Privacy policy

Controller

• Andrei Daniel Baltaretu, NIE Y0966204B
• Address: [address pending]
• Privacy email: support@greater.es

GREATER’s role

For your account data (name, email, phone, login) and for using the app, the controller is the owner of GREATER.

Data an academy keeps about its students (attendance, belts, fees, announcements) is decided by the academy: the academy is the controller and GREATER processes it on its behalf, only to provide the service.

Data we process

• Account: name, email, phone and login details (email, mobile or Google).
• Profiles: photo, date of birth, country, weight and height if you add them, and children’s profiles managed by a parent or guardian.
• Academy activity: bookings, attendance, belts and grades, announcements and messages.
• Payments: fees and class packs. Card payments are processed by Stripe; GREATER does not store card details.
• Technical data: device, notifications and error logs needed for the app to work.
• On the website: if you use the contact form, your name, email, your academy’s name (if given) and your message; if you message us on WhatsApp or by email, the data in that message. Website analytics use no cookies and identify no one.

Purposes and legal basis

• Providing the app and managing your account and payments: performance of a contract (art. 6.1.b GDPR).
• Providing the service to the academy as a processor: the contract with the academy (art. 28 GDPR).
• Sending app notifications: your consent, which you can withdraw in your phone settings.
• Security, fraud prevention and technical improvement: legitimate interest (art. 6.1.f GDPR).
• Tax and accounting obligations: legal obligation (art. 6.1.c GDPR).
• Replying to people who contact us through the form, WhatsApp or email: your consent, given by ticking the form’s box or by writing to us.

Children

Children’s profiles are created and managed by their parent or guardian from their own account. Children under 14 cannot sign up on their own (art. 7 LOPDGDD). If we find a child’s data without parental consent, we will delete it.

How long we keep data

While your account is active or the academy uses the service. After that, data is blocked for the periods required by law (for example, tax) and then deleted. Contact form messages are kept only in our mailbox, for as long as needed to help you and for one year at most, unless you become a customer.

Who we share data with

We do not sell data. To provide the service we use processors bound by contract and safeguards:

• Google Firebase (database, login, storage and notifications).
• Stripe (card payments).
• Vercel (website hosting, contact form delivery and cookieless analytics).
• Resend (service emails and delivery of contact form messages).
• Mux (videos inside the app).
• The academy you belong to sees the data about your activity there.

Transfers outside the EU

Some of these providers may process data in the United States, under the EU-US Data Privacy Framework or the European Commission’s standard contractual clauses.

Your rights

You can request access, rectification, erasure, objection, restriction and portability, and withdraw consent, by writing to support@greater.es. If the data belongs to an academy, you can also ask the academy. If you are not satisfied, you can complain to the Spanish Data Protection Agency (www.aepd.es).

Security

We use encrypted connections (HTTPS), rule-based access restricted to each academy’s data, and providers with recognised security measures.

Changes

If we change this policy we will announce it in the app and update the date on this page.