Privacy Policy
Last updated: · Deutsch
Who is responsible
Evenset is operated by the individual named in our Impressum, which has our full contact details. If you'd rather not open a second page: jmastalier.establishment@gmail.com.
What data we process
Evenset has no accounts and no login. Here's everything that touches your data, split by where it actually goes.
Stays on your device
- Workout history, in-progress session, theme, language, and the offline exercise cache
- Stored only in your browser's local storage. Never sent to us or anyone else. Clearing your browser data or using "Delete all data" in Settings removes it permanently — we have no copy.
Sent to our processors
- Exercise catalog
- A public, read-only list of exercises is loaded from our database (Supabase). No personal data is involved — this is a one-way, anonymous read.
- Feedback messages
- If you use "Send feedback" in Settings, the message you type plus a coarse browser/OS label (e.g. "Chrome on Android" — never your full browser fingerprint) is sent to our database. Don't include personal details; we can't reply.
- Anonymous usage analytics
- Vercel Web Analytics, cookie-free by design: it doesn't write any identifier to your device. It derives an aggregate daily visitor count from your IP address and browser type, computed transiently and not stored as personal data. You can turn this off any time in Settings → Privacy, and it defaults off automatically if your browser sends a Global Privacy Control or Do Not Track signal.
Why we're allowed to (legal basis)
Feedback messages are processed because you voluntarily submit them (Art. 6(1)(a) GDPR — consent, given by the act of sending). Anonymous usage analytics is processed under our legitimate interest in understanding whether the app works (Art. 6(1)(f) GDPR), balanced against your right to object at any time — which is exactly what the Settings toggle does.
Who else sees it
Two processors, both acting only on our instructions under their own standard data processing agreements:
- Vercel Inc.
- Hosting and anonymous analytics. Based in the US; transfers are covered by Vercel's Standard Contractual Clauses / EU-US Data Privacy Framework participation.
- Supabase
- Database for the exercise catalog and feedback messages, hosted in the EU.
We never sell data or share it with advertisers — there are no ads and no ad trackers in this app.
How long we keep it
Workout data lives only on your device, for as long as you keep it there. Feedback messages are deleted after 90 days. Analytics data is aggregate and not tied to an identifiable person, so individual-level retention doesn't apply.
Your rights
Under GDPR you can ask to access, correct, delete, or restrict processing of your personal data, object to processing, and request a copy in a portable format. In practice: workout data is already fully in your control on your own device (export/delete it yourself, any time). For a feedback message, since we don't collect any identifier, we can only find it if you tell us roughly when you sent it and what it said — email us at the address above. You can also lodge a complaint with your local data protection authority at any time.
Children
Evenset isn't directed at children and doesn't knowingly collect data from them.
Changes to this notice
If this notice changes materially, we'll update the date at the top. Continued use of the app after a change means you've seen the update.