Privacy Policy

OnBars respects your privacy and is committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR). This privacy policy explains how we collect, use, and protect your information when you use the OnBars mobile application and website.

1. Information We Collect

• Account Data: Email address, username, and third-party authentication data if you sign in with Apple or Google. Passwords are stored hashed by our authentication provider.
• Profile Data: Profile photo, bio, and optionally date of birth, gender, height, bodyweight and experience level, used to personalize your profile and workout statistics. You can edit or delete this data at any time.
• Location Data: See section 2. Your last known location is stored in your profile to power "nearby" features.
• User-Generated Content: Workouts, sessions, park check-ins, ratings, comments, photos, video stories and feed posts.
• Technical Data: A push notification token identifying your device for notifications.

2. Device Permissions

To provide core features, OnBars may request the following device permissions with your explicit consent:

• Location Services: Used to display outdoor gyms near you, verify park check-ins, and update the interactive map. Your last known location is stored in your profile for "nearby" features; you can control your visibility in the app's privacy settings. During an active workout, OnBars checks your location periodically, including while the app is in the background, solely to detect if you move away from the selected park. Background location is not used outside of an active workout, is not used for advertising, and is not sold or shared.
• Camera & Photo Library: Used strictly to allow you to upload profile avatars, capture and post workout images or video stories to the feed, submit photos or videos of new calisthenics parks, and to save exported workout stories to your camera roll.
• Microphone: Used exclusively when recording audio alongside your video stories. We do not listen to or record audio in the background.
• Push Notifications: Used to alert you about community interactions, new followers, updates to your Aura, and activity at your claimed parks. You can manage or disable these at any time in your device settings.

3. How We Use Your Information

We process your personal data based on your consent (e.g., location and optional profile data), the necessity to fulfill our contract (providing app functionality like scoring and leaderboards), and our legitimate interest in securing and improving the platform.

4. Data Storage & Processors

Your data is handled by service providers acting as data processors:

• Supabase: Database hosting, authentication and media storage.
• Google Firebase (Cloud Messaging): Delivery of push notifications.
• Mapbox: Map rendering and geographical data for park discovery.
• Open-Meteo: Receives your coordinates to display local weather.
• Apple and Google: Only if you choose to sign in with them.

We do not sell your personal data and we do not track you across other apps or websites.

5. Data Retention & Account Deletion

We retain your account data for as long as your account is active. You have the right to delete your account and all associated data at any time directly inside the app settings (Settings → Account & Security → Delete Account). Upon deletion, your personal data, media, and workout history are permanently erased from our databases.

6. Children's Privacy

OnBars is not intended for individuals under the age of 15. We do not knowingly collect personal data from children under 15. If we become aware that a user under 15 has provided us with personal information, we will take steps to delete such information immediately.

7. Your GDPR Rights

If you reside in the European Economic Area (EEA), you have the right to access, rectify, or erase your personal data. You may also object to processing, request data portability, or withdraw your device permission consents at any time via your device settings.

8. Contact

If you have questions regarding this privacy policy, wish to exercise your rights, or have concerns about your data, please contact us at: contact@onbarsapp.com

9. International Transfers

Some of our providers may process data outside the European Economic Area (for example in the USA). Where this happens, transfers rely on appropriate safeguards such as the EU Standard Contractual Clauses.

10. Data Controller & Complaints

The data controller is OnBars, Greece, contact@onbarsapp.com. If you are in the EEA, you have the right to lodge a complaint with your local data protection authority (in Greece: the Hellenic Data Protection Authority, dpa.gr).