1. Scope of this policy
This Privacy Policy applies to the Odma iPhone app (“Odma”) and the website at odma.at. Odma is a breath-hold timer and training log. It is not a medical device and does not collect diagnoses, symptoms, medical records or Apple Health data.
2. Data processed by the Odma app
Measurements, Tables and training information
When you save a session, Odma stores the breath-hold duration, date and time, together with a technical identifier used to manage that entry. This information is needed to display your recent sessions, personal best, average and progress statistics.
Odma stores Max Hold duration and time, generated and Custom Table configurations, completed Table training details and technical record identifiers. This information is stored locally on your device. If iCloud is available and enabled for Odma, it can also be synchronised through Apple CloudKit in your private iCloud database so that it remains available across your devices.
App settings
Your preferences, such as countdown duration, haptic cues and appearance, are stored locally on your device.
Optional in-app purchase
The optional Odma Pro lifetime unlock is processed by Apple through the App Store using StoreKit. Apple handles the payment. Odma checks the verified purchase entitlement and transaction status needed to unlock and restore premium features, but we do not receive or store your payment-card details.
Odma also uses RevenueCat, Inc. as a processor for anonymous app-user and purchase analytics. RevenueCat receives a randomly generated anonymous App User ID, purchase history and transaction information for Odma Pro, and technical information needed to provide the service, such as device type, operating system, app activity timestamps, locale and currency. RevenueCat may also process connection information such as an IP address when the app communicates with its service.
Odma does not send RevenueCat your training data, name, email address, phone number, Apple Account or CloudKit identifier, payment-card details, advertising identifier or a custom user profile. We do not use RevenueCat advertising-attribution, targeting, experiments, paywalls or third-party marketing integrations.
RevenueCat is used to count anonymous app users, analyse purchase history and synchronise existing or new Odma Pro purchase records for reporting. StoreKit remains the authority for purchasing, restoring and unlocking Odma Pro; RevenueCat errors do not block or revoke access.
Deleting training data or removing Odma does not cancel or refund this non-consumable purchase. It can be restored with the same Apple Account, subject to Apple’s App Store terms.
No tracking or advertising
Odma does not contain third-party advertising or cross-app tracking tools. RevenueCat is the only third-party analytics service in the app and is restricted to the anonymous app-user and purchase processing described above. We do not create an Odma account, sell personal data or use your training data or purchase history for advertising.
Legal basis and purpose
Processing is limited to providing the app functions you request, including timing, saving, displaying, deleting, exporting and synchronising your sessions. The legal basis is Article 6(1)(b) GDPR, where applicable. RevenueCat processing for purchase reporting and analytics is based on Article 6(1)(f) GDPR. Our legitimate interests are understanding anonymous app adoption and purchase activity, maintaining accurate purchase reporting and supporting the reliable operation of Odma Pro, while limiting the data to a random identifier, purchase information and necessary technical metadata. Your use of iCloud is also governed by your device settings and Apple’s terms and privacy information.
3. iCloud sync
Odma uses Apple CloudKit for iCloud sync. Synced Max Holds, Tables and Table training results are stored in the private database associated with your Apple Account. Private CloudKit data is accessible only to the signed-in user by default; we do not operate a separate server for your training history and cannot browse your private iCloud records.
Apple processes iCloud data under its own privacy terms and may process information on our behalf as a service provider where applicable. You can manage iCloud access for Odma in your device settings.
For more information, see Apple’s Privacy Policy.
4. Deleting and exporting app data
You can delete individual Max Holds and Table training results, delete all Max Holds or Table training results separately, or delete all training data including saved Tables within Odma. You can also export Max Hold measurements and Table training results as CSV files. Exporting creates a file that you choose how and where to share; the recipient app or service then processes it under its own privacy terms.
Local data remains until you delete it or remove the app. Data synchronised through iCloud remains until it is deleted through Odma or your iCloud data is otherwise managed or removed. Simply uninstalling Odma may not delete data already stored in iCloud.
Deleting training data or uninstalling Odma does not automatically delete purchase records held by Apple or RevenueCat. Uninstalling the app removes RevenueCat’s locally cached anonymous identifier from that device, and a later reinstall may generate a new anonymous identifier. RevenueCat retains data as needed to provide its service and meet contractual or legal obligations. For a request concerning RevenueCat data, contact us at contact@odma.at. Because Odma does not link the anonymous identifier to your identity or contact information, we may need additional information to locate the relevant record and may be unable to associate an anonymous record with you without it.
5. Data processed when visiting odma.at
Technical server logs
When you visit this website, the web hosting infrastructure may automatically process technical connection information such as your IP address, the date and time of the request, the requested page, browser and operating system information, referrer information and response status. This is technically necessary to deliver the website, maintain security and diagnose errors.
The legal basis is Article 6(1)(f) GDPR. The legitimate interests are the secure and reliable operation of the website. Server logs are retained only for as long as reasonably necessary for security and error analysis, subject to the configuration and legal obligations of the hosting provider.
No cookies, analytics or external content
This website does not set cookies and does not use analytics, advertising trackers, external fonts or embedded social media content.
6. Contact by email
If you contact us by email, we process your email address, message and any information you choose to provide in order to answer your request. Depending on the nature of your request, the legal basis is Article 6(1)(b) GDPR or Article 6(1)(f) GDPR. Our legitimate interest is to provide support and respond to enquiries.
Messages are kept only as long as needed to handle the enquiry and meet any applicable legal record-keeping obligations. Please do not send health information or other sensitive personal data unless it is necessary.
7. Recipients and international transfers
Personal data may be processed by service providers necessary to operate Odma and this website, particularly Apple for iCloud and App Store purchase services, RevenueCat, Inc. for anonymous app-user and purchase analytics, our email provider and the website hosting provider. They receive information only to the extent necessary to provide their services.
RevenueCat acts as our processor for the data described above and may use subprocessors. RevenueCat states that customer data is stored with Amazon Web Services in the United States. Where required, transfers outside the European Economic Area are protected by the European Commission’s Standard Contractual Clauses or another safeguard permitted by the GDPR.
For more information, see RevenueCat’s Privacy Policy and Data Processing Addendum.
8. Your rights
Subject to the conditions of the GDPR, you may have the right to request access, rectification, erasure, restriction of processing and data portability. You may also object to processing based on legitimate interests and withdraw consent at any time where processing is based on consent. Withdrawal does not affect processing carried out before withdrawal.
To exercise your rights, email contact@odma.at. We may need to verify your identity before fulfilling a request.
9. Right to lodge a complaint
You have the right to lodge a complaint with a data protection supervisory authority. In Austria, the competent authority is:
Österreichische Datenschutzbehörde
Barichgasse 40–42
1030 Vienna, Austria
Email: dsb@dsb.gv.at
Website: dsb.gv.at
10. Changes to this policy
We may update this Privacy Policy when Odma’s features, service providers or legal requirements change. The current version and update date will always be published on this page.
11. Who Is Responsible & Contact
The controller responsible for the processing described in this policy is:
Manuel Auer
Oidener Straße 75
4030 Linz
Austria
For privacy questions or requests, contact contact@odma.at.