Privacy Policy

1. Who We Are

Zelos is operated by the creator(s) of the Zelos app. You can contact us at support@zelos.club.

2. Scope

This Policy applies to the Zelos mobile application, our website at zelos.club, and any related services we provide.

3. Information We Collect

A. Information you provide

• Account details: username, email address, password (hashed), country.
• Profile & fitness attributes: ability level, body weight, height, birthday.
• Content you upload: skills, videos, images, captions, and other submissions.
• Support messages: when you contact us, we collect the information you provide.

B. Information collected automatically

• Device & app data: device model, OS version, app version, language, crash logs.
• Usage data: interactions with features (e.g., votes, views, screens), timestamps, and diagnostic events.
• Log & security data: IP address, request metadata, and event logs to prevent abuse and keep services secure.

C. Information from third parties

• Auth providers (if enabled): sign-in data from Apple/Google when you use social login.
• Service providers: technical data from hosting, analytics, and email tools we use to operate Zelos.

Note: Do not submit sensitive personal information (e.g., health diagnoses, medical records). Fitness attributes you optionally provide (e.g., weight/height/ability) are treated as personal data and used only for in-app features and improving user experience.

4. How We Use Your Information

• Provide, maintain, and improve the app and website.
• Create and manage your account and profile.
• Compute rankings and leaderboards from pairwise comparisons and performance signals.
• Detect, prevent, and address fraud, abuse, or technical issues.
• Respond to support requests and communicate service updates.
• Comply with legal obligations.

5. Legal Bases (EEA/UK)

We process personal data on the following bases:

• Contract: to provide the app and its features you request.
• Legitimate interests: to secure, operate, and improve Zelos (balanced against your rights).
• Consent: for specific optional features or where required (you may withdraw consent at any time).
• Legal obligations: to meet applicable laws and regulatory requirements.

6. Sharing of Information

We do not sell your personal data. We share information only with:

• Service providers / processors that help us run Zelos (e.g., hosting, authentication, storage, analytics, email).
• Legal and safety where required by law or to protect rights, safety, and security.
• Business transfers if we undergo a merger, acquisition, or asset sale (your information may be transferred as part of that deal).

Current subprocessors (summary)

• Google Firebase / Google Cloud: authentication, database, storage, cloud functions, analytics.
• Cloudflare: website hosting, security, CDN, DNS (for zelos.club pages).
• Google Workspace: support email processing (support@zelos.club).

7. International Transfers

We may transfer personal data to countries outside your own. Where we do so, we rely on appropriate safeguards such as Standard Contractual Clauses, adequacy decisions, or equivalent mechanisms, and we take steps to protect your information consistent with applicable laws.

8. Data Retention

We retain personal data for as long as needed to provide Zelos and for legitimate business or legal purposes. If you request deletion of your account, we will delete or anonymize your personal data, unless we must keep certain information to comply with legal obligations or resolve disputes.

9. Your Rights

Subject to applicable law (e.g., GDPR/UK GDPR), you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data.
• Object to or restrict certain processing.
• Data portability (receive your data in a structured, commonly used format).
• Withdraw consent where processing is based on consent.

To exercise these rights, email support@zelos.club. You also have the right to lodge a complaint with your local data protection authority.

10. Children’s Privacy

Zelos is not intended for children under the age of 13, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can take appropriate action. In the EEA/UK, additional age thresholds and consent requirements may apply.

11. Security

We use technical and organizational measures to protect personal data (including encryption in transit, access controls, and monitoring). No method of transmission or storage is 100% secure; we work to continually improve our safeguards.

12. Cookies & Tracking

Our website may use essential cookies and similar technologies for security and performance (e.g., CDN). The app may use device identifiers and analytics to understand feature usage and improve stability. We do not use third-party advertising SDKs at this time.

13. Data Deletion

You can request deletion of your account and associated personal data by emailing support@zelos.club from the email linked to your account. We may ask to verify your identity before processing the request.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the latest version on this page and update the “Last updated” date above. If changes materially affect your rights, we will provide additional notice in the app or by email.