Privacy policy

1. Controller

The controller under the GDPR is Gernot Zuegg, operating under the name Blueflare, Goldeggstraße 6A, 39011 Lana (BZ), Italy. Contact: info@blueflare.it; phone: +39 0473 550 521; certified email (PEC): gernot.zuegg@pec.it.

2. Scope

This policy applies to the RiseForMore app for iOS and Android, its backend services and the public website www.riseformore.com. It covers processing for accounts, training, nutrition, recovery, AI features, subscriptions, security and support.

3. Data we process

Depending on use, we process account and sign-in data (email, password hash and Apple or Google identifiers), profile and fitness details, goals, experience, age, gender, body measurements, equipment, preferences and scheduling.

We may also process injuries or body areas to protect, sleep, energy, stress, focus and recovery information, workout and nutrition logs, photos for body or meal analysis, feedback, progress, subscription status and technical usage, diagnostic and security data. Free text and images are processed only when the relevant feature is used.

4. Purposes and legal bases

We process data to provide the account and app, generate personal plans and insights, synchronize content, attribute purchases, provide support and detect misuse or technical faults. The primary legal basis is performance of a contract under Article 6(1)(b) GDPR.

For optional inputs and features involving health-related data, photos or certain AI analyses, processing relies – where required – on consent under Articles 6(1)(a) and 9(2)(a) GDPR. Security, stability and product improvement rely on our legitimate interests under Article 6(1)(f); legal obligations on Article 6(1)(c). Consent may be withdrawn at any time for the future.

5. Guest mode and local storage

Parts of the app can be used without an account. Settings and content may be stored locally on the device. To provide individual features, pseudonymous guest identifiers, technical usage events or user-initiated requests may nevertheless be sent to the backend. Uninstalling usually removes local data but does not automatically remove any server-side data.

6. Recipients and services

Data is disclosed only where needed for a selected feature, technical delivery, billing or a legal duty. Recipients include hosting, database and object-storage providers commissioned by Blueflare and the services below.

OpenAI processes the text or images required when a user explicitly invokes AI features such as equipment, meal or body analysis and coach guidance. RevenueCat processes identifiers and purchase/subscription information for in-app subscription management. Apple and Google process data for store purchases and, where selected, account sign-in. Their own privacy policies also apply.

• OpenAI privacy
• RevenueCat privacy
• Apple privacy
• Google privacy

7. Transfers to third countries

Some providers may process data outside the European Economic Area, particularly in the United States. Transfers take place only in accordance with Articles 44 et seq. GDPR, for example under an adequacy decision or appropriate safeguards such as the EU Standard Contractual Clauses.

8. Website, server logs and cookies

When the website is accessed, the server may process technically required data such as IP address, time, requested page, referrer, browser and operating system to provide secure and stable operation under Article 6(1)(f) GDPR.

The landing page currently uses no analytics, advertising or tracking services and sets no non-essential cookies. App-store content is opened only after a click, after which the relevant store provider's terms apply.

9. Retention

We retain data only for as long as needed for its purpose. Account data and associated app content are generally kept until the account is deleted. Security logs, accounting evidence and backups may remain for limited periods or as required by law. Data is then deleted or anonymized.

10. Export and deletion

Signed-in users can request an export of account, training, nutrition, recovery and AI-usage data in account settings and can delete the account. Deletion removes the account and associated profile data from the active system unless legal retention duties apply. You may also contact info@blueflare.it.

11. Your rights

Subject to the GDPR, you have rights of access, correction, deletion, restriction, portability and objection. Where processing relies on consent, you may withdraw it at any time for the future. Contact info@blueflare.it to exercise your rights.

You may also lodge a complaint with the Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 Rome, Italy, or another competent supervisory authority.

• Garante per la protezione dei dati personali

12. Security, medical notice and changes

We use appropriate technical and organizational measures to protect data against loss, misuse and unauthorized access, although completely risk-free transmission cannot be guaranteed.

RiseForMore is not a medical app and does not replace medical, physiotherapy or other professional healthcare advice. Seek professional guidance for pain, injury or health concerns.

We update this policy when features, providers or legal requirements change. The current version is available through the website and app.