Privacy Policy

The controller of your personal data is Marcin Szlęk, an entrepreneur registered in the Polish Central Register and Information on Economic Activity (CEIDG), trading as msbytes Marcin Szlęk, Raciborsko 350, 32-020 Raciborsko, Poland, tax ID (NIP): 867-187-72-43. For any matter concerning your personal data, write to [email protected] or to the postal address above.

We process personal data:

• lawfully, fairly and transparently;
• only for specified purposes and only to the extent necessary for them;
• keeping it accurate and no longer than necessary;
• with appropriate security (confidentiality and integrity).

We process your data for the following purposes:

• providing the Service: your account, kennel, dogs, runs, synchronisation between devices and, if you use them, connected services and social features — performance of a contract (Art. 6(1)(b) GDPR);
• handling your Pro subscription — performance of a contract (Art. 6(1)(b) GDPR) and, for accounting records, a legal obligation (Art. 6(1)(c) GDPR);
• answering your messages and support requests — our legitimate interest in communicating with you (Art. 6(1)(f) GDPR);
• sending important information about the Service, such as changes to these documents — legitimate interest (Art. 6(1)(f) GDPR);
• security of the Service, preventing abuse and moderating shared content — legitimate interest (Art. 6(1)(f) GDPR);
• necessary cookies for the website to work — legitimate interest (Art. 6(1)(f) GDPR);
• website statistics and analytics — only with your consent to analytics cookies (Art. 6(1)(a) GDPR);
• establishing, pursuing or defending legal claims — legitimate interest (Art. 6(1)(f) GDPR).

Importing activities from Garmin Connect is an optional feature of the Pro plan. It starts only when you link your account and confirm on the Garmin consent screen which data you allow us to access.

• What we receive: the activity type and name, start time, duration, distance, GPS route, speed, altitude, heart rate (if recorded), the name of the recording device, your user ID in that service and the access tokens. Tokens are stored encrypted.
• What we use it for: only to create run records in your MushTrack account and to show you the activities waiting to be imported. We do not sell this data, do not use it for advertising and do not use it to train artificial intelligence or machine-learning models.
• Who sees it: runs imported from Garmin are treated like runs recorded in the app — visible only to you unless you choose to share them.
• Retention: raw data received from the service is deleted once the activity is imported or ignored, and no later than 30 days after receipt. Imported runs stay in your account until you delete them or your account.
• Disconnecting: you can disconnect at any time in your MushTrack account settings or in Garmin Connect. We then delete the access tokens and the activities not yet imported, and stop receiving new data. On request we will also delete all runs imported from Garmin.

Garmin Ltd. and its affiliates process data in their own services as independent controllers, under their own privacy policies. Garmin is a trademark of Garmin Ltd. or its subsidiaries.

By default your kennel, dogs and runs are visible only to you. Content becomes visible to other users only when you choose to share it, within the audience you select in your settings. You can stop sharing or delete shared content at any time. Content that others have already seen or copied before deletion may remain with them.

We share data only as far as needed to run the Service, with:

• hosting, database, file storage and synchronisation providers that run the Service’s infrastructure;
• RevenueCat, Inc. — managing in-app subscriptions;
• Apple Inc. and Google LLC — processing in-app purchases in the App Store and Google Play;
• Google LLC (Google Analytics) — website statistics, only with your consent;
• Garmin — only if you link your Garmin Connect account, to the extent needed to authorise the connection and receive your activities;
• IT service and support providers, accounting firms and, where the law requires it, public authorities.

We do not sell your personal data.

Some recipients (Google, Apple, RevenueCat, Garmin) are located or process data outside the European Economic Area, mainly in the United States. Such transfers are based on the European Commission’s adequacy decision for the EU-U.S. Data Privacy Framework, where the recipient is certified, or on the Standard Contractual Clauses.

We keep account data, kennel data and runs for as long as your account exists. After you delete your account, your data is removed within 30 days, except where we must keep it longer by law (for example accounting records) or to establish or defend claims, until the limitation period ends. Correspondence is kept until the matter is closed. Server logs are kept for up to 90 days. Analytics data is kept under Google Analytics settings for up to 14 months.

We do not make decisions about you based solely on automated processing, including profiling, that produce legal effects or similarly affect you. Statistics shown in the app (for example a dog’s form or best season) are calculated for your information only.

You have the right to access your data, rectify it, have it erased, restrict its processing, receive it in a portable format and object to processing based on our legitimate interest. Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of earlier processing. To exercise these rights, write to [email protected]. You also have the right to lodge a complaint with a supervisory authority: in Poland, the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl), or the authority of the EU country where you live.

The website uses necessary cookies and, only with your consent, analytics cookies. Details and how to change your choice are described in the Cookie Policy.

We use encryption in transit (TLS), encryption of access tokens for connected services, access control and regular backups. Access to personal data is limited to persons who need it to run the Service.

We may update this policy when the Service or the law changes. The date at the top shows the latest version. We will inform you of significant changes in the app or by email before they take effect.

msbytes Marcin Szlęk, Raciborsko 350, 32-020 Raciborsko, Poland · [email protected]