Privacy Policy

1. Controller

The controller responsible for data processing under the GDPR is:
yeeylo UG (haftungsbeschränkt)
Goerdelerstraße 29, 18069 Rostock, Germany
Email: jonas@yeeylo.com

2. What data we process

When you use AKIRO, we process in particular:

• Body data (age, height, weight, measurements, body fat estimate) you enter voluntarily during onboarding
• Training and nutrition data you provide while using the app's features
• Progress photos, if you choose to use that feature
• Usage and device data (technically necessary, e.g. operating system, app version)
• Account and contact data (email address, and payment data if you subscribe)

3. Purposes & legal basis

Processing takes place to provide the app's functionality (Art. 6(1)(b) GDPR, contract performance), to fulfil legal obligations (Art. 6(1)(c) GDPR), and, where you have consented, on the basis of your consent (Art. 6(1)(a) GDPR), e.g. for push notifications or optional analytics.

4. Special categories of personal data

Body fat, weight and other health-related figures may qualify as health data under Art. 9 GDPR. We process this data exclusively on the basis of your explicit consent (Art. 9(2)(a) GDPR), given during onboarding and revocable at any time.

5. Disclosure to third parties

As a general rule, we do not sell or pass on your personal data to third parties. Data is only shared with processors strictly bound by a data processing agreement under Art. 28 GDPR where technically necessary to operate the App — for example a hosting provider or, if you purchase a subscription, a payment processor to complete the transaction. These processors may not use your data for their own purposes.

5a. Payment & transaction data

If you purchase a subscription, payment itself is handled by the respective app store (Apple App Store / Google Play) or a payment processor — we do not receive or store your full card details. We only receive transaction-level data (e.g. purchase date, plan, subscription status), which we use solely to manage your subscription, provide support and evaluate app performance internally (e.g. conversion analysis). This data is not used for third-party advertising and is not disclosed beyond what is required for the transaction itself.

6. Retention period

We store personal data only for as long as necessary for the purposes stated above, or as required by law. After account deletion, data is deleted or anonymized within [insert timeframe], unless retention obligations apply.

7. Your rights

You have the right to:

• Access the data we hold about you (Art. 15 GDPR)
• Rectify inaccurate data (Art. 16 GDPR)
• Request erasure (Art. 17 GDPR) or restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Object to processing (Art. 21 GDPR)
• Withdraw consent at any time, with effect for the future
• Lodge a complaint with a data protection supervisory authority

8. Cookies & tracking

This website uses technically necessary cookies. Should analytics or marketing tools be used, this only happens with your consent via a cookie consent banner. Tools in use (e.g. Google Analytics, Meta Pixel) to be named here once finalized.

9. Privacy contact

For any privacy-related questions, contact: privacy@akiro.app