Privacy Policy

1. Controller

Philipp Alexander Monz Mähdergasse 30 6850 Dornbirn Österreich Email: support@monz.online

No data protection officer has been appointed; the conditions of Art. 37 GDPR are not met.

2. The short version

• The app has no server and no user account.
• The camera feed is processed on the device only and is never stored or transmitted.
• There is no tracking, no analytics of our own and no advertising. The built-in motion detection by Google sends anonymous usage and diagnostic data to Google (see section 3).
• Sport Unlock technically cannot tell which apps you block, only how many.
• Personal data leaves your device only if you send a problem report by email yourself.

3. Camera and motion detection

To count repetitions the app accesses the camera. Frames are analysed in real time on the device (Google ML Kit Pose Detection, bundled into the app). Each frame yields joint positions, and the movement is derived from those.

No video and no single frame is stored. No image leaves the device. Once you end the set the image data is gone. What remains is a number.

ML Kit itself sends anonymous usage and diagnostic data to Google LLC (USA): a random device identifier, how often and how fast detection runs, error and performance figures, and technical details about the app. This data is not linked to you, contains no images and is not used for advertising or tracking. Google uses it to operate and improve ML Kit. The legal basis is Art. 6(1)(f) GDPR (interest in working, reliable motion detection). Google is certified under the EU-US Data Privacy Framework. Google privacy policy: https://policies.google.com/privacy

The camera is only accessed after iOS has asked you and you agreed. You can withdraw the permission at any time in the iOS settings; counting stops working then, the rest of the app does not.

4. Screen Time and blocked apps

Blocking runs through Apple's Screen Time frameworks (Family Controls, Managed Settings, Device Activity). You pick the apps in a dialog that Apple provides and draws. The app receives only opaque tokens from it, from which neither the name nor the bundle identifier of an app can be read.

Sport Unlock therefore does not know which apps you block, only how many apps and categories there are, and whether a block is currently active. These tokens and your usage windows live in a protected area on the device and are not transmitted.

Authorization is requested for individual use: Sport Unlock manages only the device it runs on. It cannot be used to monitor other devices, family members or children.

5. What is stored on the device

Stored on the device, and only there, are: your completed sets with time and count, the minutes earned, the daily streak, your settings (exercise, sound, guidance) and a technical log of the block screen.

Technically this is a local SQLite database plus the iOS app preferences. Both belong to the app container, are encrypted by iOS along with the rest of the device, and are removed when the app is deleted. If you have iCloud backups enabled, the app container may be part of your backup. That is controlled by iOS, not by this app.

6. Problem reports by email

The settings screen lets you report a problem. The app assembles an email and opens it in your mail program. Only you send it, and the full contents are shown to you beforehand.

It contains technical facts only:

• app version and build number
• iOS version, device model and language
• selected exercise, sound and guidance on or off
• the number of sets logged so far and the daily streak (counts, not timestamps)
• Screen Time status: supported, authorization, number of blocked apps and categories, notifications, currently locked or not
• the last twelve lines of the block screen log

The recipient is support@monz.online. Your sender address and anything you write yourself follow from the nature of email. The report becomes an entry in a private issue tracker; your email address is not carried over. It stays in the mailbox where the reply is written.

The legal basis is Art. 6(1)(b) GDPR where fixing a defect in the app is concerned, otherwise Art. 6(1)(f) GDPR (interest in a working app). Correspondence is deleted once the matter is settled and no retention period requires otherwise.

7. This website

This is a plain information site. It sets no cookies, embeds no fonts, maps, videos or scripts from third-party servers, and uses no analytics or audience measurement. There is no form for you to fill in.

It is hosted on a server operated by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Deutschland. Serving a page produces the usual server logs there: IP address, time, requested address, status code, amount of data transferred, referring page and browser identification. These serve operation and defence against attacks, are not combined with other data, and are deleted after a short period. The legal basis is Art. 6(1)(f) GDPR.

The server is located in Germany, inside the EU. A data processing agreement under Art. 28 GDPR is in place with the host.

8. App Store and Apple

The app is obtained through the App Store. Apple collects its own data in the process, for example about the purchase or download and about crashes, provided you have agreed to share analytics in the iOS settings. The provider of this app has no influence over this and no access to personal individual data.

Apple's privacy policy applies: https://www.apple.com/legal/privacy/

9. Recipients, third countries, automated decisions

Recipients are the host of this website acting as a processor, and Google LLC for the anonymous ML Kit usage data described in section 3. The latter may be transferred to the USA on the basis of the adequacy decision for the EU-US Data Privacy Framework. Beyond that, no data is passed on and nothing is transferred outside the EU/EEA. There is no automated decision-making or profiling within the meaning of Art. 22 GDPR.

10. Your rights

You have the right to information (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21 GDPR) towards the controller. Any consent given can be withdrawn at any time with effect for the future.

Write to support@monz.online for this. One note up front: data that lives only on your device is not accessible to the provider. You can delete it yourself by clearing the history in the app or removing the app.

You also have the right to lodge a complaint with a supervisory authority. The competent one is the Austrian Data Protection Authority, Barichgasse 40-42, 1030 Vienna, https://www.dsb.gv.at or the authority where you habitually reside.

11. Changes

When the app changes, this policy changes with it. The version published here is the one that applies; the date above tells you when it was last touched.