1. Data controller
ESREF AKSU (AKSU WORKS)
Individual entrepreneur, SIREN 992 228 031
1 rue Marguerin, 75014 Paris, France
Any privacy question or request to exercise your rights may be sent by post to this business address.
2. Data stored by DeckBurn
DeckBurn does not require an account and does not directly collect your name, email address, or health data.
The following information is stored only on your device:
- your display preferences;
- Tabata timer settings;
- the current workout state and the history of drawn cards.
This information is used to restore your settings and workout. It is not sent to AKSU WORKS and is deleted when you clear the app's data or uninstall it.
If you choose to create an invitation, a copy of the workout name, its four exercises (instructions, equipment and counting), and the deck code is sent to the sharing service hosted on Vercel and stored in Upstash Redis for 90 days. Anyone with the link or QR code can view this copy. Your progress, durations and workout history are not sent. Editing or deleting the workout on your phone does not delete the shared copy.
The IP address is used during the request to limit abuse. Only a hash of the address is stored in the API rate-limit counters, for up to two minutes. Hosting providers may process technical request information according to their own policies.
3. Advertising and data processed by Google
The app uses Google AdMob to display ads and Google User Messaging Platform (UMP) to collect and remember your privacy choices.
Depending on your device, region, and choices, Google and its partners may process:
- your IP address and an approximate location inferred from it;
- device identifiers or advertising identifiers when their use is permitted;
- technical information, diagnostics, and performance data;
- interactions with ads, including impressions and clicks.
This processing may be used to deliver ads, measure their performance, limit their frequency, prevent fraud, and, when you consent, personalize ads. See Google's information about data from partner apps and its privacy policy.
4. Consent and control of your choices
Where required by law, a Google consent form is shown before any advertising request. DeckBurn does not request Apple's App Tracking Transparency (ATT) permission to track you across apps and websites.
You can refuse tracking or personalization without losing access to DeckBurn's features. Where required in your region, the “Ad privacy choices” link in the app lets you change your decision at any time.
5. Legal bases
Depending on the processing, advertising data is processed on the basis of:
- your consent, particularly for personalization and access to certain identifiers;
- applicable legal obligations;
- the legitimate interests of Google or its partners, where permitted by law, particularly for security, fraud prevention, and certain advertising measurements.
The applicable purposes and legal bases are detailed in the privacy form shown in the app.
6. Recipients and transfers
AKSU WORKS does not sell personal data. Advertising-related data may be processed by Google Ireland Limited, Google group companies, and the ad technology providers listed in the consent form.
Vercel and Upstash process invitation data to provide the sharing service.
Some recipients may be located outside the European Economic Area. Google states that these transfers are governed by mechanisms recognized under applicable law, including standard contractual clauses where necessary.
7. Retention periods
Settings and workouts stored locally remain on your device until you reset them, clear the app's data, or uninstall it. For data processed by Google and its partners, retention periods are defined in their own policies and according to your consent choices.
Invitations are automatically deleted from the sharing storage after 90 days. Copies imported by your friends remain on their devices.
8. Your rights
Depending on your situation, you may request access to, correction or deletion of, restriction of or objection to the processing of your data, and withdraw your consent. You can send your request to the data controller by post at the address above.
You can also lodge a complaint with the French Data Protection Authority (CNIL).
9. Children
DeckBurn is a general workout app and is not specifically intended for children. AKSU WORKS does not knowingly collect personal data directly from children.
10. Changes
This policy may be updated to reflect changes to the app, advertising services, or applicable law. The update date at the top of this page identifies the current version.