I. Name and Contact Information of the Controller and the Data Protection Officer

Controller:
PulseFusion UG (haftungsbeschränkt)
Privatstr. 8
13053 Berlin
Germany
Email: info@pulsefusion.app

Data Protection Officer:
vimopro GmbH
Warenburgstraße 8
78050 Villingen-Schwenningen
Germany
Email: info@pulsefusion.app


II. Processing of Personal Data – Purposes and Legal Bases

1. General Information on Data Processing in the Runimals App

When using the Runimals App, personal data may be collected, stored, and further processed. This includes, for example, device identifiers, IP addresses, app activity data, location information (if enabled), and optional account data.

All data processing activities are carried out in accordance with the General Data Protection Regulation (GDPR).

If certain functions require access to or storage of information on your device (e.g., device identifiers), this may fall under the legal basis of § 25 (2) no. 2 TDDDG if technically necessary.
For any optional, non-essential processing activities (e.g., analytics, personalization) we request your explicit consent (Art. 6 (1) lit. a GDPR in conjunction with § 25 (1) TDDDG).

You may withdraw your consent at any time with effect for the future.


2. Using the Runimals App / Server Log Files

When the App communicates with our servers (e.g., loading routes, checking updates), the following data may be collected automatically:

  • IP address
  • Date and time of the request
  • Device type, operating system, app version
  • Country and language settings
  • Requested files or endpoints

Legal basis: Art. 6 (1) lit. f GDPR (legitimate interest in operating the App securely and efficiently).

Log files are stored for up to 180 days and then automatically deleted.


3. Hosting and Backend Infrastructure

The backend services for the Runimals App are hosted by Namecheap, Inc., with servers located in Germany and/or the EU.

The hosting provider may process:

  • IP addresses
  • Metadata (time of request, file requests)
  • Basic usage data

Legal basis: Art. 6 (1) lit. f GDPR (legitimate interest in providing a stable and secure App experience).

A Data Processing Agreement pursuant to Art. 28 GDPR has been concluded.


4. Location Data (Optional)

The App may request access to your location to:

  • Suggest Runimals routes near you
  • Display nearby free or premium routes
  • Improve app functionality

Location data is processed only when you grant permission (consent according to Art. 6 (1) lit. a GDPR).

You can revoke access at any time via your device settings.

Runimals does not track your route while running.
Runimals only provides GPX files. Your actual running activity is recorded by your watch or third-party app (e.g., Strava, Garmin).


5. Cookies and Similar Technologies in the App

The Runimals App uses:

  • Essential technologies (needed for login, security, API calls)
  • Optional analytics/tracking tools (with consent)

Essential technologies are processed based on Art. 6 (1) lit. f GDPR and § 25 (2) no. 2 TDDDG.

All optional tracking requires prior consent via the in-app consent banner.


6. Analytics and Tracking

To improve the App and understand usage patterns, we may use services such as:

  • Google Analytics for Firebase / Firebase Crashlytics
  • Meta Analytics / App Events
  • Google Tag Manager (app version)

These tools may collect pseudonymous device data, crash reports, usage metrics, and interactions.

Legal basis: Art. 6 (1) lit. a GDPR (consent).
Data is stored according to the provider’s retention periods.

Detailed information can be found in each provider’s privacy documentation.


7. GPX File Downloads and Route Usage

When downloading a GPX file or previewing a route, we may process:

  • Route ID
  • Category (free or premium)
  • Timestamp
  • Device type
  • Anonymized export frequency

No health data or actual running activity is collected.
We do not track the usage of the GPX file outside the App.

Legal basis:

  • Art. 6 (1) lit. b GDPR (providing the service)
  • Art. 6 (1) lit. f GDPR (fraud prevention, analytics)

8. Registration and Account Management

When you create an account via email, Apple Sign-In, or Google Sign-In, we process:

  • Your email address or Apple/Google account ID
  • Encrypted login tokens
  • Profile information (optional)

Legal basis: Art. 6 (1) lit. b GDPR (contract performance).

You may delete your account at any time in the App.


9. Contacting Us

When you contact us by email or through support channels, we process your message and any personal data you voluntarily provide.

Legal basis:

  • Art. 6 (1) lit. b GDPR (contract-related inquiries)
  • Art. 6 (1) lit. a GDPR (voluntary information)

10. Social Media Profiles

PulseFusion with Runimals operates social media pages on:

  • Instagram
  • Facebook
  • TikTok
  • LinkedIn

These pages are under joint controllership with the respective platform providers (Art. 26 GDPR).

Platform-specific data processing information can be found in the respective privacy sections of the platforms.


11. Data Transfers to Third Countries

If personal data is processed by providers outside the EU/EEA (e.g., US technology companies), this is based on:

  • Adequacy decisions, or
  • EU Standard Contractual Clauses (SCCs)

Residual risks cannot be entirely excluded and are indicated within the service descriptions.


III. Your Rights as a Data Subject

You have the following rights:

  • Right of access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to object (Art. 21 GDPR)
  • Right to withdraw consent at any time (Art. 7 (3) GDPR)
  • Right to data portability (Art. 20 GDPR)

Supervisory Authority:
Berlin Commissioner for Data Protection and Freedom of Information
Friedrichstraße 219
10969 Berlin
Germany
Email: mailbox@datenschutz-berlin.de


IV. Updates to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect legal requirements or technical developments.
The version published within the App or on our website is the one that applies.