Effective date: 1 November 2026 · SportDev s.r.o.
SportDev s.r.o., IČO 10665081, DIČ CZ10665081, with registered office at Na Folimance 2155/15, 120 00 Praha 2, Czech Republic ("SportDev", "we", "us") operates the Sendio mobile application and the website sendioapp.com (collectively the "Service"). We are the data controller for all personal data processed in connection with the Service.
Privacy contact:privacy@sendioapp.com
We collect the following categories of personal data:
Email address, password hash (for email/password accounts), username, profile bio, avatar image, account visibility setting.
Session dates and times, the tricks you log, session notes, spot names and GPS coordinates, attached photos and videos, technique notes, planned sessions and tricks.
Follow relationships, follow requests, challenge records (sport, trick, expiry date, responses), notifications.
IP address, device type, app version, and request logs — collected automatically.
If the iOS app crashes or freezes, iOS gives it a technical report on its next launch, which it sends to our error tracking: app version, device model, iOS version and where in the code it happened. These reports contain no account, training or other personal data.
If you sign in via Google or Apple, we receive your email address from them, and from Google your profile picture, which becomes a new account's avatar (you can change or remove it). Google's own sign-in may collect other data under Google's privacy policy.
Feedback you send from the app reaches us by email with your email address, so we can reply.
Contract: processing necessary to provide the Service you have registered for.
Legitimate interest: error monitoring, security, and fraud prevention.
Consent: optional features such as GPS-based spot location.
We use the following third-party processors to operate the Service:
| Processor | Purpose | Data location |
|---|---|---|
| Amazon Web Services (AWS) | File storage (photos, videos, avatars) | EU — Frankfurt (eu-central-1) |
| Google LLC | Authentication (Google Sign-In) | Google's infrastructure |
| Apple Inc. | Authentication (Sign in with Apple) | Apple's infrastructure |
| Sentry (self-hosted, on Contabo GmbH servers) | Error tracking and diagnostics, including the iOS app's crash reports | EU — Germany |
| New Relic, Inc. | Application performance monitoring | New Relic's infrastructure |
We retain your personal data for as long as your account is active. If you delete your account, all personal data associated with it is permanently deleted within 30 days. One exception: reports other riders filed about your account (your username at the time, the reason and what they wrote) are kept for up to 12 months after your account is deleted, so we can still deal with abuse. Feedback emails are kept for up to 12 months (deleting your account doesn't reach our mailbox) and deleted sooner if you ask. Anonymised, non-identifiable aggregate statistics may be retained for analytical purposes indefinitely.
Access
Request a copy of the personal data we hold about you.
Rectification
Correct inaccurate or incomplete data.
Erasure
Request deletion of your personal data (right to be forgotten).
Restriction
Request that we limit how we process your data.
Portability
Receive your data in a structured, machine-readable format.
Objection
Object to processing based on legitimate interest.
To exercise any of these rights, contact us at privacy@sendioapp.com. We will respond within 30 days. You also have the right to lodge a complaint with the Czech Data Protection Authority (ÚOOÚ) at www.uoou.cz.
The Service is not directed at children under the age of 13. We do not knowingly collect personal data from children under 13. If you believe a child under 13 has provided us personal data without parental consent, contact privacy@sendioapp.com and we will delete it promptly.
All user data is stored in AWS Frankfurt (eu-central-1) within the European Economic Area. Authentication providers (Google, Apple) may process limited data in their own systems; such transfers are covered by Standard Contractual Clauses or equivalent GDPR-compliant safeguards.
We implement appropriate technical and organisational measures to protect your personal data, including encrypted connections (HTTPS/TLS), access controls, and regular security reviews.
We may update this Privacy Policy from time to time. We will notify you of material changes via email or in-app notification at least 14 days before they take effect.