Privacy Policy

Last updated: February 1, 2026

1. Introduction

Welcome to Konia ("we," "our," or "us"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application Konia (the "App").

Konia is operated by Mattis Perrot, an individual based in Switzerland. We are committed to protecting your privacy and handling your data in an open and transparent manner.

By using the App, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access the App.

2. Contact Information

For any questions or concerns regarding this Privacy Policy or our data practices, please contact us at:

Email: support@konia.app

3. Age Requirements

Konia is not intended for users under 16 years of age. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at support@konia.app. If we discover that a child under 16 has provided us with personal information, we will delete such information from our servers promptly.

4. Information We Collect

4.1 Information You Provide Directly

When you use Konia, you may provide us with the following information:

  • Account Information: Full name, email address, password, and profile photo
  • Profile Information: Instagram username (optional)
  • Club Information: Club name, description, logo, website, email, Instagram username, and invite code (for club administrators)
  • Training Data: Training sessions you create or participate in, including title, type, date, time, location, description, equipment lists, and GPX route files
  • Race Data: Races you create or participate in, including title, type, date, location, description, and website links
  • Participation Data: Your participation status in trainings and races

4.2 Information Collected Automatically

When you use the App, we automatically collect certain information:

  • Device Information: Device type, operating system, unique device identifiers
  • Usage Data: App features used, interaction patterns, session duration, and crash reports
  • Analytics Data: Through Firebase Analytics (which includes Google Analytics), we collect anonymized usage statistics to improve our services

4.3 Information from Third Parties

We use Firebase Authentication for account management. If you sign in using third-party providers (such as Google or Apple), we may receive basic profile information from these services according to your privacy settings with them.

5. How We Use Your Information

We use the information we collect to:

  • Create and manage your account
  • Enable you to join and participate in sports clubs
  • Allow club administrators to manage trainings, races, and members
  • Send push notifications about trainings, races, and club activities (you can opt out in your device settings)
  • Analyze app usage to improve features and user experience
  • Detect, prevent, and address technical issues
  • Comply with legal obligations

We do not use your information to send marketing emails.

6. Data Storage and Security

6.1 Storage

Your data is stored using Firebase services provided by Google. We have configured our primary data storage in Switzerland to maximize data protection for our users:

  • Cloud Firestore: Stored in Zurich, Switzerland (europe-west6) — this includes your profile data, club information, trainings, races, and participation records
  • Cloud Storage: Stored in Zurich, Switzerland (europe-west6) — this includes profile photos, club logos, and GPX route files
  • Firebase Authentication: Managed by Google's global infrastructure for secure account management
  • Firebase Analytics / Google Analytics: Processed in the United States for usage analytics

Your core personal data and content remain stored in Switzerland. However, some data (authentication and analytics) may be processed on servers located outside Switzerland, including in the United States. By using the App, you consent to the transfer of this information to these locations.

6.2 Security Measures

We implement appropriate technical and organizational measures to protect your personal data, including:

  • Secure authentication mechanisms
  • Encrypted data transmission (HTTPS/TLS)
  • Access controls and security rules on our database
  • Regular security reviews

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security.

7. Data Sharing and Disclosure

7.1 Within the App

  • Your profile name and photo are visible to other members of clubs you join
  • Club administrators can see member information for their clubs
  • Your participation in trainings and races is visible to other participants

7.2 Third-Party Service Providers

We share data with the following service providers who assist in operating the App:

  • Google/Firebase: For authentication, database, storage, and analytics services

These providers are bound by their own privacy policies and data processing agreements.

7.3 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency).

7.4 No Sale of Personal Data

We do not sell, trade, or rent your personal information to third parties.

8. Your Rights

8.1 For All Users

  • Access: Request a copy of the personal data we hold about you
  • Correction: Request correction of inaccurate personal data
  • Deletion: Request deletion of your personal data
  • Data Portability: Request a copy of your data in a portable format

8.2 For European Economic Area (EEA) Residents

Under the General Data Protection Regulation (GDPR), you have additional rights:

  • Right to Object: Object to processing of your personal data
  • Right to Restrict Processing: Request restriction of processing
  • Right to Withdraw Consent: Withdraw consent at any time where we rely on consent
  • Right to Lodge a Complaint: File a complaint with your local data protection authority

8.3 For Swiss Residents

Under the Swiss Federal Act on Data Protection (nDSG), you have similar rights to access, correct, and delete your personal data, as well as the right to request data portability.

8.4 For California Residents

Under the California Consumer Privacy Act (CCPA), you have the right to:

  • Know what personal information is collected
  • Know whether your personal information is sold or disclosed
  • Say no to the sale of personal information (note: we do not sell your data)
  • Access your personal information
  • Request deletion of your personal information
  • Equal service and price, even if you exercise your privacy rights

8.5 Exercising Your Rights

To exercise any of these rights, please contact us at support@konia.app. We will respond to your request within 30 days.

9. Account Deletion

You can delete your Konia account at any time through the App settings. When you delete your account:

  • Your profile information will be permanently deleted
  • Your participation records will be removed
  • Content you created as a club administrator may be retained for the benefit of other club members or deleted based on club settings

To delete your account, go to Profile > Settings > Delete Account, or contact us at support@konia.app.

10. Data Retention

We retain your personal data for as long as your account is active or as needed to provide you services. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal, accounting, or compliance purposes.

Analytics data is retained in anonymized form and may be kept indefinitely for statistical purposes.

11. Push Notifications

We may send push notifications to inform you about:

  • Upcoming trainings and races
  • Changes to events you're participating in
  • Club announcements from administrators

You can disable push notifications at any time through your device settings.

12. Third-Party Links

The App may contain links to third-party websites (such as club websites or race registration pages). We are not responsible for the privacy practices of these external sites. We encourage you to read the privacy policies of any third-party sites you visit.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by:

  • Posting the new Privacy Policy in the App
  • Updating the "Last updated" date at the top of this document
  • Sending a notification through the App for significant changes

We encourage you to review this Privacy Policy periodically for any changes.

14. International Data Transfers

Your core personal data (profile information, club data, trainings, races, and uploaded files) is stored in Switzerland (Zurich), which provides strong data protection under Swiss law and is recognized by the European Union as providing adequate data protection.

However, certain data is processed outside of Switzerland:

  • Authentication data may be processed on Google's global infrastructure
  • Analytics data is processed in the United States by Google Analytics

For data transferred to the United States, Google operates under appropriate data protection mechanisms. By using the App, you consent to these transfers. We ensure appropriate safeguards are in place to protect your data in compliance with applicable Swiss and EU laws.

15. Legal Basis for Processing (EEA and Switzerland)

If you are located in the EEA or Switzerland, we process your personal data based on:

  • Contract Performance: To provide you with the App services
  • Legitimate Interests: To improve our services and ensure security
  • Consent: For analytics and push notifications (where required)
  • Legal Obligation: To comply with applicable laws

Effective Date: February 1, 2026

© 2026 Mattis Perrot. All rights reserved.