Privacy Policy

This Privacy Policy describes how the Drillz mobile application collects, uses and protects your personal data, in accordance with the General Data Protection Regulation (GDPR, EU Regulation 2016/679) and the French "Informatique et Libertés" law. Drillz is an app that connects athletes to train together.

1. Data controller

The data controller is the publisher of the Drillz app. For any question relating to your personal data, you can contact us at: support@getdrillz.com.

2. Data collected

As part of using Drillz, we collect:

• Identification data: email address, name or username.
• Sports profile: sports practiced, level, training preferences, profile photo and information freely entered by the user.
• Approximate location: in order to suggest nearby events, drill requests and spots. Your exact position is never shared: it is deliberately blurred by about 250 meters on the server before any display or distribution.
• Content and interactions: events created, drill requests, messages exchanged through the messaging, reports and blocks.
• Technical data: connection data and information strictly necessary for the proper functioning and security of the App.

3. Purposes and legal basis

Your data is processed for the following purposes:

• Providing the service (account creation, matching, messaging, events). Legal basis: performance of the contract.
• Approximate geolocation to suggest nearby content. Legal basis: consent (revocable at any time in your device settings).
• Security, moderation and reporting. Legal basis: legitimate interest in ensuring a safe environment.
• Compliance with legal obligations. Legal basis: legal obligation.

4. Retention period

Your data is kept for as long as necessary to provide the service, for the lifetime of your account. When the account is deleted, the data is anonymized (see section 6). Location data is not kept in a form that would allow a precise position history to be reconstructed. Some data may be kept longer where required by law (legal obligations, handling of potential disputes).

5. Sharing with third parties

Drillz neither sells nor rents your personal data. Your data may be shared only with:

• other users, only for the information you make visible on your profile (your location remaining blurred by about 250 m);
• our technical providers (hosting, infrastructure) acting as processors and bound by confidentiality obligations;
• the competent authorities, where required by law.
• Meta Platforms (Facebook, Instagram), to measure whether our ads lead to app installs and sign-ups. The App includes the Meta SDK, which reports the install and app launches together with device information (model, iOS version, screen size, language, time zone) and an identifier generated by the SDK. Our servers also send Meta a small set of in-app events (account created, sport profile completed, session created, request sent or accepted, first message) with your email address and account ID in hashed form, your IP address and user agent. We never read the Apple advertising identifier (IDFA) and never ask for tracking permission. Meta uses this data as described in its own privacy policy.

6. Account deletion and anonymization

You can delete your account at any time directly from within the App. Deletion results in the anonymization of your data: your identifying personal information is erased or irreversibly anonymized, so that it can no longer be linked to you. Content that may remain (for example within conversations) is dissociated from your identity.

7. Your rights (GDPR)

In accordance with the GDPR, you have the following rights over your personal data:

• Right of access: obtain a copy of the data concerning you;
• Right to rectification: correct inaccurate or incomplete data;
• Right to erasure: request the deletion of your data;
• Right to object: object to certain processing;
• Right to portability: receive your data in a structured, machine-readable format;
• Right to restriction of processing and the right to withdraw your consent at any time.

To exercise these rights, contact us at support@getdrillz.com. You also have the right to lodge a complaint with the French data protection authority (CNIL, www.cnil.fr).

8. Cookies and trackers

The Drillz app does not use advertising cookies or trackers for commercial purposes. Only technical data strictly necessary for the operation of the App and the security of your session may be used. No third-party advertising tracking is implemented.

9. Data security

Drillz implements appropriate technical and organizational measures to protect your data against any unauthorized access, loss or disclosure. The server-side blurring of the exact position (about 250 m) is part of these privacy-by-design protection measures.

10. Changes to the policy

This Privacy Policy may be updated at any time. In the event of a substantial change, users will be informed. The date of the last update appears at the top of this page.