Privacy policy

1. Controller

Jeremy Berenbrink, Germany Email: hello@onefiftycrew.de

2. Overview

onefifty is an app for planning and sharing workouts (sessions) with your friends. We only process data needed for these functions. There is no advertising, tracking or analytics. We do not sell data. Your profile is not public: only people you have confirmed as friends can see your sessions.

3. Account and sign-in

For an account, we store your email address and an encrypted password. We send a confirmation email when you register and a password reset email when needed. Legal basis: Art. 6(1)(b) GDPR (contract, provision of the app).

4. Profile and profile photo

You choose a name and username and can upload a profile photo. The app accesses your photos only when you select a picture yourself. Your friends, people you send a request to and people who open your invitation link can see your name, username and profile photo. We also store your app language so notifications arrive in your language. Legal basis: Art. 6(1)(b) GDPR.

5. Sessions, attendance and friends

We store sessions you create (sport, date, time, duration, place as free text, optional booking link), your joins, whether you attended a session and for how long, and your friendships and requests. The app uses this to calculate your active minutes per week, streaks and rankings among your friends. Only you and your confirmed friends can see this information. You enter the place yourself as text. The app does not request your location. Legal basis: Art. 6(1)(b) GDPR.

6. Booking links

When you paste or share a booking link into the app (e.g. from BEAT81 or Eversports), our server retrieves the page to read the class, place and time. No data about you is transmitted to the provider in this process. If a link cannot be fully read, we store the link, provider, page title and shared text to improve recognition. These entries are only visible to us. Legal basis: Art. 6(1)(b) GDPR (functionality); for improvement, Art. 6(1)(f) GDPR (legitimate interest in working link recognition).

7. Push notifications

If you allow notifications, we store a push token for your device. We use it to notify you, for example, when friends post a session or join yours. You choose which notifications to receive in the app. You can revoke permission at any time in iOS settings. Notifications are delivered through Expo's push service (650 Industries, Inc., USA) and the Apple Push Notification Service. Legal basis: Art. 6(1)(a) GDPR (consent via the iOS prompt).

8. Calendar

At your request, the app adds a session to your calendar. iOS asks for calendar access for this purpose. The entry is made only on your device. We do not read your calendar or store any of its contents.

9. Reporting and blocking

You can report and block people. For a report, we store who reported whom, the reason and the time. We review reports and may remove content or suspend accounts. Blocked people can no longer see your sessions. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a safe community) and Art. 6(1)(b) GDPR.

10. Website

Our website onefiftycrew.de is hosted by Lovable (Lovable Labs Incorporated, Sweden). When you visit, the host processes technically necessary data such as IP address, time and requested page to deliver and secure the website. We do not use tracking cookies. Legal basis: Art. 6(1)(f) GDPR (secure and stable provision of the website).

11. Emails

Confirmation and password emails are sent through our host DomainFactory's mail server (GoDaddy). If you contact us, we process your message and email address to reply. Legal basis: Art. 6(1)(b) or (f) GDPR.

12. Service providers and transfers to third countries

13. Retention and deletion

We store your data while you have an account. You can delete your account at any time in the app (Profile → Settings → Delete account). This immediately and permanently deletes your account, profile, profile photo, sessions, joins, friendships, settings, push tokens and reports. Unrecognized booking links are deleted with the account.

14. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection (Art. 15 to 21 GDPR). You can withdraw consent at any time with effect for the future. Contact hello@onefiftycrew.de to do so. You can also lodge a complaint with a data protection supervisory authority, for example the authority where you live.

15. Children

onefifty is intended for people aged 16 and over.

16. Changes

If the app changes, we update this policy. The current version on this page applies.