Privacy Policy

This Privacy Policy describes how Dawid Szewczyk ("we", "our", "us") collects, uses, and protects your information when you use the application AuraTracker ("the App").

By using the App, you agree to the practices described in this Privacy Policy.

We may collect and process the following personal information:

• First name
• Last name
• Email address

We also temporarily store:

• JWT tokens (secure storage, encrypted)
• User session data (in app memory)

Your data is used for the following purposes:

• Creating and maintaining your account
• Providing access to the App’s features
• Authentication via Google OAuth
• Synchronizing activities via Strava API (if enabled)
• Support and service-related communication

We process your data based on:

• Article 6(1)(b) GDPR – necessary to perform the contract (provide services).
• Article 6(1)(a) GDPR – your consent, when connecting to third-party services (Google OAuth, Strava API).

Your personal data is securely stored on servers located in the United Kingdom (OVH, VPS).

Data is retained as long as your account is active. If you delete your account, all data will be erased within 30 days. JWT tokens and session data are removed when you log out or uninstall the App.

We do not sell or share your data with third parties for marketing. Data may only be shared with:

• Google OAuth – authentication
• Strava API – activity synchronization

These third parties operate under their own privacy policies.

The App is intended for users aged 14 and older. We do not knowingly collect information from children under 14. If such data is found, it will be deleted immediately.

You have the right to:

• Access your data
• Rectify inaccurate data
• Request deletion of your data ("right to be forgotten")
• Restrict processing
• Data portability
• Withdraw consent at any time (Google/Strava integrations)

We may update this Privacy Policy from time to time. Any changes will be communicated through the App or by email.