TREKO App — Privacy Policy

1. Data Controller

The TREKO mobile application (the "App") and TREKO Bluetooth fitness devices (the "Device") are operated by ADV ONLINE COMPANY OÜ, a private limited company registered in the Republic of Estonia (the "Company", "we", "us"). Website: advonlinecompanyou.com. Contact: info@advonlinecompanyou.com. We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable Estonian law.

2. Data We Collect

Account data: name or nickname, e-mail address, password (stored in hashed form), and optional profile details (age, gender, height, weight) you provide during registration.

Health and fitness data: steps, distance, calories, heart rate, heart-rate variability (HRV), blood-oxygen estimates (SpO₂), sleep phases, stress index, and workout sessions recorded by the Device or entered manually. This data is processed only with your explicit consent (GDPR Art. 9(2)(a)).

Device data: Device model, firmware version, battery level, Bluetooth identifiers required for pairing and synchronisation over Bluetooth Low Energy (BLE).

Technical data: app version, operating system, device language, crash logs, IP address, and anonymised usage analytics. On Android, the operating system may require Location permission to scan for BLE devices; we do not build a history of your precise location and do not track you in the background for advertising purposes.

3. Purposes and Legal Bases

We process data to: create and maintain your account and provide App functions (performance of a contract, Art. 6(1)(b) GDPR); sync and display metrics from your Device (explicit consent, Art. 9(2)(a)); maintain security, prevent fraud and fix errors (legitimate interest, Art. 6(1)(f)); improve the App through aggregated, anonymised statistics (legitimate interest); send service notifications (performance of a contract). We do not use health data for advertising and we do not sell personal data.

4. Sharing and Transfers

Data may be shared with hosting and analytics processors acting under data-processing agreements, and with optional third-party integrations (e.g. Strava, Apple Health, Health Connect) only when you enable them yourself. Where processors are located outside the EEA, transfers are protected by EU Standard Contractual Clauses or an adequacy decision.

5. Retention

Account and health data are stored while your account is active. You may delete your account in the App settings or by e-mailing us; data is then erased or irreversibly anonymised within 30 days, except where law requires longer retention. Crash logs and technical data are kept for up to 12 months.

6. Your Rights

Under the GDPR you have the right of access, rectification, erasure, restriction, data portability, objection, and the right to withdraw consent at any time without affecting prior processing. To exercise any right, contact info@advonlinecompanyou.com. You may also lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, aki.ee) or your local supervisory authority.

7. Security

We use encryption in transit (TLS), encrypted storage, access controls and regular security reviews. Bluetooth communication between the App and the Device uses the pairing and encryption mechanisms of Bluetooth Low Energy.

8. Children

The App is not intended for children under 16. We do not knowingly collect data from children under 16; if you believe a child has provided us personal data, contact us and we will delete it.

9. Not a Medical Device

The Device and the App are wellness products. Measurements are estimates for general fitness purposes only and are not medical advice, diagnosis or treatment.

10. Intellectual Property and App Store Publishing

All intellectual property rights in the App, the Device, the TREKO brand and related content belong to ADV ONLINE COMPANY OÜ (Estonia). The App is distributed through official app stores by authorised publishers acting under licence from the Company: on the Apple App Store the App is published under the developer account of Tomas Kasdailis, and on Google Play under the developer account of VAUGHAN AND PARTNERS LIMITED. Regardless of the publishing account, ADV ONLINE COMPANY OÜ remains the owner of the App and the data controller responsible for the processing described in this Policy.

11. Changes and Contact

We may update this Policy; the current version is always available at this address, and material changes are announced in the App. Questions: ADV ONLINE COMPANY OÜ, Estonia · info@advonlinecompanyou.com.