared when you sign out: it's cleared by the system or by uninstalling. Feed map previews stay for at most 60 days (and 150 MB in total).
• Copy of your data: when you download it, on iPhone the file is deleted as soon as you close the share sheet; on Android it stays in the app's private temporary memory until the next copy or until the system clears it.
• Backup: on iPhone the app's data is excluded from iCloud backup; on Android it isn't included in the Google account's automatic backup, but from Android 12 it can move to a new phone if you transfer data from the old one.

What reaches us from the phone

Besides the data of the features you use: the IP address, which our server and providers see when the app connects; the app and system version, when you send us a support request; error reports (see section 3, “What data we process and where it comes from”).

19. How we protect data

Much of your data concerns your health and location: that's why we protect it with technical and organizational measures suited to the risk. No system, though, is 100% secure, so we also tell you what the limits are and what you can do yourself.

What we do

• Connections between the app, the website and the server are encrypted (HTTPS).
• The database and files are in the European Union, in Ireland, with Supabase, which encrypts the data stored on its disks.
• In the database each request sees only the data that person has the right to see: your measurements, for example, are read by you and, if you choose, by the professional you collaborate with. Email, date of birth and weight can't be read by other users, except in the cases explained in section 7, “What other users see” and in section 9, “Professionals and collaborations”.
• Private files (progress photos, check-in photos, chat attachments and voice messages) open only with temporary links: 1 hour for voice messages, 7 days for other chat attachments. Public photos work as explained in section 7, “What other users see”.
• Passwords are handled by Supabase's sign-in system, which stores them only as a hash. When you choose one, it checks it against lists of stolen passwords: the service that keeps these lists (Have I Been Pwned) receives only part of the fingerprint, not the password.
• Only the team members who need it access the data, and only for support, moderation, verification of professionals, maintenance and security.

Limits you should know

• Chat messages aren't encrypted “end-to-end”: they're protected in transit and on our servers, but the service can technically read them. The team sees one only when someone reports it.
• On the phone the app doesn't add its own encryption: the data it keeps, including copies of health data and access to your account, is protected by the system's defenses (see section 18, “Your phone: permissions and stored data”).

What you can do

• Use a password you don't use anywhere else and protect your phone with an unlock code.
• On a shared phone or computer, sign out when you're done, or turn off “Stay signed in” when you sign in.
• If you think someone has got into your account, change your password right away in Settings › Account and write to support@arkeonsport.com.

If a data breach happens

A data breach is an incident that leads to the loss, destruction of, or unauthorized access to personal data. If it happens, we act right away to contain it. If it may pose a risk to people, we report it to the Garante per la protezione dei dati personali within 72 hours of becoming aware of it (art. 33 GDPR). If the risk to you is high, we also notify you without delay, in the app or at your account email, explaining what happened, what we did and what you can do (art. 34 GDPR). We also notify the connected services when their contracts require it. We record every breach in an internal register, even when it doesn't need to be reported.

20. Minimum age and minors

Arkeon is for people aged 16 and over: people under 16 can't create an account. When you sign up we ask for your date of birth, and the app and our database don't accept that of anyone under 16, neither at sign-up nor when you change it in Edit profile.

We don't ask for parental consent. In Italy, from age 14 you can give consent to online services yourself (art. 2-quinquies of the Italian Privacy Code), and in no European Union country does the law require parental consent above age 16 (art. 8 GDPR).

If you're 16 or 17

You're a minor, and some things are set up to protect you more:

• on the “Before you start” screen the sector leaderboards switch starts off: you appear on leaderboards only if you turn it on yourself
• “Let people find you by sex”, “by age” and “by weight” can't be turned on, and you don't appear in searches and filters by sex, age, weight or distance
• as for everyone, no advertising and no selling of your data

We wrote this policy as simply as possible. If something isn't clear, ask an adult you trust or write to privacy@arkeonsport.com.

If an account belongs to someone under 16

If we find out, or someone tells us, that an account belongs to a person under 16, we close it and delete their data. Parents and guardians can tell us at privacy@arkeonsport.com.

21. The arkeonsport.com website

This policy also applies to the arkeonsport.com website, which shows the same text as the app. The legal bases are in section 4, “Why we use your data”.

You can't sign up or sign in on the website: your account, workouts and subscriptions are only in the app.

Visiting the website

• The website is hosted by Cloudflare (Cloudflare Inc., USA), a data processor. To show you the pages it receives your IP address, browser type and language, the page requested and the referring site, and keeps these logs for its own retention times.
• The website doesn't use statistics, profiling or advertising cookies, nor third-party pixels or tools to count visits. The fonts are on the website itself, without external services.
• If you open from the browser a link shared from the app (a profile, a post), the full address, with the username or the post code, reaches the website's servers. The link takes you to the home page. There are no public web pages with Arkeon profiles or posts.

Browser storage

The website doesn't use cookies. It uses your browser's storage only to remember the language, if you choose it: it stays in the browser and doesn't reach us, and you delete it by clearing the website's data. It's used to do what you ask, so consent isn't needed (art. 122 of the Italian Privacy Code).

Writing to us from the website

The website has no form for writing to us: if you tap our address your email program opens, and the message to info@arkeonsport.com arrives in our mailbox on Microsoft 365 without going through the website. Don't write health data unless it's needed; for privacy matters use privacy@arkeonsport.com.

Links to other services

At the bottom of the pages there's a link to our Instagram profile, and the App Store and Google Play buttons take you to the stores. They're plain links: until you tap them, those services receive nothing from the website. If you open them, their privacy policies apply.

22. Changes to this policy

Arkeon changes over time, and along with the app this policy can change too. At the top you'll find the date of the last update.

• When the change is significant, for example a new use of data, a new provider or different retention times, the first time you open the updated app the “Before you start” screen appears with the new version: to keep using Arkeon you must confirm you've read it. The same applies to the Terms. Until you confirm, request the copy of your data at privacy@arkeonsport.com.
• Reading the policy doesn't mean giving consent: consents are separate choices, which you give or withdraw whenever you want.
• If we want to use your data for a new purpose, we'll tell you first and, when the law requires it, ask for your consent.
• You can see the versions of the Terms and the Privacy Policy you accepted in Settings › Manage consents. To read an earlier version, request it at privacy@arkeonsport.com.