Legal
Privacy Policy
This notice explains what personal data Taawn processes, why we process it, and what choices and rights you have. Effective 2026-07-19.
Controller and contact
Controller: Steffen Urban (Einzelunternehmen), Pfarrgasse 5b, 07743 Jena, Germany. Email: [email protected] This notice covers the website, Android app, account services, uploads, segment and run processing, notifications, and related support handling.
Data categories
Depending on how you use Taawn, we may process: • Account and profile data (email, username, password hash, auth-provider identifiers, country of residence, profile fields) • Age attestation (18+) and records of legal acceptances (Terms, Privacy Policy, Safety & Risk Acknowledgment), including version and timestamp • Uploaded videos, GPX/telemetry files, and trail/run metadata — which may include precise location data and riding footage • Social interactions (follows, comments, likes, reports) • Push-notification tokens • Support and report messages • Technical logs needed for security and operation • Optional crash diagnostics (device, browser, and app context) if you opt in on the website or Android app
Purposes and legal bases
We process data to create and operate your account, authenticate you, provide video comparison and ride-analysis features, host content, enforce product rules, prevent abuse, respond to support requests, and meet legal obligations. Legal bases under GDPR include: • Contract performance (Art. 6(1)(b)) — core account and service features you request • Legitimate interests (Art. 6(1)(f)) — security, abuse prevention, service improvement of necessary operations, accountability for legal acceptances • Legal obligation (Art. 6(1)(c)) — where we must retain or disclose data • Consent (Art. 6(1)(a)) — optional processing such as non-essential crash diagnostics Necessary processing for the service differs from optional consent-based features. Optional crash diagnostics and similar non-essential analytics remain off unless you opt in.
Recipients
We use service providers that process data on our behalf or as independent controllers where applicable, including: Hetzner (hosting), Cloudflare (CDN/security), Beam (compute/processing infrastructure), Modal (compute), Resend (email), Google/Firebase (push and related platform services), Apple (if Apple sign-in or related services are used), Mapbox (maps), and Google Play / Apple App Store operators for distribution and in-app purchases where applicable.
International transfers
If personal data is transferred outside the EEA, we rely on appropriate safeguards such as an adequacy decision or EU Standard Contractual Clauses (SCCs), and additional measures where required.
Retention
• Account data: kept while your account is active and as needed afterward for legal claims or obligations • Operational logs: typically about 90 days • Backups: typically rotated on about a 30-day cycle • Legal acceptances: retained in pseudonymized form after account deletion for accountability (e.g. to show which terms version was accepted) We keep personal data no longer than needed for the purposes above unless a longer period is required by law.
Export and deletion
You can delete your account in Settings (self-service). Deletion disables the account immediately and erases live user-attributable data from production systems; backup copies expire on the normal rotation cycle. You may also use the external page /delete-account. Data export is available via Settings or by contacting [email protected]. Export covers core account-owned data.
Your rights
Under GDPR you may have rights of access, rectification, erasure, restriction, objection, and data portability, and you may withdraw consent for optional processing at any time without affecting earlier lawful processing. In Germany you may complain to the Thüringer Landesbeauftragter für Datenschutz und Informationsfreiheit (TLfDI). You may also contact another competent supervisory authority in the EU/EEA. Contact us first at [email protected] if you prefer.
Security and automated decisions
We use technical and organizational measures intended to protect personal data, but no system is perfectly secure. Taawn does not make legally binding decisions or similarly significant automated decisions about you. Route, ranking, and comparison outputs are product features, not decisions with legal effect.