1. Who is responsible?
The controller responsible for the processing described in this policy is:
Max Mustermann
Musterstraße 3
1234 Musterstadt
Austria
Email: contact@odma.at
2. Scope of this policy
This Privacy Policy applies to the Odma iPhone app (“Odma”) and the website at odma.at. Odma is a breath-hold timer and training log. It is not a medical device and does not collect diagnoses, symptoms, medical records or Apple Health data.
3. Data processed by the Odma app
Measurements and session information
When you save a session, Odma stores the breath-hold duration, date and time, together with a technical identifier used to manage that entry. This information is needed to display your recent sessions, personal best, average and progress statistics.
These measurements are stored locally on your device. If iCloud is available and enabled for Odma, they can also be synchronised through Apple CloudKit in your private iCloud database so that they remain available across your devices.
App settings
Your preferences, such as countdown duration, haptic cues and appearance, are stored locally on your device.
No tracking or advertising
Odma does not contain third-party advertising, analytics or tracking tools. We do not create an Odma account, sell personal data or use your measurements for advertising.
Legal basis and purpose
Processing is limited to providing the app functions you request, including timing, saving, displaying, deleting, exporting and synchronising your sessions. The legal basis is Article 6(1)(b) GDPR, where applicable. Your use of iCloud is also governed by your device settings and Apple’s terms and privacy information.
4. iCloud sync
Odma uses Apple CloudKit for iCloud sync. Synced measurements are stored in the private database associated with your Apple Account. Private CloudKit data is accessible only to the signed-in user by default; we do not operate a separate server for your measurement history and cannot browse your private iCloud records.
Apple processes iCloud data under its own privacy terms and may process information on our behalf as a service provider where applicable. You can manage iCloud access for Odma in your device settings.
For more information, see Apple’s Privacy Policy.
5. Deleting and exporting app data
You can delete individual measurements or all measurements within Odma. You can also export your measurements as a CSV file. Exporting creates a file that you choose how and where to share; the recipient app or service then processes it under its own privacy terms.
Local data remains until you delete it or remove the app. Data synchronised through iCloud remains until it is deleted through Odma or your iCloud data is otherwise managed or removed. Simply uninstalling Odma may not delete data already stored in iCloud.
6. Data processed when visiting odma.at
Technical server logs
When you visit this website, the web hosting infrastructure may automatically process technical connection information such as your IP address, the date and time of the request, the requested page, browser and operating system information, referrer information and response status. This is technically necessary to deliver the website, maintain security and diagnose errors.
The legal basis is Article 6(1)(f) GDPR. The legitimate interests are the secure and reliable operation of the website. Server logs are retained only for as long as reasonably necessary for security and error analysis, subject to the configuration and legal obligations of the hosting provider.
No cookies, analytics or external content
This website does not set cookies and does not use analytics, advertising trackers, external fonts or embedded social media content.
7. Contact by email
If you contact us by email, we process your email address, message and any information you choose to provide in order to answer your request. Depending on the nature of your request, the legal basis is Article 6(1)(b) GDPR or Article 6(1)(f) GDPR. Our legitimate interest is to provide support and respond to enquiries.
Messages are kept only as long as needed to handle the enquiry and meet any applicable legal record-keeping obligations. Please do not send health information or other sensitive personal data unless it is necessary.
8. Recipients and international transfers
Personal data may be processed by service providers necessary to operate Odma and this website, particularly Apple for iCloud services, our email provider and the website hosting provider. They receive information only to the extent necessary to provide their services.
Some providers may process data outside the European Economic Area. Where required, such transfers are based on an adequacy decision, standard contractual clauses or another safeguard permitted by the GDPR.
9. Your rights
Subject to the conditions of the GDPR, you may have the right to request access, rectification, erasure, restriction of processing and data portability. You may also object to processing based on legitimate interests and withdraw consent at any time where processing is based on consent. Withdrawal does not affect processing carried out before withdrawal.
To exercise your rights, email contact@odma.at. We may need to verify your identity before fulfilling a request.
10. Right to lodge a complaint
You have the right to lodge a complaint with a data protection supervisory authority. In Austria, the competent authority is:
Österreichische Datenschutzbehörde
Barichgasse 40–42
1030 Vienna, Austria
Email: dsb@dsb.gv.at
Website: dsb.gv.at
11. Changes to this policy
We may update this Privacy Policy when Odma’s features, service providers or legal requirements change. The current version and update date will always be published on this page.
12. Contact
For privacy questions or requests, contact contact@odma.at.