Privacy Policy

Data categories at a glance

A quick overview of what we process about you. Details for each category are below.

Identity and contact data

Name, email, phone, your role in the club.

Club and membership data

Membership, groups, attendance, progress and belts.

Payments and billing

Payment, invoice and outstanding-balance records.

Health and nutrition data

Only if you turn it on via Apple Health / Health Connect or the nutrition diary.

Technical and device data

App version, platform, device type.

Product analytics

Pseudonymous, no name, email or IP address.

Who controls the service

The service is operated by STEAMO s. r. o., Company ID 57 713 812, with its registered office at Ul. F. Hečku 4261/60, 934 01 Levice, Slovak Republic. For privacy questions, contact us at hello@steamo.eu or through the contact form on our website.

Data we process

We process mainly identity and contact details of club administrators, coaches and members, organization data, membership data, attendance, payments, billing, service communications and technical data needed to operate and secure the service.

If a club records data about minors, we handle that data only as needed to provide the service to the club and according to instructions from authorized club representatives.

How we use data

We use data to create and manage accounts, provide app features, manage members, attendance and payments, communicate with customers, issue invoices, provide support, protect the service from abuse and improve the product.

Legal basis

We process data mainly to perform a contract or pre-contractual steps, comply with legal obligations, protect legitimate interests and, where required, based on consent.

Health and nutrition data (Apple Health / Health Connect)

If you connect Apple Health or Health Connect in the mobile app, STEAMO may import activity, body-weight and blood-pressure data. We also process nutrition-diary entries, goals and body measurements that you enter directly in the app. Connecting a health service is always optional and is used solely to show your progress within STEAMO.

We do not use health or nutrition data for advertising or marketing profiling, and we do not share it with third parties for commercial purposes. The legal basis for this processing is your consent, given by connecting a health service or by entering data directly in the app.

You can disconnect at any time under Nutrition – Settings – Connected health services. Disconnecting deletes the activity, body-weight and blood-pressure data STEAMO imported; original records in Apple Health or Health Connect are unaffected. You can delete individual nutrition-diary entries in the app; you may request deletion of all nutrition, activity, weight, blood-pressure or goal data at any time by emailing hello@steamo.eu.

We retain this data for as long as you use the feature. After you disconnect a health service, or at your request, we delete or irreversibly anonymize it, except to the extent retention is required by law.

Mobile app product analytics

To measure feature usage and reliability and improve the mobile app, we may process limited pseudonymous usage data. For this first-party purpose, STEAMO s. r. o. determines the purposes and means of processing. The legal basis is our legitimate interest under Article 6(1)(f) GDPR in improving the usability, stability and functionality of the service.

An analytics event may include an app open or resume, a stable product screen name, a selected navigation or successful product action (for example submitting a membership renewal, event registration or support request, completing a payment, or opening a payment gateway), the feature used, a technical API route template without actual identifiers or content, the HTTP method and outcome, a coarse response-time range, a general role group, one-way pseudonymous account and branch identifiers, the app version and build, platform, operating system version, non-unique device model code, a random analytics event ID, environment and event time.

We do not send the user's name, email address, phone number, original account identifier, actual API route parameters, request or form content, screen content, UI text, coordinates or arbitrary raw taps, user IP address, user-agent, user-assigned device name, serial number, advertising identifier or device identifier to product analytics. We do not use autocapture, session replay, cross-app or cross-site tracking, advertising profiling or automated decision-making.

We use PostHog Inc. as a processor in PostHog EU Cloud under a data processing agreement. We do not create person profiles for these events and retain them for no longer than 12 months. Where processing outside the EEA is necessary to a limited extent, contractual and other appropriate GDPR safeguards apply.

You may object to this processing at any time by turning off Product analytics in the mobile app under Settings – Privacy or by contacting hello@steamo.eu. Turning it off stops new collection for the whole sign-in account. You can request deletion of existing pseudonymous analytics data at the email address above.

Who we share data with

We process payments and billing through Stripe. Pseudonymous product analytics is processed by PostHog Inc. (PostHog EU Cloud). We may also share data with trusted hosting, authentication, email, push-notification and customer-support providers that help us operate the service.

We do not sell personal data. We choose providers with appropriate technical and organizational safeguards that process data only on our instructions.

Retention

We keep data while the service is being used and afterwards only for as long as needed to comply with legal duties, resolve claims, maintain security and keep audit records. Billing and accounting records are kept for the statutory period, generally 10 years. Data that is no longer needed is deleted or anonymized.

Your rights

You may request access to your personal data, correction, deletion, restriction, portability, object to processing and lodge a complaint with a supervisory authority.

If STEAMO processes data on behalf of a specific club, some requests may need to be handled by that club as the data controller. You can request account or data deletion directly in the app or on the Delete account page.

Cookies and technical data

The website and app may use necessary cookies or similar technologies for login, security, language settings and core service functionality. Analytics or marketing technologies are used only in line with applicable rules and your cookie settings.

Security

We use appropriate technical and organizational measures to protect data against unauthorized access, loss, misuse or alteration. Access to data is limited to people and systems that need it to provide the service.

Changes to this policy

We may update this policy when the service, legal requirements or processing practices change. The current version is always available on this page.