Privacy Policy

• VeloraGo, Vince Mojzer ("VeloraGo", "we", "us", "our") values your privacy. This Privacy Policy explains how we process personal data when you use our services, visit our websites, or otherwise interact with us.
• This Policy applies to you if you:
• use VeloraGo's services as a user,
• contact us or request support,
• appear in the background of video or image material uploaded to or recorded in the service,
• visit our websites, including velorago.app.
• All processing of personal data is carried out in accordance with applicable data protection laws, including the EU General Data Protection Regulation (GDPR).

1. Who is the controller?

• Vince Mojzer is the controller of the personal data processing described in this Privacy Policy, unless expressly stated otherwise.
• Contact details: Email: support@velorago.app · Website: velorago.app

2. What personal data we process

• The personal data we process depends on how you use our services.
• 2.1 Data relating to users: We may process the following personal data about you as a user:
• name,
• email address,
• date of birth or age,
• profile picture,
• description and riding experience,
• stable or community-related information,
• content that you upload, share or record in the service, such as photos, videos, posts and feedback,
• GPS location data and ride routes, speed, duration and related session data,
• technical data such as IP address, device identifiers, browser type, operating system, language, network and performance data, and information about how you use the service,
• push notification tokens and device information,
• payment-related data such as customer ID, transaction ID, payment history, receipts and transaction timestamps.
• VeloraGo seeks not to store more card data than necessary itself. Card payments may be handled by external payment service providers in accordance with their own terms and privacy policies.
• 2.2 Horse and health-related information: Through the service's horse care features, we may process:
• horse profiles, photos and documents,
• vaccination records, farrier data and other health events,
• pregnancy tracking data, including veterinarian contact information,
• riding and training history, performance metrics and notes.
• This data primarily relates to horses, but may include information referring to you as a caretaker or rider.
• 2.3 Data when you contact us: When you contact us by email or otherwise, we process the information you provide in your communication, such as your name, email address and the content of your message.
• 2.4 Data relating to persons appearing in the background: If individuals are identifiable in the background of video or image material that is uploaded or recorded through the service, VeloraGo may process such personal data to the extent necessary to provide the service.
• Users should, as far as possible, avoid filming or recording other persons in an identifiable manner. If there is a risk that other individuals may appear in a recording, those individuals should be informed.
• 2.5 Location and safety data: The service may use location and safety features, including:
• background GPS tracking during rides,
• fall detection using motion sensors,
• emergency alerts to selected friends, which may include location data,
• optional SMS alerts to emergency contacts with phone numbers and location data.
• 2.6 Sign-in provider data: If you sign in with Google or Apple, we may process identifiers, email address, name and profile picture received from the OAuth provider.

3. How we collect personal data

• directly from you when you register an account, update your profile, upload content, communicate or make payments,
• automatically when you use the service or visit our websites, for example through logs, cookies and similar technologies,
• from our service providers, such as payment providers or authentication partners, to the extent necessary to operate the service,
• from other users where this follows from how the service works, for example in shared or uploaded material.

4. Purposes and legal bases for processing

• 4.1 To provide and administer the service: We process personal data to create and administer user accounts, provide riding and horse care features, enable content uploads and storage, provide support and send important notices.
• Legal basis: performance of a contract.
• 4.2 To manage payments and comply with legal obligations: We process personal data to administer payments, receipts and transactions, and to comply with bookkeeping, tax and other legal obligations.
• Legal basis: performance of a contract and compliance with a legal obligation.
• 4.3 For security, troubleshooting and prevention of misuse: We process personal data to ensure the technical functionality of the service, detect, prevent and investigate misuse, unauthorised access, fraud and security incidents, and enforce our terms and conditions.
• Legal basis: legitimate interests. Our legitimate interest is to provide a secure and well-functioning service.
• 4.4 To develop and improve the service: We process personal data to analyse how the service is used, troubleshoot issues, improve the user experience and further develop features and technical solutions. Where possible, we use aggregated, de-identified or pseudonymised data.
• Legal basis: legitimate interests. Our legitimate interest is to develop, improve and secure the service.
• 4.5 Location and safety features: We process location data and sensor data to provide GPS tracking, fall detection, emergency alerts and related safety features.
• Legal basis: performance of a contract and/or consent, where permission is required for the relevant feature.
• 4.6 For processing of background persons in media: If individuals are identifiable in the background of material recorded or uploaded through the service, we process such data to the extent necessary to provide the service and handle any related rights requests.
• Legal basis: legitimate interests. Our legitimate interest is to provide the media functionality of the service in an effective manner.

5. Cookies and similar technologies

• We may use cookies and similar technologies on our websites, including to make the websites work, remember your settings and support basic statistics.
• A cookie is a small text file stored on your device. Some cookies are necessary for the website to function properly.
• The velorago.app website currently uses minimal cookies, primarily to support language settings and basic website functionality. We do not use marketing or social media tracking cookies.
• The mobile app may use local storage (such as AsyncStorage) to support session data, settings and certain offline features.

6. Who we share personal data with

• We may share personal data with the following categories of recipients:
• providers of hosting, storage, communications, analytics, support and security services,
• payment service providers, such as the Apple App Store and Google Play,
• authentication, mapping, weather and notification providers, such as Supabase, Google, Apple, Expo Push and Open-Meteo,
• SMS providers for emergency alerts, if you use that feature,
• public authorities, courts or other parties where we are required to do so by law or legal decision,
• potential buyers or investors in connection with a merger, acquisition, restructuring or transfer of all or part of our business.
• When we use suppliers processing personal data on our behalf, we enter into data processing agreements and require appropriate security measures.
• We do not sell: your personal data.

7. Transfers outside the EU/EEA

• We aim to process personal data within the EU/EEA. However, some suppliers may process personal data outside the EU/EEA.
• If personal data is transferred to a country outside the EU/EEA, we ensure that the transfer takes place in accordance with applicable law, for example through:
• an adequacy decision by the European Commission, or
• the European Commission's Standard Contractual Clauses, where relevant supplemented with additional safeguards.
• You may contact us if you would like more information about the safeguards used in a specific case.

8. How long we retain personal data

• We retain personal data for as long as necessary for the purposes for which it was collected, or for as long as we are required to retain it by law.
• This generally means that:
• account data is retained for as long as your account remains active and thereafter for a limited period where needed for support, security or legal claims,
• payment and accounting-related data is retained for as long as required by applicable law,
• support case data is retained for as long as necessary to handle the matter and for a reasonable period thereafter for follow-up and documentation,
• technical logs are retained for as long as required for security, operation and troubleshooting,
• uploaded photos, videos and other content are retained for as long as they remain in the service or until they are deleted under our routines or upon request, unless longer retention is required for legal obligations or dispute resolution.
• When personal data is no longer needed, it is securely deleted or anonymised.

9. Links to other websites and external services

• Our websites and services may contain links to external websites or embedded third-party content. Those third parties are responsible for their own personal data processing. We recommend that you review their privacy policies before using such services.

10. Personal data shared with other users

• When you use the VeloraGo service, personal data may be shared with other users as part of the functionality of the service.
• This may include community posts, friend connections, stable membership, horse sharing with trainers or other caretakers, and emergency alerts to friends you select.
• Community content you choose to make public may be visible to other users.
• To the extent other users process personal data for their own purposes, they are themselves responsible for such processing under applicable law.

11. Children

• If our services are used by children or young people, personal data must be processed with particular care.
• Users must be at least 13 years old. If consent is required for a specific processing activity and the user is below the age applicable under relevant law, parental consent may be required.
• We do not knowingly collect data from children under 13.

12. Your rights

• Under the GDPR, you have the right to:
• request information about the personal data we process about you,
• request access to your personal data,
• request rectification of inaccurate or incomplete personal data,
• request erasure in certain circumstances,
• request restriction of processing in certain circumstances,
• object to processing based on legitimate interests,
• withdraw consent where processing is based on consent,
• request data portability for data you have provided to us where processing is based on consent or contract and carried out by automated means,
• lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH).
• If you wish to exercise any of your rights, please contact us at support@velorago.app.
• Please note that certain rights are subject to legal limitations and that in some cases we may need to continue processing certain data in order to comply with legal obligations or defend legal claims.

13. Changes to this Policy

• We may update this Privacy Policy from time to time. The latest version will always be available on our websites.
• If we make material changes, we will also inform you in an appropriate manner, for example by email or within the service.