Privacy Policy

Last Updated: October 2026

1. Introduction

This Privacy Notice explains how Sportreact collects, uses, stores, and protects your personal data when you:

• Visit our website;
• Use the Sportreact mobile application;
• Purchase Sportreact products or services; or
• Interact with us through our online platforms.

It describes what personal data we collect, why we process it, the legal basis for processing, how long we retain it, who we share it with, and the rights available to you under applicable data protection laws.

2. Data Controller

Sportreact is the controller responsible for processing your personal data.

Company Details

sportreact d.o.o.
Avenija Dubrovnik 15
10000 Zagreb
Croatia

OIB: 74074278578

Data Protection Officer
Email: dpo@sportreact.com

3. How We Process Your Personal Data

User Registration and Profile Management

We process personal data required to create and manage your Sportreact account.

Data collected

• First and last name
• Email address
• Date of birth
• Country
• Gender
• Profile category (Athlete or Trainer)
• Profile description
• Sports
• Years of experience
• Height
• Weight
• Number of training sessions (Athletes)
• Number of trainees (Trainers)

Legal basis

Performance of a contract.

Activities and Training Sessions

We process information necessary to create teams, build exercises, share workouts, and record training activities.

Data collected

• User ID
• Team ID
• Team owner ID
• Activity results
• Exercise images (when creating custom exercises)

Legal basis

Performance of a contract.

Performance Analysis

We analyze activity data to provide statistics, rankings, personal bests, team comparisons, and leaderboards.

Data collected

• Athlete ID
• Trainer ID
• Team ID
• Activity results
• Athlete name

Legal basis

Performance of a contract.

Community Hub

If you choose to share workouts publicly, we process information necessary to publish your content within the Sportreact community.

Data collected

• User ID
• Name
• Profile photo
• Workout photos and videos

Legal basis

Performance of a contract.

Equipment & Payments

Equipment Purchases

We process information necessary to complete purchases and deliver Sportreact equipment.

Data collected

• Name
• Phone number
• Shipping address
• Email address
• Payment information

Legal basis

Performance of a contract.

Data processors

• Stripe

Subscriptions and In-App Purchases

We process payment information required for subscriptions and in-app purchases.

Data collected

• Name
• Payment method (Google Play, Apple App Store or Stripe)

Legal basis

Performance of a contract.

Data processors

• Stripe
• Google Play
• Apple App Store

Sales & Marketing

Contact Forms and Live Chat

When you contact us through our website, we process your information to respond to your enquiry.

Data collected

• Email address

Legal basis

Performance of a contract.

Data processors

• Wix
• HubSpot
• Attributer

Book a Demo

When you schedule a product demonstration, we process your booking information.

Data collected

• Name
• Email address
• Phone number (optional)
• Reason for enquiry (optional)

Legal basis

Performance of a contract.

Data processor

• Calendly

Lead Advertising

We collect contact information through advertising campaigns on Meta and Google platforms.

Data collected

• Name
• Email address
• Occupation
• Referring website
• Advertisement clicked

Legal basis

Legitimate interests.

Newsletters

We offer:

• Marketing newsletters for users who subscribe through our website; and
• Product updates and service announcements for existing customers.

Data collected

• Name
• Email address

Legal basis

• Consent (website subscribers)
• Legitimate interests (existing customers)

Data processors

• Wix
• HubSpot

Analytics

App Analytics

We use analytics tools to understand how our application is used and improve its performance.

Data collected

• User ID
• In-app interactions

Legal basis

Consent.

Data processor

• Google

Website Analytics

We analyze website usage to improve user experience and website performance.

Data collected

• IP address
• Approximate location
• Website interactions

Legal basis

Consent.

Data processor

• Google

4. International Data Transfers

Some of our service providers may process personal data outside the European Economic Area, including in the United States.

International transfers may occur when using the following services:

• Stripe (payments)
• Google Play and Apple App Store (subscriptions)
• Wix
• HubSpot
• Calendly
• Google Analytics
• Meta
• Attributer

Where personal data is transferred outside the EEA, Sportreact relies on appropriate safeguards in accordance with Article 46 of the GDPR, including the European Commission's Standard Contractual Clauses (SCCs) and, where applicable, supplementary technical and organisational measures to ensure an adequate level of protection.

5. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes described in this Privacy Notice or to comply with legal obligations.

Our standard retention periods are:

User Accounts

• Personal data is permanently deleted when an account is deleted.
• Inactive accounts are automatically removed after 5 years.
• Secure server backups may retain deleted information for up to 10 days.

Newsletter Subscribers

• Users who unsubscribe are removed immediately from future communications.
• Inactive subscriber records are deleted after 5 years.

Sales Leads

Information collected through contact forms, demo requests, events, or marketing campaigns is retained for up to 2 years unless further engagement occurs.

Analytics Data

Website and application analytics data is retained for a maximum of 14 months.

Financial Records

Invoices and accounting records relating to equipment purchases are retained for 11 years, as required by applicable law.

6. Your Rights

Under applicable data protection laws, you may have the right to:

• Access your personal data;
• Correct inaccurate or incomplete information;
• Request deletion of your personal data;
• Restrict processing;
• Receive your personal data in a portable format;
• Object to certain types of processing;
• Withdraw consent where processing is based on consent.

You can exercise your rights by:

• Updating certain information directly within your Sportreact account;
• Deleting your account through the application;
• Contacting our Data Protection Officer at dpo@sportreact.com; or
• Sending a written request to:

sportreact d.o.o.
Avenija Dubrovnik 15
10000 Zagreb
Croatia

We will respond to all valid requests within the time limits required by applicable law, generally within 30 days.

7. Complaints

If you believe your personal data has been processed unlawfully, you have the right to lodge a complaint with the competent supervisory authority.

For users in Croatia, the supervisory authority is:

Croatian Personal Data Protection Agency (AZOP)
Ulica grada Vukovara 54
10000 Zagreb
Croatia

Email: azop@azop.hr

‍