Privacy Policy

Data Controller:

Felix Hermanutz
Herrenstraße 2, Top 20
4020 Linz
AT - Austria
felix@youb.app

1. Identity and Contact Details of the Data Controller

The data controller for your personal data is Felix Hermanutz, operating as a sole proprietor. If you have any questions or concerns about this Privacy Policy or your personal data, please contact us at:
Felix Hermanutz
felix@youb.app

2. Purpose of Data Processing

YOUB processes your personal data (including health-related data) to provide personalized training and health insights. This includes analyzing metrics such as heart rate, sleep patterns, activity levels, and recovery indicators obtained from third-party wearable platforms, and combining them with your training plan and schedule to support training recommendations and planning.

3. Legal Bases for Processing

We process your personal data based on the following legal grounds:

• Article 6(1)(a) GDPR: Article 6(1)(a) GDPR: Your explicit consent to process personal data for the purpose of providing personalized health insights and training planning features.
• Article 9(2)(a) GDPR: Article 9(2)(a) GDPR: Your explicit consent to process special categories of personal data, including health data.

4. Source and Categories of Personal Data

We collect the following categories of personal data from third-party wearable platforms such as Garmin, Whoop, and Suunto (depending on what you connect and authorize):

• Heart rate
• Activity data
• Sleep patterns
• Activity levels
• Recovery indicators
• Other health-related metrics provided by connected platforms

5. Google User Data (Google Calendar Integration – Full Scope)

YOUB integrates with Google Calendar to support training planning and schedule synchronization. We use full calendar access (Google Calendar full scope) to provide the requested functionality. In compliance with the Google API Services User Data Policy, we are transparent about how we access, use, store, and share Google user data.

5.1 Data Accessed

If you explicitly connect your Google account, YOUB may access and manage Google Calendar data via the Google Calendar API full scope, limited to the minimum necessary to provide calendar synchronization. This may include:

• Calendar metadata (e.g., calendar ID and calendar name)
• Calendar events (only event fields required for scheduling and synchronization), such as event title/summary, description, start time, end time, recurrence information (if applicable), and event updates

YOUB does not access Google data such as emails, contacts, files/documents, or any other Google services unrelated to calendar scheduling.

5.2 Data Usage

We use Google Calendar data only for the following purposes:

• Export training sessions: Create or update planned training sessions from YOUB in your Google Calendar (so your training plan appears in your schedule).
• Import schedule availability: Read existing calendar events to optimize training planning around your availability (e.g., work commitments, travel, appointments).

We do not use Google Calendar data for advertising, profiling, market research, or resale.

5.3 Data Storage, Retention, and Deletion

• Google Calendar data is processed securely and stored only as long as necessary to provide the calendar integration features.
• You can disconnect Google Calendar at any time. After disconnection, YOUB no longer accesses your Google Calendar data.
• Any stored Google Calendar-related data is deleted upon account disconnection or upon your request, unless legal retention obligations apply.

5.4 Data Sharing

YOUB does not sell, rent, or share Google user data with third parties. Google user data may be processed by our infrastructure providers strictly as needed to operate the service (e.g., secure cloud hosting), and only under appropriate contractual safeguards (e.g., data processing agreements) and in compliance with applicable law.

5.5 User Control

You can control your Google Calendar connection in the following ways:

• Revoke access at any time via your Google Account settings (Third-party access / OAuth permissions).
• Disconnect Google Calendar within YOUB (if available in-app).
• Request deletion by contacting felix@youb.app.

6. AI and Machine Learning

YOUB uses artificial intelligence and machine learning to provide personalized training insights and recommendations. This may include analyzing your connected wearable data, training history, and preferences to tailor guidance.

Important clarification: Important clarification: Google user data accessed via Google APIs (such as Google Calendar data) is not used to train, improve, or develop generalized AI or machine learning models. Google Calendar data is used only to provide the calendar synchronization and scheduling functionality for your account.

7. Use of External Processors

YOUB uses modern cloud infrastructure and AI services to provide its functionality. Our processors include:

• Google Cloud Platform / Google Gemini: We use Google’s AI models to generate personalized training insights. Data processed via Gemini is handled under enterprise-grade privacy standards and is not used to train global models.
• Heroku & Railway: Our backend and frontend infrastructure are hosted on these platforms, with all data processing occurring on servers located within the European Union (e.g., Frankfurt, Germany or Dublin, Ireland).

We ensure that all processors provide appropriate technical and organizational measures (TOMs) and operate under GDPR-compliant Data Processing Agreements (DPAs).

8. Data Retention & Account Deletion (Apple Requirement)

We retain your personal data only as long as your account is active or as needed to provide you with our services.

• In-App Deletion: You can request the deletion of your account and all associated personal data directly within the app's settings.
• Manual Request: Alternatively, you can send an email to felix@youb.app with the subject "Data Deletion".

Once a deletion request is processed, your data will be permanently removed from our active databases within 30 days, unless legal retention obligations (e.g., tax laws) apply.

9. Data Subject Rights

You have the following rights regarding your personal data:

• Right of Access: You can request access to your personal data.
• Right to Erasure: You can request the deletion of your personal data.
• Right to Rectification: You can request the correction of inaccurate or incomplete data.
• Right to Object: You can object to the processing of your personal data.
• Right to Restrict Processing: You can request the restriction of processing your personal data.
• Right to Data Portability: You can request the transfer of your personal data to another controller.

To exercise any of these rights, please contact us at felix@youb.app. felix@youb.app.

10. International Data Transfers

We store and process personal data on GDPR-compliant infrastructure. Where data is processed by service providers, we ensure appropriate safeguards are in place (e.g., contractual protections, DPAs, and where applicable, EU Standard Contractual Clauses). We do not transfer your personal data outside the EU unless such safeguards are implemented and required by law.

11. Security Measures and Safeguards

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including encryption, access controls, least-privilege access, and regular security assessments.

12. Right to Lodge a Complaint

If you believe that we have not complied with GDPR, you have the right to lodge a complaint with a supervisory authority, particularly in the Member State of your habitual residence, place of work, or place of the alleged infringement.

13. Contact for Privacy Inquiries

If you have any questions or concerns about this Privacy Policy or your personal data, please contact us at:
Felix Hermanutz
felix@youb.app