MYBOSPARK · iOS & Android
Privacy
Updated: 28 September 2026
1. Controller and scope
The controller is Gorden Losse, Dietrich-Bonhoeffer-Str. 32, 40595 Düsseldorf, Germany. Contact: info@mybospark.de. This notice covers this website, voice downloads and MYBOSPARK for iOS and Android. Features and permissions can vary by operating system, device and app version.
2. App data and purposes
Depending on use, the app processes profile details (such as age, height, weight and an optional photo), training plans, confirmed sets and activities, progress values, notes and settings. This can include authorised health data, Bluetooth heart-rate readings and location/route data during an outdoor recording you start. The purposes are the training planning, recording and analysis you choose. The app currently includes no advertising or analytics SDKs of its own. There is no automatic training-data cloud sync operated by us.
3. Health access: iOS and Android
Supported health access uses Apple Health/HealthKit on iOS and Health Connect on Android, where supported by the version and device. Depending on the feature, authorised heart-rate, body-weight, height, calorie and workout data is read. App settings and the system dialogue show the requested scope. Apple Health is not an Android feature. A system permission dialogue is not equivalent to a complete record of data-protection consent.
4. Legal bases and your choice
Non-health functional data necessary for the selected service is processed for performance of the contract (GDPR Article 6(1)(b)). Optional health processing requires explicit consent (Articles 6(1)(a) and 9(2)(a)). Optional location and notification features require your authorisation. Without the required permission, the relevant additional feature is unavailable; manual training features are separate. This privacy notice does not itself grant consent.
5. Withdraw permissions and forget sensors
You can restrict or revoke health access in Apple Health or Health Connect, and other permissions in app or system settings. Withdrawal applies to future processing and does not retroactively invalidate earlier lawful processing. Previously imported data is not automatically removed: also use the deletion controls. Optional reconnection to a known Bluetooth sensor stores its identifier, name and your reconnection preference locally; use “Forget” to remove this association. We do not promise compatibility with every watch or chest strap.
6. Website and voice downloads
The website and voice packs are provided through Cloudflare Pages and R2 (Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA, and associated service providers). Requests involve IP address, time, requested resource and technical browser/device information. The purpose is service delivery and security, based on Article 6(1)(f), and Article 6(1)(b) for downloads you request. These connection data mean a download is not anonymous. Packs contain general audio content, not personal training data. Installed voices can be used offline.
7. Recipients and international processing
Cloudflare may process connection data outside the EEA. Its contractual privacy and transfer provisions are described in the Cloudflare Data Processing Addendum, including standard contractual clauses under the conditions stated there. See its privacy policy for Cloudflare’s own processing. Apple and Google independently process data when distributing apps and providing platform services. Email, cloud and sharing services you select may also receive data. The app does not use health data for advertising or sell it.
8. Local storage, backups and deletion
App data is stored in the device’s app area. Protection also depends on the operating system, screen lock and your settings; absolute security is not promised. Automatic operating-system backups or device transfers may contain copies depending on platform and settings; in particular, the reviewed Android project allows system backup. Exported backups may contain health data and are not additionally password-protected merely by exporting them. Choose secure destinations. Deletion in the app does not remove recipients’ copies, system/cloud backups or data in Apple Health/Health Connect. Review and delete those separately where necessary.
9. Retention
Local training and profile data remains until you delete it. Downloaded voice packs remain until removed. Exports and system backups depend on your selected services and settings. Technical connection-data retention depends on the Cloudflare services and security/logging functions used; we currently cannot state a single verified fixed deletion period. Relevant criteria are necessity for delivery, troubleshooting, security and investigation of specific incidents where applicable. We do not promise indefinite retention of consent records.
10. Contact, external links and preferences
When you email us, we process your address, message and voluntary details to handle your request (Article 6(1)(b) or (f)). Please do not send unnecessary health data. Messages are kept only as long as needed for handling the request and, where applicable, legal retention or claims. External linked sites are contacted only when opened. Fonts and images are embedded locally. There are no advertising/analytics cookies of our own. The light/dark switch applies only to the current page; language is selected through the URL without persistent browser storage.
11. Your rights
Subject to legal conditions, you can request access, correction, deletion, restriction and portability. You may object to legitimate-interest processing on grounds relating to your situation, and withdraw consent at any time for the future. Contact info@mybospark.de. We have no server copy of exclusively local data; many rights can be exercised in the app. You may complain to a supervisory authority, including LDI North Rhine-Westphalia. No solely automated decisions with legal or similarly significant effects are made; training scores provide guidance.
12. Minors, groups and changes
The app is not specifically directed at children under 16. Required permissions and supervision must be observed for minors; group mode does not replace them. Do not put participant names or other people’s health data into shared plans. This notice is updated when features or services change. Check the functionality described in the relevant store and supplementary permission notices.