Privacy Policy

GOLDEN Sports-Apps respects your privacy. This Privacy Policy explains how personal data and other information are handled when you use our Android and iOS fitness apps, including GOLDEN Push-Ups and the other GOLDEN Sports-Apps, and when you visit our website at goldensportsapps.com.

1. Controller and contact information

The controller responsible for processing described in this Privacy Policy is:

2. Using the apps without a GOLDEN Sports Account

You can use the core workout features without creating a GOLDEN Sports Account. If you do not create or sign in to a GOLDEN Sports Account, we do not store your workout history, workout plans, or App Blocker settings on our servers.

Camera input—including images, video frames, and intermediate pose or exercise-recognition data derived from them—is processed exclusively on your device. It is never transmitted to or stored on our servers, regardless of whether you create or sign in to a GOLDEN Sports Account. This does not prevent final workout results, such as the exercise type, repetition count, and workout duration, from being synchronized when you are signed in, as described in Section 4.

The following information remains on your device:

• workout sessions, repetitions, statistics, streaks, goals, and workout plans;
• app preferences and feature settings;
• App Blocker configuration and granted-time history; and
• camera data used for exercise recognition.

If you use an available workout-video feature, the resulting video is stored locally in the app's temporary storage and is not uploaded to our servers. App Unlock workouts do not record a video.

Deleting the app normally deletes information held only within that app, subject to the backup and data-management behavior of your operating system.

There are limited exceptions to this local-only operation:

• Firebase Crashlytics and supporting Firebase installation services process limited diagnostic and installation information as described in Section 3.
• If you voluntarily enable Health Connect, HealthKit, Strava, or Google Calendar, the information required for that integration is transferred as described in Sections 7–10.
• If you make or restore a purchase, Apple, Google, and, where required for verification, our Firebase function process limited purchase information as described in Section 11.

Firebase Cloud Messaging information is not added to a GOLDEN Sports Account record unless you create or sign in to a GOLDEN Sports Account.

3. Crash diagnostics and app stability

We use Firebase Crashlytics, a service provided by Google, to identify crashes and improve the stability and reliability of the apps, regardless of whether you have a GOLDEN Sports Account. When you use the core app without a GOLDEN Sports Account, the limited processing by Crashlytics and its supporting Firebase installation services described here is the only automatic server-side processing performed by us.

Depending on the device and crash, Crashlytics may process:

• crash stack traces and technical error information;
• relevant app state at the time of a crash;
• device model, operating-system version, app version, and similar technical metadata;
• a Crashlytics installation UUID; and
• a Firebase installation identifier used to support Crashlytics.

Camera input and intermediate pose or exercise-recognition data are never included in Crashlytics reports. We do not deliberately attach your name, email address, workout history, App Blocker selections, or content from other apps to Crashlytics reports. Crash information is used only to diagnose errors, prevent crashes, and maintain app stability. It is not used for advertising, profiling, or marketing.

Crashlytics data is processed by Google as our service provider and is retained only for as long as reasonably necessary for diagnostics and according to the applicable Firebase retention controls and terms. More information is available in Google's Firebase privacy and security documentation and Google Privacy Policy.

4. Optional GOLDEN Sports Account and cloud features

Creating a GOLDEN Sports Account is optional. If you create or sign in to a GOLDEN Sports Account, we process the information needed to provide GOLDEN Sports Account management, synchronization, social features, and notifications.

Depending on the features you use, this may include:

• your user ID, username, email address, authentication provider, and authentication information managed through Firebase Authentication;
• an optional profile photo;
• workout sessions, including exercise type, repetitions, sets, date, start and end time, duration, workout mode, and related workout statistics;
• workout plans, goals, achievements, streaks, badges, challenge progress, and leaderboard results;
• group memberships, group activity, invitations, messages, and other content you choose to submit;
• battle participation, match status, results, and information needed to connect participants;
• privacy and GOLDEN Sports Account settings; and
• information required to deliver functional notifications, as described in Section 5.

GOLDEN Sports Account and cloud data is processed through Google Firebase services, including Firebase Authentication, Cloud Firestore, Realtime Database, Cloud Storage, Cloud Functions, and related infrastructure.

We process this data only to:

• create, authenticate, secure, and manage your GOLDEN Sports Account;
• synchronize your chosen data between devices and GOLDEN Sports-Apps;
• provide workout history, statistics, challenges, leaderboards, groups, battles, and related app features;
• store and display content you choose to provide;
• deliver requested notifications and time-sensitive app functionality;
• prevent misuse and maintain the security and reliability of the service; and
• provide support and comply with legal obligations.

We do not sell or rent this information. We do not use it for third-party advertising, behavioral advertising, or marketing profiles, and we do not share it with third parties for their own marketing purposes. Data is disclosed only to service providers needed to operate the requested functionality, when required by law, or to other users where this is inherent in a social feature you choose to use.

5. Functional notifications

If you have a GOLDEN Sports Account and notifications are enabled, we may store:

• a Firebase Cloud Messaging or Apple Push Notification token;
• your platform and app version;
• your selected app language; and
• your time zone and time-zone offset.

This information is used exclusively to route notifications to the correct device, send them in the appropriate language, apply time-dependent functionality correctly, maintain compatibility between app versions, and support features such as groups, challenges, battles, and messages related to your GOLDEN Sports Account.

Language, time zone, platform, app version, and notification-token information are collected for this technical functionality only. They are not used for advertising, profiling, or marketing. You can control notification permission in the app or in your device settings.

6. App Blocker

App Blocker is an optional feature in GOLDEN Push-Ups that allows you to select apps to block and complete a workout before receiving a short access window.

6.1 iOS

On iOS, App Blocker uses Apple's Family Controls, Managed Settings, and Device Activity technologies. You choose apps using Apple's system interface. Apple provides the app with opaque application tokens rather than ordinary app identifiers.

The selected tokens, your exercise mode, required repetitions, reward duration, optional daily limit, granted-time history, and temporary unlock state are stored locally in the shared app container required for the main app and its Screen Time extensions to work together.

We do not receive the names or bundle identifiers represented by Apple's opaque tokens. We do not receive detailed Screen Time reports and do not read what you view or do inside a blocked app. App Blocker settings and granted-time history are not uploaded to our servers.

You can disable App Blocker in GOLDEN Push-Ups or revoke Screen Time authorization through the applicable iOS system settings.

6.2 Android

On Android, App Blocker locally reads the list of launchable apps installed on your device so that you can choose which apps to block. The package names and display names of apps you select, along with your blocker settings and granted-time history, are stored locally on your device.

If you enable Android Accessibility access for App Blocker, GOLDEN Push-Ups processes the foreground-app signal needed to detect when a selected app is opened and to display the blocker. This processing takes place on your device.

We do not collect or read screen contents, messages, passwords, typed input, browsing activity, or what you view or do inside other apps. Accessibility information and your list of selected blocked apps are not transmitted to our servers or used for analytics, advertising, profiling, or marketing.

You can disable App Blocker in GOLDEN Push-Ups or revoke Accessibility access through the applicable Android system settings.

6.3 App Unlock workouts

An exercise completed to unlock an app is a real workout and is saved as a mixed workout session. If you are signed in and workout synchronization is active, the workout may be synchronized in the same way as another mixed workout. If you have enabled Health Connect, HealthKit, Strava, or Google Calendar export, it may also be exported according to those settings. The locally selected blocked apps are not included in the workout record or export.

7. Use of Health Connect by Golden Sports Apps

Our app integrates with Health Connect by Android to securely share your workout data. This integration allows us to store your exercise data, including:

• Exercise Type: The type of exercise performed (e.g., push-ups).
• Start and End Time: The duration of the exercise session.

7.1. Data Usage

The exercise data is written to Health Connect at the end of a workout to help you track and manage your fitness activities.

Sharing this data with Health Connect is optional. If you choose not to grant permissions or decline the option within the app, no data will be shared.

Our app does not read or access any data stored in Health Connect, nor does it share data with any third parties.

7.2. User Control

You have complete control over the data stored in Health Connect. You can manage, review, or delete data directly through the Health Connect app settings.

If you revoke permissions or opt not to enable this feature, no data will be written to Health Connect.

8. Apple HealthKit

Our iOS apps offer an optional integration with Apple HealthKit. If you enable this feature and grant permission, the app writes workout information to Apple Health at the end of a workout, such as the workout type, date, start and end time, duration, and available exercise information.

HealthKit access is used only to provide the health and fitness functionality you request. HealthKit information is not used for advertising, marketing, profiling, or data mining. If you do not grant permission or disable the integration, the app does not write new workout information to Apple Health.

You can manage or revoke Health permissions and delete data through the Health app or iOS settings.

9. Use of Google Calendar Data

Our apps offer an optional integration with Google Calendar. If you choose to connect your Google account, we request the following permissions:

• calendar.events — to create workout events in your Google Calendar.
• calendar.readonly — to read the list of your calendars so that you can select where workout events should be added.

We do not read, access, download, or store any of your existing Google Calendar events or event details.

9.1. Data Usage

If you enable Google Calendar integration:

• Our app creates calendar entries representing your workout sessions.
• We read only the list of your calendars so you can choose a target calendar.
• We do not use Google Calendar data for analytics, advertising, or profiling.
• All data processing occurs locally on your device.

9.2. Data Sharing and Disclosure

We do not share, transfer, sell, or disclose Google user data to any third party. We do not store Google Calendar data on any server.

9.3. Data Retention

We do not retain any Google Calendar data. Events created by the app remain only in your Google account and can be removed by you at any time.

9.4. User Control

You can disconnect Google Calendar access at any time within the app or revoke access through your Google Account settings: https://myaccount.google.com/permissions

10. Use of Strava Data

Our apps offer an optional integration with Strava. If you choose to connect your Strava account, we may transmit workout data from your device to your Strava profile. This integration is entirely optional and only occurs after you explicitly authorize it within the app and through Strava's OAuth workflow.

10.1. Data Collected and Transmitted

When you enable Strava integration, the app will send the following workout information to Strava:

• Exercise Type (e.g., push-ups, burpees, pull-ups)
• Workout Start and End Time
• Total Repetitions, Sets, and Duration
• Workout Metadata (such as max reps, interval type, and notes, if available)

We do not read, access, download, or store any data from your Strava account. The integration is strictly one-way: your workout data is uploaded to Strava, and nothing is retrieved from their platform.

10.2. Purpose of Data Transmission

Your workout information is sent to Strava solely to allow you to record your training sessions on your Strava profile. We do not use Strava data for analytics, advertising, personalization, or profiling.

10.3. Data Sharing and Disclosure

We do not share, sell, or disclose Strava user data to any third party. We do not store any Strava-related data on our servers. All processing happens locally on your device. Only the data necessary to publish your workout session to your Strava account is transmitted.

10.4. User Control and Revocation

You maintain full control over Strava integration. You can:

• Disconnect Strava at any time within the app, stopping all future data uploads.
• Revoke access at any time through your Strava account settings: https://www.strava.com/settings/apps

Once permissions are revoked, the app will no longer be able to create activities in your Strava account.

10.5. Data Retention

We do not store any Strava user data. Workout activities uploaded to Strava remain within your Strava account and can be modified or deleted there at any time.

11. Purchases and subscriptions

In-app purchases, subscriptions, renewals, refunds, and payment details are primarily processed by Apple through the App Store or by Google through Google Play. We do not receive your complete payment-card or bank-account details.

The apps process purchase status and entitlement information locally to determine which features are available. On Android, subscription verification may send the app package name, subscription product ID, and Google Play purchase token to a Firebase Cloud Function, which checks the subscription with the Google Play Developer API. This information is used only to verify the purchase, restore access, prevent entitlement errors or misuse, and provide the purchased functionality. It is not used for advertising or marketing.

11.1 Apple Ads measurement for GOLDEN Push-Ups on iOS

Purpose: We use Apple's AdServices attribution and verified App Store purchase information to understand which advertisements for GOLDEN Push-Ups lead to a first paid purchase. Reports distinguish monthly, yearly, and lifetime purchases and their recorded price and currency. Available campaign, ad-group, and keyword identifiers help us evaluate our own advertising. Missing attribution is not assumed to mean organic traffic. Purchase prices are not our bank payouts, net proceeds, or a complete record of subscription revenue and refunds.

Information involved: Measurement uses a randomly generated installation identifier, first measurement-open time, app version, available Apple Ads attribution identifiers and status, and related click or impression information. Verified purchase records contain product and transaction identifiers, purchase and verification dates, purchase classification, and recorded price and currency. Ownership, upgrade, and revocation information may be used to classify a transaction. A separate installation credential protects requests; it is not an account password and must not be sent by email.

Separate from accounts and fitness data: We do not join measurement records to a GOLDEN Sports Account, Firebase user ID, name, or login email address. Login and logout do not change the measurement identifier. This feature does not use workout history, camera input, recordings, pose information, HealthKit or Health Connect data, App Blocker selections, or content from other apps. We do not use IDFA, fingerprinting, or a mobile measurement partner for this feature. The attribution and purchase records are linked to an installation identifier, so they are pseudonymous rather than fully anonymous.

Processing and security: An AdServices token is exchanged with Apple through our backend. Signed purchase evidence is verified before it is included in reports. Apple and Google Firebase provide attribution, verification, device attestation, hosting, and storage services. Infrastructure services also process technical request information, such as IP addresses and request timing, to deliver and secure the service. We do not add these details to campaign or purchase reports. We do not retain raw AdServices tokens in measurement records or log signed purchase evidence. Pending signed evidence is stored in a protected, backup-excluded queue on the device and removed after processing, an explicit collection stop, or expiry when the app next runs.

Measurement is separate from purchase entitlement delivery: an unavailable or disabled measurement service does not prevent a purchase or access to purchased features. A backend collection control can stop new measurement capture and uploads. We do not sell measurement information, share it for other companies' marketing, or use it for cross-company advertising profiles.

Retention: Installation-linked measurement records expire 90 days after first measurement use. Expired records are excluded from reports and further processing; automated database cleanup removes them asynchronously, so physical removal may occur later. No long-term aggregate report is retained by the measurement backend after its source records expire. Exported reports contain aggregate figures and advertising identifiers, not installation or transaction identifiers. If identified records are deleted earlier, a minimal marker may remain until the original expiry to prevent delayed uploads from recreating them. Local collection stops when the measurement identity expires. Reinstalling the app does not cancel an App Store subscription or immediately delete server records.

Privacy questions: Contact mail@goldensportsapps.com about this measurement or your privacy rights. We cannot find installation-linked records from your name or login email address alone, and we do not collect additional identity information merely to identify you. If you provide information that enables us to locate relevant records and verify a request, we will assess and handle it as required by applicable law. If we cannot identify the relevant records, we will explain that limitation; automatic expiry still applies. Please do not send passwords, installation credentials, full signed purchase evidence, or payment-card details. Support correspondence is handled separately. Contacting us does not automatically change app settings, delete an account, or cancel a subscription.

12. Public and social information

If you use leaderboards, groups, battles, challenges, or similar social functionality, information necessary for that feature may be visible to other users. Depending on the feature and your privacy settings, this can include your username, profile photo, workout achievements, scores, challenge progress, group activity, battle results, or messages you choose to post.

Workout achievements may be displayed on a public leaderboard by default where that behavior is currently offered. You can use the GOLDEN Sports Account privacy settings to prevent your profile and achievements from being displayed publicly. Information shared within a group or battle remains visible to the participants for whom the feature is intended.

Please do not submit information that you do not want the intended recipients to see.

13. Website analytics with Umami

Our website uses Umami Cloud to understand, in aggregate, how the website is used and to improve its content and reliability. Umami processes limited technical information such as page views, visited page paths, referrer, browser, operating system, device type, language, screen size, and approximate country or region.

Umami does not use cookies in its standard tracking code and does not track visitors across unrelated websites. The IP address associated with a request may be used to derive approximate location and an anonymous session but, according to Umami, the IP address itself is not stored.

We do not use Umami data for advertising or marketing profiles and do not send Umami your GOLDEN Sports Account information, workout information, App Blocker settings, or contact details. More information is available in Umami's documentation.

14. Service providers and data disclosure

We use service providers only where necessary to operate the apps, website, and features you request. The relevant providers can include:

• Google and Firebase for authentication, databases, cloud storage, cloud functions, crash diagnostics, installation services, notifications, purchase verification, Google Calendar, and Health Connect;
• Apple for App Store purchases, push notifications, Sign in with Apple, HealthKit, and Screen Time technologies;
• Strava for the optional Strava integration; and
• Umami Cloud for privacy-focused website analytics.

These providers process information according to their own terms and privacy obligations and, where they act on our behalf, only for the service purposes for which they are engaged.

The app's use and transfer of information received from Google APIs complies with the Google API Services User Data Policy, including its Limited Use requirements.

We do not sell or rent personal data. We do not disclose personal data to third parties for their own advertising or marketing. We may disclose information when required by law, necessary to protect users or the service, or as part of a transaction involving the business where permitted by law and subject to appropriate safeguards.

15. Legal bases

Where the General Data Protection Regulation applies, we process personal data on one or more of the following legal bases:

• performance of a contract or steps requested before entering a contract, where processing is needed to provide a GOLDEN Sports Account, purchased functionality, cloud synchronization, or another feature you request;
• your consent, where you choose to enable an optional integration, permission, or other consent-based feature;
• our legitimate interests in securing, maintaining, diagnosing, and improving the reliability of the apps and website, provided those interests are not overridden by your rights; and
• compliance with a legal obligation.

Where explicit consent is legally required for health-related information, we rely on that consent. You can withdraw consent or revoke a permission at any time. This does not affect processing that was lawful before withdrawal.

16. International processing

Some service providers, including Google, Apple, Strava, and Umami, may process information in countries outside Germany or the European Economic Area. Where required, such processing is protected through an adequacy decision, the EU–US Data Privacy Framework where applicable, Standard Contractual Clauses, or another legally recognized transfer mechanism.

17. Security

We use reasonable technical and organizational measures designed to protect personal data from unauthorized access, alteration, disclosure, or loss. Information stored locally is also protected by the security mechanisms provided by your device and operating system. No system can guarantee absolute security.

18. Retention and deletion

Information stored only on your device remains there until you delete it through the app, delete the relevant system data, or uninstall the app, subject to operating-system backups and the behavior of optional external services.

GOLDEN Sports Account data is retained while your GOLDEN Sports Account is active and as needed to provide the service. When you delete your GOLDEN Sports Account using the Delete Account function in the app, Firebase Authentication deletion triggers removal of the associated private cloud data, profile image, leaderboard data, group references, and battle data handled by our cleanup services. Deletion from active systems may take a reasonable period to complete, and limited copies may remain temporarily in service-provider backups or logs before being removed under the provider's retention process.

Data sent to Apple Health, Health Connect, Google Calendar, or Strava remains under your control in the respective service and may need to be deleted there separately. Deleting a GOLDEN Sports Account does not automatically cancel an App Store or Google Play subscription; subscriptions must be managed through the relevant store.

You may also contact us at mail@duechtel.com to request access, correction, or deletion. We may retain limited information where required by law or necessary to establish, exercise, or defend legal claims.

19. Your rights

Subject to applicable law, you may have the right to:

• request access to personal data concerning you;
• correct inaccurate or incomplete data;
• request deletion of your data;
• restrict or object to processing;
• receive data you provided in a portable format where applicable;
• withdraw consent at any time; and
• lodge a complaint with a competent data-protection supervisory authority.

To exercise these rights, contact mail@duechtel.com. We may need to verify your identity before fulfilling a request.

20. Children

We do not knowingly collect GOLDEN Sports Account information from a child who cannot legally consent to the processing under applicable law without the authorization required from a parent or guardian. If you believe that a child has provided personal data unlawfully, please contact us so that we can investigate and take appropriate action.

21. Changes to this Privacy Policy

We may update this Privacy Policy when the apps, website, service providers, or legal requirements change. The current version and its effective date will be published on this page. Material changes will be communicated where required by law.

22. Contact

For questions, privacy requests, or concerns about this Privacy Policy, contact: