Horselino
Privacy Policy
Last updated: 6 September 2026
The protection of your personal data is important to us. This Privacy Policy informs you, in accordance with the GDPR, about which data we process in the "Horselino" App, for which purposes, and on which legal basis.
1.1 Controller
Melanie Donner, Allee 16, 3435 Zwentendorf an der Donau, Austria · Email: support@horselino.app
Based on the current assessment, there is no obligation to appoint a Data Protection Officer.
1.2 What Data We Process
a) Account and profile data – first name, last name, email address, encrypted password, optional profile photo (avatar), optional horse photos, chosen personal accent color.
b) Content you enter – horse master data, training sessions, templates, training series, ratings/feedback, recorded or subsequently added rides (including optional GPS route, see c), goals, tasks, calendar entries, and health entries for your horse (e.g. appointments for veterinarian, farrier, vaccination), and optional video attachments on diary entries (at most 10 minutes and one video per entry, subscription only). This health data concerns the animal, not your own health, and does not constitute a special category within the meaning of Art. 9 GDPR.
c) Location data (GPS) – Only if you use "Record ride" and grant location permission do we process GPS position data to record distance and route. The route is assigned to your ride and stored in your account.
d) Shared horses / team – When you share a horse with other people, the assigned content and your display name become visible to them. This is a closed sharing feature for people you invite – there is no public community function. You are responsible for sharing content with invited persons.
e) Location for the weather preview (optional) – If you store a location (e.g. postal code and town), we save it as well as the coordinates derived from it in order to show you a weather preview for calendar appointments. Providing this information is voluntary; without it, no weather preview is retrieved. For the query, rounded coordinates are transmitted to our weather service; the conversion of postal code/town into coordinates is handled server-side via the OpenPLZ API, with MapTiler as a fallback, and the map display via MapTiler (see 1.4). This location is independent of the GPS recording for rides (c) and does not require the device's location permission.
f) Technical data – For stability and troubleshooting, we process device and crash data (e.g. device type, operating system version, error logs). You can turn this off in the app at any time: Settings → Diagnostics & crash reports. No further report is sent after that, and the app works exactly as before.
g) Connection and log data – When accessing our servers (Supabase) and when loading map tiles, technically necessary connection data is processed, in particular your IP address, the time of access, and the requested resource. This serves the provision, security and stability of the service.
h) Opening our emails – Our system emails (e.g. registration confirmation, password reset) carry our logo at the top. It is hosted on our website and is only loaded when you open the message. In doing so, your IP address is necessarily transmitted to our website host (IONOS, see 1.4). According to their information it is stored in anonymised form only and used solely to determine the location of the access; storage ends after 8 weeks. We do not use tracking pixels and do not measure who opens or clicks our emails; there is no evaluation of this data. Most email clients only load external images after you explicitly allow it, and the message remains fully readable without the logo.
1.3 Purposes and Legal Bases
| Purpose | Legal basis |
|---|---|
| Provision of the account and the App functions | Art. 6(1)(b) GDPR (performance of a contract) |
| Location recording during rides | Art. 6(1)(a) GDPR (consent) |
| Storage of horse photos and video attachments as part of horse documentation | Art. 6(1)(b) GDPR (performance of a contract) |
| Profile photo (avatar) and access to camera/photos | Art. 6(1)(a) GDPR (consent) |
| Local reminders (appointment notifications) | Art. 6(1)(a) GDPR (consent) |
| Weather preview for appointments (location, map display) | Art. 6(1)(a) GDPR (consent) |
| Processing of subscriptions | Art. 6(1)(b) GDPR (performance of a contract) |
| Provision via connection/log data | Art. 6(1)(b) and (f) GDPR |
| Display of the logo in our system emails | Art. 6(1)(f) GDPR (legitimate interest in recognisable system emails that are harder to forge) |
| Stability, error analysis, security | Art. 6(1)(f) GDPR (legitimate interest in stable, secure and error-free operation of the App) |
1.4 Recipients / Processors
We use carefully selected service providers. Where they process personal data on our behalf, agreements under Art. 28 GDPR are in place. With some providers such an agreement applies automatically as part of their terms and conditions.
- Supabase – hosting, database, authentication, file storage. Server location EU (Ireland, AWS eu-west-1). US processing by the parent company, where applicable, on the basis of EU Standard Contractual Clauses.
- Hetzner Online GmbH (Germany) – creation and storage of encrypted backups of the application data. The backup is created on a server in Falkenstein and stored there, encrypted, on a storage service; the key remains solely with us, so Hetzner has no access to the contents. Server location Germany/EU.
- Mailjet (Mailjet SAS, France, a company of the Sinch group) – sending of transactional and system emails (e.g. registration confirmation, password reset). Server location EU.
- IONOS SE (Germany) – hosting of this website (including these legal texts) and of the logo that our system emails load when opened. Access data such as the requested resource, time, browser and operating system details as well as the IP address in anonymised form is processed in both cases, without any evaluation on our part. Retention according to IONOS: 8 weeks. Server location Germany/EU.
- RevenueCat, Inc. (USA) – subscription management/validation. In this context, a pseudonymous user ID, store identifiers, purchase information, subscription status as well as IP address and device/system information may be processed; full payment data is not transmitted to RevenueCat. Transfer to the USA on the basis of SCCs or the EU-US Data Privacy Framework.
- Sentry (Functional Software, Inc., USA; hosting in the European Union (EU) region) – error and crash reports. We technically limit the transmission of personal data to what is necessary (in particular, no transmission of personal identifiers by default). Any access from the USA takes place on the basis of SCCs or the EU-US Data Privacy Framework.
- OpenWeather Ltd (United Kingdom) – weather preview. We round the coordinates to two decimal places, about one kilometre, before transmitting them; the request is made by our server and your IP address is not transmitted. According to its own statements, OpenWeather stores neither the parameters nor the IP address of API requests, only the number of calls. As no personal data reaches this service, no agreement under Art. 28 GDPR has been concluded, nor is one required. Transfer to the UK on the basis of the EU adequacy decision.
- OpenPLZ API (openplzapi.org) – conversion of postal code and town into coordinates for the weather preview, based on the official postal code directories for Germany, Austria and Switzerland. The request is made by our server; only the postal code or town name you entered is transmitted, not your IP address and no identifier pointing to you. Only if there is no match do we fall back to MapTiler. As no personal data reaches this service, no agreement under Art. 28 GDPR has been concluded, nor is one required.
- MapTiler AG (Switzerland) – map display and fallback geocoding. Two uses: (a) map tiles for the map and tracking views – maps are loaded only when you open a feature that shows a map (e.g. recording rides or walks), not at app start. Your device loads the tiles directly from MapTiler, which necessarily transmits your IP address. (b) geocoding, fallback only – if the OpenPLZ API returns no match, MapTiler converts postal code/town into coordinates. The request is made by our server; your IP address is not transmitted in the process. Transfer to Switzerland on the basis of the EU adequacy decision.
- Apple Inc. and Google LLC – provision via App Store / Google Play and payment processing of in-app purchases. Reminders are generated locally on the device; no data is sent to push servers (APNs/FCM).
Payment data for in-app purchases is processed exclusively by Apple/Google; we do not receive complete payment data.
1.5 Transfer to Third Countries
Insofar as data is transferred to the USA (in particular RevenueCat, Sentry, and where applicable Apple/Google): EU Standard Contractual Clauses and/or the EU-US Data Privacy Framework. Transfers to the United Kingdom (OpenWeather): EU adequacy decision for the United Kingdom (most recently renewed with validity until December 2031). Transfer to Switzerland (MapTiler): EU adequacy decision for Switzerland.
1.6 Retention Period
We store your account and content data for as long as your account exists. If you delete your account (Settings → Delete account), your personal data is deleted, unless statutory retention obligations apply.
Error and crash data (Sentry) is stored only temporarily for error analysis and is automatically deleted after no more than 30 days.
Encrypted backups are maintained in a rolling procedure: hourly copies for up to 24 hours, daily copies for up to 14 days, weekly copies for up to 8 weeks, and monthly copies for up to 12 months. A deletion takes effect in the production database immediately; the data disappears from the backups once the respective copy expires, and after 12 months at the latest. This delayed deletion serves solely to ensure recoverability in the event of damage.
Connection and log data (server logs) on our infrastructure (Supabase) is deleted after no more than 7 days. The access data of our website host, which also records the loading of the logo from our system emails, is deleted after 8 weeks according to IONOS; the IP address is held there in anonymised form only, and we do not evaluate it.
We do not retain any payment data ourselves, since purchase and billing are handled via Apple or Google.
1.7 Data Security
We take appropriate technical and organizational measures in accordance with Art. 32 GDPR to protect your data against loss, misuse and unauthorized access. These include in particular encrypted data transmission (TLS/HTTPS), encrypted storage of passwords, row-based access restrictions (Row Level Security), access controls, and hosting within the EU. Backups are encrypted before transfer; the key remains with us, so the storage provider cannot inspect the contents. However, complete security of data transmission over the internet cannot be guaranteed.
1.8 App Permissions
The App requests – in each case only when needed: location (ride recording), camera/photos (profile and horse photos, video attachments), notifications (local appointment reminders). Reminders are scheduled locally on the device; there is no sending via external push services. Each permission can be revoked at any time in the device settings.
1.9 Your Rights
Access (Art. 15), rectification (16), erasure (17), restriction (18), data portability (20), objection (21). You can export a copy of your data at any time in the App (Settings → "Export my data"). You can delete individual content (horses, rides, training sessions, health entries, goals, tasks, calendar) directly in the App; deletion of individual/all data without account deletion can be requested informally at support@horselino.app; the entire account via Settings → Delete account. Consents can be withdrawn at any time with effect for the future (support@horselino.app). You can object to the processing of diagnostics data (f), which relies on legitimate interest, directly in the app: turn off Settings → Diagnostics & crash reports.
1.10 Right to Lodge a Complaint
Competent authority in Austria: Austrian Data Protection Authority (Österreichische Datenschutzbehörde), Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at.
1.11 No Automated Decision-Making
No automated decision-making, including profiling within the meaning of Art. 22 GDPR, takes place.
1.12 Children / Minimum Age
The App is intended for users of legal age and not for children. Insofar as processing is based on consent, in Austria this requires a minimum age of 14 years pursuant to Art. 8 GDPR; for younger persons, the consent of the legal guardians is required. We do not knowingly collect data from children below this age.
1.13 Changes
We adapt this policy when data processing or the legal situation changes. The version available in the App/website at any given time applies.
This English version is a translation provided for your convenience. The legally binding version of this Privacy Policy is the German version. In the event of any discrepancy between the German and English versions, the German version shall prevail.