Privacy Policy

At Onelior ("we", "us", or "our"), we place the highest priority on protecting your personal data and health information. This Privacy Policy outlines how your data is collected, used, stored, and safeguarded when you use the Onelior mobile application and related web services.

1. Information We Collect

To provide our services and calculate your athletic progression, Onelior collects and processes the following data categories:

• Account Registration: Email address, full name, profile image, and authentication tokens provided via Sign in with Apple or Google Sign-In.
• Workout & Health Data (Apple HealthKit): Upon your explicit authorization, Onelior accesses completed workout summaries (workout type, duration, start/end timestamps). Note: Heart rate, HRV, sleep, and step counts are neither requested nor accessed in version 1.0.
• User Content & Preferences: Personal goals, discipline streaks, friend connections, and workout notes created within the app.
• Technical Diagnostics: Anonymous crash logs, app performance metrics, and device specifications (iOS version, device model) to ensure stability.

2. Apple Health (HealthKit) Data Declaration

Data retrieved from Apple Health (HealthKit) is strictly used for core app functionality:

• Displaying your historical workout logs inside the Onelior app.
• Processing completed workouts to update your 7 athletic profile stats (Strength, Endurance, Speed, etc.).

Restrictions & Compliance: In accordance with Apple App Store Review Guidelines, HealthKit data will never be disclosed to third-party ad brokers, sold, or used for marketing or data-mining purposes.

3. Purposes of Data Processing

We process your personal information strictly for the following purposes:

• Creating and authenticating your user account.
• Calculating athletic levels, XP gains, and 7 core athletic stat scores.
• Enabling social workout sharing exclusively with your confirmed friends.
• Securing app infrastructure and preventing unauthorized access.
• Responding to your technical support inquiries.

4. Data Storage & Security

All data in transit is encrypted using industry-standard HTTPS/TLS protocols. Access and refresh tokens are securely stored on your device using the iOS Keychain (`kSecAttrAccessibleWhenUnlockedThisDeviceOnly`). Backend database servers are protected behind firewall-secured data centers with access logging.

5. Data Sharing & Third Parties

We do not sell, rent, or trade your personal data. Data is shared only when legally required by governmental authorities or with trusted cloud infrastructure providers (e.g., database hosting) operating under strict data protection contracts.

6. User Rights & Account Deletion

Under applicable privacy laws (GDPR, CCPA, KVKK), you possess the following rights:

• The right to access and export a copy of your personal data.
• The right to request correction of inaccurate profile information.
• Right to Erasure (Account Deletion): You can delete your account natively inside the app via Profile ➔ Settings ➔ Delete Account. Alternatively, you can submit a web deletion request on our Account Deletion Request Page.

7. Children's Privacy

Onelior is not directed to children under 13 years of age. If we become aware that we have inadvertently collected data from a child under 13, we will delete it immediately.

8. Updates to This Policy

We may update this Privacy Policy periodically. When changes occur, the updated date at the top of this page will be revised.

9. Contact Information

If you have questions regarding this Privacy Policy or your data protection rights, please contact us:

Email: privacy@onelior.com or support@onelior.com
Web Support: https://onelior.com/support