Privacy Policy

VELOX ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how personal data is collected, used, stored, and protected when you use the VELOX mobile application, website, and related services (collectively, the "Platform").

Scope of This Policy

This Privacy Policy applies to: • The VELOX mobile application ("App") • The VELOX website ("Website"), if available • Features, tools, and services offered through the App and Website (the "Services") This Policy is provided for informational purposes under applicable data protection laws and does not form part of any contract.

Data Controller

For the purposes of the General Data Protection Regulation (EU) 2016/679 ("GDPR") and, where applicable, the UK GDPR, VELOX is operated by the entity responsible for the Platform (the "operator"), acting as the data controller for personal data processed through the Services. The operator's registered name and postal address are available on request via the privacy contact below. Privacy contact: support@velox.fitness

Failure to Provide Personal Data

Where personal data is required to create an account or provide core functionality, failure to provide such data may result in limited access to the Services or the inability to provide requested features.

Information We Collect

Personal Information

• Email address, name or preferred nickname, profile photo, date of birth, gender, and general location (country or region).

Sign-In & Authentication

If you register or sign in with a third-party provider (such as Google or Apple), we receive information that provider shares with us (for example, your email address and a provider user identifier), as permitted by your settings with that provider. We do not receive your third-party account password.

Fitness & Health-Related Data

As a fitness application, VELOX processes health-related data that you voluntarily provide, including workout sessions, training performance metrics, and exercise history.

Usage & Technical Data

We collect technical data such as app or website usage statistics, device and browser information, app version, and crash diagnostics to maintain and improve the Platform.

Notification Preferences

We store your push and email notification preferences to deliver communications. Notifications can be managed or disabled at any time.

Legal Basis for Processing (GDPR)

We process personal data under the following legal bases: • Contract (Art. 6(1)(b)) – to create and manage accounts and deliver Services • Consent (Art. 6(1)(a)) – for notifications and optional communications • Explicit Consent (Art. 9(2)(a)) – for health and fitness-related data • Legitimate Interests (Art. 6(1)(f)) – for analytics, security, and service improvement • Legal Obligation (Art. 6(1)(c)) – where required by law

Analytics & Crash Reporting

We use Firebase Analytics and Firebase Crashlytics to understand usage patterns and identify technical issues. These services process data in a pseudonymized form and are used solely to improve reliability and performance.

Cookies & Tracking Technologies

VELOX does not use advertising identifiers. Limited tracking technologies may be used for essential functionality and analytics. Where applicable, analytics features can be disabled through privacy or device settings.

Automated Decision-Making

VELOX does not make decisions based solely on automated processing that produce legal or similarly significant effects on users.

Data Sharing & Third Parties

We do not sell personal data. Data may be shared only with trusted service providers acting as data processors—for example Google (Firebase: Authentication, Firestore, Storage, Cloud Functions, Analytics, Crashlytics), Apple (Sign in with Apple, where used), and RevenueCat or app stores for subscription status and purchases—or where required to comply with legal obligations or protect vital interests.

International Data Transfers

Personal data may be processed outside your country of residence. Where data is transferred outside the EEA, we rely on appropriate safeguards such as Standard Contractual Clauses approved under GDPR.

Data Retention & Account Deletion

You may delete your account at any time from within the App. Upon deletion, personal data is removed from active systems and deleted from backups within a reasonable retention period, unless retention is required by law.

Information Security

We implement appropriate technical and organizational measures, including encryption and access controls, to protect personal data. No system can be completely secure.

Children's Privacy

VELOX is not intended for children under the age of 13. We do not knowingly collect personal data from children.

Your Rights (GDPR / UK GDPR)

You have the right to access, correct, delete, restrict, or object to the processing of your personal data, as well as the right to data portability and to withdraw consent at any time. Where we process data based on legitimate interests, you may object on grounds relating to your situation. Requests can be made by contacting support@velox.fitness. You also have the right to lodge a complaint with a supervisory authority in the European Economic Area or the UK, in particular in the member state or territory where you habitually reside, work, or where an alleged infringement occurred.

California & Similar U.S. State Privacy Laws

If you are a resident of California or another U.S. state with comparable privacy laws, you may have additional rights regarding access, deletion, and correction of personal information, and to opt out of certain types of processing. We do not sell personal information or share it for cross-context behavioral advertising as defined under the California Consumer Privacy Act (CCPA), as amended. To exercise applicable rights, contact support@velox.fitness.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Updates will be reflected by revising the "Last updated" date.

Contact Us

For privacy-related questions or requests, contact us at: support@velox.fitness