Albor privacy policy
Last updated: 1 November 2026
Who is responsible
Albor is a training app created by Diego Ramos Olivares (Spain). For any privacy matter, write to [email protected].
What data we process and why
- Your account. Your email and, if you sign in with Google or Apple, the identifier they give us. So you can sign in and your progress is yours.
- Your profile. Your name, your tag (Name#1234), your photo (if you upload one), your bio, your title and whether your profile is private. Players who follow you can see them.
- Your path. What you answer at the start: your sports, how many days a week you want to train, your level and your goal. It tailors challenges, missions and the village to you. Only you see it.
- About you (health data). Your sex, birth year, weight and height, only if you tick the consent box. They adjust strength medals and effort calculations to your body. You can delete them at any time in Settings → Privacy → About you.
- Your workouts. Routines, exercises, sets (weight and reps), duration, effort and how it went. For running, cycling, swimming or hiking, also distance, elevation, pace and heart rate if your watch provides it. For other sports, the sport, the score if you log it and which friends you played with. The workout photo, if you add one.
- Health Connect data. Only if you connect it: exercises, distance, elevation, heart rate and calories of your workouts. Read only; Albor never writes to Health Connect.
- Location (GPS). Only during a live running, cycling or hiking workout, and only with your permission. We store the route to measure distance and elevation and draw the map. Near your home (a private zone stored only on your phone) the map hides the start and the end.
- Where you train. The name of the place or the city of each workout, never coordinates. Nearby places are searched on OpenStreetMap with your position rounded to about 100 m.
- Your gym. The gym, pool or track you choose and whether you want to appear in its rankings (off by default). When a live workout starts, the phone checks once where you are to know whether it starts at your gym: the position is not stored, only whether it was there. Searching places or races nearby uses your position at that moment and does not store it.
- Albor+. If you subscribe, the store (Google Play or App Store) charges you and tells us, through RevenueCat, which plan you have and until when, with your user ID. We never see your card or payment details.
- Measurements and progress photos (Albor+). Body measurements and progress photos you add. They are health data: only you can see them, never your friends or your profile. Delete them whenever you like.
- Social data. Who you follow and who follows you, likes, comments, tournaments, gifts and tribes.
- "Send feedback". The text you write, the screenshot if you add one, the app version and the phone model.
- App errors. If the app crashes, the error report goes to Sentry (what failed, app version, phone model). Your email, name and workouts are not sent.
- Usage statistics. In our own database, without third-party tools: when you open the app, finish a workout, build, gift or join a tribe. Only aggregate figures, only seen by the person responsible for Albor.
- Notifications. Your phone's identifier to send you alerts. You can turn them off in Settings.
Legal bases. Health data is processed only with your explicit consent (GDPR art. 9.2.a), which you can withdraw at any time. Account, profile, workouts and social features are processed to provide the service you request (art. 6.1.b). Error reports and usage statistics, on our legitimate interest in the app working and improving (art. 6.1.f).
Who we share it with
- Supabase (database, photo storage and sign-in; in Ireland, EU), Resend (account emails), Sentry (error reports; in Germany, EU), Google (Firebase Cloud Messaging) and Expo (notifications), OpenStreetMap (nearby places, without your account), Google or Apple (only if you sign in with them) and Google Play or App Store with RevenueCat (only if you buy Albor+).
- Albor players see your name, tag, photo, title, level and bio; your workouts and achievements if your profile is not private or they are approved followers.
Some providers may process data outside the European Economic Area, always with GDPR safeguards. We do not sell your data or use it for advertising.
How long
While you have the account. If you delete it (Settings → Account → Delete account), everything is deleted immediately, including progress photos. Server backups rotate within 7 days; Sentry reports are deleted within 90 days at most.
Your rights
You can request access, rectification, erasure, objection, restriction and portability by writing to [email protected]. You can also complain to the Spanish Data Protection Agency (aepd.es).
Minors
Albor is for people aged 16 and over.
Changes
If we change this policy, we will tell you in the app before the change applies.