Privacy Policy

1. Who We Are

Athle ("Athle", "we", "us", or "our") is a fitness and rewards platform operated by:

For the purposes of applicable data protection law, Diego Ugolini is responsible for the processing of personal data described in this Privacy Policy.

2. Scope

This Privacy Policy applies to the Athle mobile application, getathle.com and related Athle services.

It explains what personal data we collect, why we process it, how it may be shared and what rights you have.

3. Minimum Age

Athle is intended for users aged 16 years or older.

You may not create or use an Athle account if you are under 16.

4. Information We Collect

Account Information
When you create an Athle account, we may process:

• Email address
• Username
• Authentication identifiers
• Account settings
• Country or region where required

Accounts may be created using email, Sign in with Apple or Google Sign-In.

When using a third-party sign-in provider, we receive only information made available to Athle in accordance with your settings and permissions.

Fitness and Health Information
If you choose to connect Apple Health/HealthKit, Athle may request permission to access specific categories of health and fitness information, including:

• Step count
• Walking and running distance
• Active calories
• Workout information
• Sleep information
• Heart-rate information

Health and fitness data is used to provide Athle's fitness functionality, including activity tracking, progress, challenges, seasons and eligible competitive features.

Athle requests HealthKit permissions on a data-type basis. You can decline individual permissions or revoke previously granted permissions through Apple's system settings. Apple itself requires HealthKit apps to request fine-grained permission for individual data types.

Location Information
Where a feature requires it and you grant permission, Athle may process location or GPS information, for example in connection with eligible distance- or route-based activity.

Athle will request device permission before accessing location information where required.

Athle Activity
We process information generated through your use of Athle, including:

• Season Points (SP)
• SHP
• Levels
• Achievements
• Season progress
• Rankings
• Streaks
• Daily and weekly challenge progress
• Matchfinder participation
• Match results
• Reward eligibility and redemptions

Technical and Diagnostic Data
Athle uses Firebase services provided by Google.

Depending on the service and configuration, information processed may include device and app information, installation identifiers, usage events, crash information and diagnostic information.

Firebase Crashlytics, for example, processes crash traces and identifiers to diagnose crashes. Google states that Firebase services can process information using global infrastructure, while Firebase Authentication is operated from US data centres.

5. Why We Process Your Information

We process information as necessary to:

• Create and authenticate your account
• Provide Athle's fitness functionality
• Track activity and progress
• Calculate SP and SHP
• Operate seasons and levels
• Provide achievements and streaks
• Operate rankings and leaderboards
• Provide daily and weekly challenges
• Operate Matchfinder
• Determine challenge and match results
• Provide rewards
• Detect manipulation, cheating and fraud
• Maintain security
• Diagnose crashes
• Understand and improve the performance and use of Athle
• Provide support
• Comply with legal obligations

Where required under applicable law, sensitive information such as health data is processed based on your explicit consent or another applicable legal basis. Health data receives special protection under the GDPR.

6. Apple HealthKit

Athle treats HealthKit information as sensitive.

Athle does not sell HealthKit information.

Athle does not use HealthKit information for advertising, marketing or advertising profiling.

Athle does not provide brands with access to your HealthKit data.

Apple expressly prohibits using HealthKit-derived information for advertising, marketing or similar data mining.

We only request HealthKit information necessary for functionality that Athle actually provides.

7. Public Information

Athle includes competitive and social functionality.

The following information may be publicly visible to other Athle users:

• Username
• Rank
• SP
• Level
• Achievements
• Leaderboard position
• Selected challenge or competition results

Your underlying health information, such as sleep history, heart-rate history or GPS history, is not publicly displayed by default.

Matchfinder
When you voluntarily participate in Matchfinder, information required to display and determine the relevant competition may be visible to your opponent.

This can include the applicable challenge metric, your progress and the final result.

Participation in a Matchfinder challenge does not give another user general access to your HealthKit data.

8. Rewards and Partners

Athle may offer rewards provided by Athle or independent brands, gyms and other partners.

Rewards may include:

• Discounts
• Coupons
• Products
• Experiences
• SP
• SHP
• Other benefits

We may share information necessary to validate or fulfil a reward with the relevant provider where necessary and legally permitted.

HealthKit data is not shared with brands for advertising or marketing purposes.

9. Service Providers

Athle currently uses or plans to use the following infrastructure:

Google Firebase — authentication, backend/database functionality, analytics and crash reporting.
Vercel — website hosting and infrastructure.
Zoho — business email.
Apple — Sign in with Apple and HealthKit integration.
Google — Google authentication and Firebase services.

These providers may process limited information necessary to provide their respective services.

Vercel, for example, provides contractual data-processing terms addressing security, subprocessors and international processing.

10. International Data Transfers

Athle is operated from Switzerland but uses technology providers operating internationally.

Your information may therefore be processed outside Switzerland or the European Economic Area.

Where required, appropriate safeguards are used for international transfers.

11. Analytics

Athle uses Firebase Analytics to understand how the application is used and to improve performance and functionality.

HealthKit information will not be used for advertising or marketing analytics.

Website Analytics
getathle.com logs aggregate pageview counts to understand how the site is used, broken down only by the page visited and the visiting country (derived from network-routing information, not stored individually). We do not use cookies, IP addresses, or any third-party analytics or advertising service for this, and no individual visitor can be identified from this data.

Waitlist
If you submit your email address through a "Join Waitlist" form on getathle.com, we store that email address solely to notify you about Athle's launch. You can ask us to remove it at any time by contacting us below.

12. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Policy or as required by law.

Retention periods may vary depending on the category and purpose of the information.

When an account is deleted, associated personal information will be deleted or anonymised within a reasonable period unless continued retention is required for legal, security, fraud-prevention or other legitimate reasons.

13. Account and Data Deletion

You may request deletion of your Athle account and associated personal information.

Deletion requests can be submitted through available in-app functionality or by contacting:

partners@getathle.com

Apple requires apps collecting user data to explain their retention/deletion policy and how users can revoke consent or request deletion.

14. Your Rights

Depending on where you live, you may have rights to:

• Access your personal information
• Correct inaccurate information
• Request deletion
• Restrict certain processing
• Object to certain processing
• Withdraw consent
• Receive certain information in portable form
• Lodge a complaint with a competent data protection authority

Consent can be withdrawn for future processing without affecting processing that lawfully occurred before withdrawal.

The Swiss FADP also provides rights relating to access, correction and deletion of personal data.

Requests can be submitted to partners@getathle.com.

15. Security

We implement reasonable technical and organisational safeguards designed to protect personal information.

However, no electronic storage or transmission system can guarantee absolute security.

16. Future Integrations

Athle may later support additional fitness platforms, wearables or applications.

If these integrations materially change how personal information is collected, processed or shared, this Privacy Policy will be updated before or when those features become available, as required.

17. Changes to This Policy

We may update this Privacy Policy as Athle develops or legal requirements change.

Material changes will be communicated through appropriate means.

18. Contact

For privacy questions or requests: