PRIVACY POLICY

Last updated: June 2026

Zone8 is operated by GR Studios. We are committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and applicable data protection laws.

What We Collect

Account data — name and email address
Profile data — weight, height, age, gender (optional)
Race data — split times, total times, station results
Health data — heart rate and calorie data via Apple Health or Google Fit, only with your explicit consent (GDPR Article 9)
Photos — avatar and race result images you choose to upload
Usage data — app interactions, crash reports, and feature usage

How We Use It

To provide race tracking, history, and performance analytics
To sync your data across your devices
To show your results in leagues and the community feed
To send race recaps and notifications (with your consent)
To process subscription payments
To improve the app and diagnose technical issues

Legal Basis (GDPR)

Performance of contract — core account data (name, email, race results)
Explicit consent — health and biometric data (Article 9); you can withdraw at any time
Legitimate interest — app analytics and crash reporting to improve reliability

Who We Share It With

Supabase — database and authentication, hosted on EU servers
Firebase (Google) — push notifications
PostHog — anonymous usage analytics, EU servers
Sentry — crash reporting and error monitoring
Apple / Google — payment processing for subscriptions

We never sell your data to third parties. We never use health data for advertising.

Your Rights (GDPR)

Access — export all your data: Settings → Privacy & Data → Export My Data
Erasure — delete your account and all data: Settings → Privacy & Data → Delete Account
Withdraw consent — at any time: Settings → Privacy & Data
Portability — your data export is provided in machine-readable JSON format
Object — contact us at zone8privacy@gmail.com

Data Retention

Your data is stored while your account is active. When you delete your account, all personal data is permanently removed within 30 days. Race results shared publicly may be anonymised rather than deleted where required for league integrity.

Smartwatch & Health Data

Zone8 reads heart rate and calorie data from Apple Health (iOS) after your races. This includes data from Apple Watch, Garmin, Fitbit, and any other device that syncs to Apple Health. On Android, we read data from Google Fit and connected WearOS devices. This data is never shared with third parties and never used for advertising.

Minimum Age

Zone8 requires users to be 16 years of age or older, in accordance with GDPR Article 8. Users must confirm their age during registration.

Third-Party Disclaimer

Zone8 is an independent app. It is not affiliated with or endorsed by HYROX GmbH or any race organisation. Any race or event names referenced are the property of their respective owners.

Changes to This Policy

We will notify you of significant changes via the app. Continued use after notification constitutes acceptance.

Contact

For privacy requests, data exports, or questions:
zone8privacy@gmail.com

For general support:
zone8support@gmail.com