In short: we collect only what an app needs to work, we process it in the EU under the GDPR, and we never sell it or use it for advertising profiles. This website sets no cookies and loads nothing from third parties.
Who is responsible
The controller of personal data is Aurora Spark Labs Oy (business ID 3664070-4), Suvilahdenkatu 4 A, 00500 Helsinki, Finland. For anything about your data, write to support@aurorasparklabs.fi.
This website
aurorasparklabs.fi has no accounts, no analytics, no advertising and no cookies. Fonts and styles are served from our own server.
Like any web server, ours records technical request data (IP address, time, requested address and browser type). We use it only to run the service and protect it from abuse, keep it for a short time, and do not combine it with other data.
Our apps
Each app processes only the data it needs for its own features. What is written here matches the privacy details shown for the app in the App Store and Google Play.
Reittiapp
Data not collected. Reittiapp has no account and stores nothing about you on our servers.
- Location: with your permission, the app sends your position with each request so our server can find the stops near you, their next departures and walking times. The request is answered and the position is not stored or logged. To answer, our server may ask public transport data services for departures; they receive no information that identifies you.
- Pinned stops and settings stay on your phone.
- Subscription: bought and managed through the App Store. Apple handles the payment; we receive no payment or personal details. The app checks the subscription on your phone.
- No analytics, advertising or tracking.
Your Training Schedule
Your Training Schedule needs an account so your plans are on all your devices. It processes:
| Data | Why | Where |
|---|---|---|
| Email, name, profile picture | Your account; sign-in with Google or Apple | Our servers in Finland; sign-in by Firebase Authentication (Google) |
| Training plans, workouts, logs, ratings, notes, goals and plan summaries; habits | The app’s features | Our servers in Finland |
| Pictures you add (motivational and milestone pictures) | Shown in your plans | Our servers in Finland |
| Fitness and health details you choose to give: maximum heart rate, heart-rate zones, and the AI coach profile (level, sports, weekly time, injuries, birth year, equipment, notes) | Heart-rate zones; tailoring the AI coach | Our servers in Finland |
| AI coach conversations | Answering your questions and proposing plans | Our servers in Finland; answers produced by Anthropic (Claude), see below |
| Feedback you send | Improving the app; answering you | Our servers; delivered to us by email |
- AI coach is optional and off by default. Only when you turn on sharing with the coach are your coach profile, plans, logs and your messages sent to Anthropic, which processes them on our behalf to produce the coach’s answer. Turning sharing on is your explicit consent to this, including any health details you have written there; you can turn it off at any time.
- Calendar feed (optional): a private address your calendar app reads; turning it off makes the address stop working.
- Reminders are scheduled on your phone.
- Service providers outside the EU: Google (Firebase Authentication) and Anthropic are based in the United States. Transfers rely on the EU–US Data Privacy Framework or the European Commission’s standard contractual clauses.
- Deleting: Settings → Delete account removes your account, everything in it, your pictures and your sign-in at once. Feedback you sent stays, without your name or account. See Delete your account.
- No analytics, advertising or tracking.
Principles we follow
- Purpose: data is used only to provide the feature you use, to support you, and to keep the service secure.
- Legal basis: performing our agreement with you (the app’s terms), our legitimate interest in security and support, and your consent where an app asks for it (for example location access).
- Location: an app uses your location only after you allow it in your phone’s settings, and only for the feature that needs it.
- Where: our servers are in Finland. When a service provider is used (for example for sign-in), it is named in the app’s section above, and transfers outside the EU/EEA rely on the safeguards the GDPR requires.
- How long: account data is kept while you have an account and deleted when you delete it. Backups are overwritten within their normal cycle.
- No selling, no ads profiling: we do not sell personal data or share it with advertisers.
Your rights
You have the right to access your data, to have it corrected or deleted, to restrict or object to its processing, to receive it in a portable format, and to withdraw a consent you have given. Write to support@aurorasparklabs.fi; we answer within one month. To delete an app account, see Delete your account.
You can also lodge a complaint with the Finnish supervisory authority, the Data Protection Ombudsman (tietosuoja.fi).
Children
Our apps are not directed to children under 13, and we do not knowingly collect their data.
Changes
When this policy changes, the date at the top changes too. Significant changes that affect an app are also announced in that app.