Privacy Policy & Terms of Use

1. Overview

The Cursy application is currently in a proof-of-concept (PoC) phase. Its goal is to help athletes better understand their performance, recovery, and training data — including potential integrations with third-party platforms such as Garmin Connect.

At this stage, the application is not publicly available and does not collect, store, or process any personal data. All current testing is performed with demo or anonymized data only.

2. Data Controller

Data Controller:

Jan Fuxa
Czech Republic

Contact Email: jan.fuxa@cursy.online

If you have any questions regarding data protection or this Privacy Policy, please contact us at the email address above.

3. Legal Basis for Data Processing

When personal data processing begins, it will be based on:

• User consent (GDPR Art. 6(1)(a)) – You will be asked to explicitly consent to data processing when connecting third-party services (e.g., Garmin Connect).
• Legitimate interest (GDPR Art. 6(1)(f)) – In some cases, we may process data to improve app functionality, security, and user experience.

You have the right to withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

4. Types of Data Processed

Once the application connects to Garmin Connect or other sports platforms, Cursy may process the following data (subject to your explicit consent):

• Training activities (distance, duration, type of activity)
• Heart rate data
• Performance metrics (pace, speed, power, cadence)
• Recovery information (sleep data, HRV, stress levels)
• Account information (name, email, profile data from connected services)

5. Purpose of Data Processing

When personal data processing begins, it will be used solely for:

• Providing personalized training recommendations
• Displaying performance overviews, statistics, and trends
• Ensuring proper login functionality and account connections
• Improving app functionality and user experience
• Ensuring security and preventing misuse

6. Data Retention Period

Personal data will be retained only as long as necessary to provide the service or until you request deletion.

• Active accounts: Data is retained while your account is active and you use the service.
• Inactive accounts: Accounts inactive for 24 months may be automatically deleted, including all associated personal data.
• Legal obligations: In some cases, we may be required to retain certain data for legal or regulatory purposes.

You can request immediate deletion of your data at any time by contacting us.

7. Data Sharing and Third-Party Services

User data will not be shared with any third parties, except for:

• Technical service providers necessary to operate the application (e.g., Garmin API, Supabase, cloud hosting providers)
• Legal obligations (e.g., if required by law or court order)

We ensure that all third-party processors comply with GDPR and sign Data Processing Agreements (DPAs) to protect your data.

International Data Transfers

Some of our service providers (e.g., cloud hosting) may be located outside the EU/EEA (e.g., USA). In such cases, we ensure adequate protection through:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Adequacy decisions (e.g., for countries recognized as providing adequate data protection)

8. Cookies and Analytics

Cursy may use cookies and analytics tools (e.g., Google Analytics, Sentry) to:

• Understand how users interact with the app
• Improve performance and user experience
• Detect and fix errors

You can manage cookie preferences in your browser settings.

9. Automated Decision-Making and AI

Cursy may use automated processing and AI-based analysis to provide personalized training recommendations and insights.

You have the right to:

• Object to automated decision-making
• Request human review of any automated recommendations
• Receive an explanation of how decisions are made

10. User Rights (GDPR)

You have the following rights regarding your personal data:

• Right of access – Request a copy of your personal data
• Right to rectification – Correct inaccurate or incomplete data
• Right to erasure ("right to be forgotten") – Request deletion of your data
• Right to data portability – Receive your data in a structured, machine-readable format
• Right to object – Object to certain types of data processing
• Right to restrict processing – Limit how your data is used
• Right to withdraw consent – Withdraw consent at any time

To exercise any of these rights, please contact us at: jan.fuxa@cursy.online

11. Data Security

Cursy implements appropriate technical and organizational measures to protect personal data against:

• Unauthorized access
• Loss or destruction
• Misuse or alteration

These measures include:

• Encryption of data in transit and at rest
• Access controls and authentication mechanisms
• Regular security audits and updates

However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security but will notify users promptly in case of a data breach.

12. Data Breach Notification

In the event of a data breach affecting your personal data, we will:

• Notify affected users within 72 hours (as required by GDPR)
• Inform relevant supervisory authorities
• Provide details about the breach and steps taken to mitigate risks

13. Age Restrictions

Cursy is not intended for use by individuals under the age of 16.

If we become aware that a child under 16 has provided personal data without parental consent, we will delete it promptly. Parents or guardians who believe their child has provided personal data should contact us immediately.

14. Third-Party Integrations

When connecting a Garmin account or other third-party service in future versions, you will be asked to grant explicit permission.

All data access will occur in accordance with:

• Garmin's API Terms of Service
• This Privacy Policy & Terms of Use
• Applicable data protection laws (GDPR)

We are not responsible for the privacy practices of third-party services. Please review their privacy policies before connecting your accounts.

15. Use of the Application (Terms of Use)

The current version of Cursy is provided for testing and demonstration purposes only.

• Access may be limited to selected testers or developers
• Features, integrations, and design are subject to change without notice
• Cursy is in active development and may contain bugs or incomplete features

16. No Warranty

Cursy is provided on an "as is" and "as available" basis.

We do not guarantee:

• Uninterrupted or error-free service
• Accuracy or completeness of data
• Compatibility with all devices or platforms

However, this does not limit our liability for:

• Damages caused intentionally or through gross negligence
• Personal injury or harm to health
• Liability that cannot be excluded by law

17. Limitation of Liability

To the maximum extent permitted by law, Cursy and its developers are not liable for:

• Indirect, incidental, or consequential damages
• Loss of data, profits, or business opportunities
• Damages arising from third-party integrations (e.g., Garmin API downtime)

This limitation does not apply to damages caused intentionally, through gross negligence, or to personal injury.

18. Updates to this Policy

This document may be updated as the project evolves or when new features are introduced.

• We will notify users of material changes via email or in-app notification
• Continued use of the app after changes constitutes acceptance of the updated policy
• The latest version will always be available on the official Cursy website or app page

Last updated: January 2025

19. Governing Law and Dispute Resolution

This Privacy Policy and Terms of Use are governed by the laws of Czech Republic.

Any disputes will be resolved in the courts of Czech Republic.

If you are a consumer residing in the EU, you also have the right to lodge a complaint with your local data protection authority.

20. Contact and Complaints

For any inquiries regarding privacy, data protection, or terms of use, please contact:

📧 Email: jan.fuxa@cursy.online

If you believe your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority in your country (e.g., ÚOOÚ in Czech Republic).