Privacy Policy for Resero
This Privacy Policy describes how Imarum GmbH ("we," "us," or "our") collects, uses, and shares information about you when you use our mobile application, Resero (the "App").
§1. Data Controller
The party responsible for the processing of your personal data (the data controller) is:
Imarum GmbH, Schloßschmidstraße 5, 80639 Munich, Germany
For any questions or requests regarding your data and privacy, please contact us at:support@reseroapp.com
§2. The "Privacy by Design" Principle
Resero is built with a focus on data minimization:
No Accounts: We do not collect names, email addresses, or passwords. There is no login process.
On-Device Storage: All User Content—including custom workout structures, intervals, repetition sets, and completed workout history—is stored only on your own devices (your iPhone and, if you use them, your Apple Watch and Apple Health). We do not transmit, backup, or store your fitness data on our servers.
§2a. Health Data (Apple Health and Apple Watch)
(1) With your permission, the App reads health data from Apple Health, such as heart rate, energy burned, distance, speed, VO₂max, date of birth and biological sex. You can also enter some of this information directly in the App, such as your date of birth and biological sex, as well as your maximum heart rate. The App saves your workouts to Apple Health.
(2) This data is used only to run your workouts and show workout analytics. It is processed on your devices and transferred only between your Apple Watch and iPhone. It is not sent to us or to third parties, is not used for advertising, and is not included in crash reports.
(3) The legal basis is your consent (Art. 9(2)(a) GDPR). You can withdraw it at any time in the iPhone Health app under Sharing → Apps.
§3. Crash Reporting and App Configuration
(1) Crash reporting is optional and off by default. If you turn it on (during setup or in Settings), the App sends technical crash reports to Firebase Crashlytics (Google). These include device model, operating system version, app version, stack traces and a random installation ID. Reports do not contain your health data or the content of your workouts. You can turn crash reporting off at any time in Settings. The legal basis is your consent (Art. 6(1)(a) GDPR).
(2) The App uses Firebase Remote Config (Google) to check whether an app update is required. For this, a random installation ID, the app version and device information are sent to Google. The legal basis is our legitimate interest in keeping the App working and secure (Art. 6(1)(f) GDPR).
(3) When the App connects to these services, your IP address is transmitted to Google for technical reasons. Google processes this data on our behalf as a processor under the Firebase data processing terms.
§4. International Data Transfers
Our service providers, particularly Google, are based in the United States. This means your personal data may be transferred to and stored on servers located outside the European Economic Area (EEA).
We have ensured that such transfers are protected by appropriate legal mechanisms. Specifically, data transfers to Google are governed by Standard Contractual Clauses (SCCs) approved by the European Commission, which provide a legal framework to ensure your data receives a level of protection equivalent to that under GDPR.
§5. Data Retention
Workout Data: We do not store your workout data. It remains on your devices until you delete individual workouts in the App or delete the App. Workouts saved to Apple Health remain there after you delete the App and can be managed in the Health app. Workout data stored in the App, including heart rate data, is not affected if you delete a workout in Apple Health or withdraw the App's access to Apple Health.
Technical Logs: Crash reports sent to Firebase Crashlytics are generally retained for 90 days before being automatically deleted by Google.
§6. Your Rights
Under the GDPR, you have the right to access, rectify, or erase your personal data.
Self-Service: Since we do not store your fitness data, you can exercise your "Right to Erasure" simply by deleting the App from your device.
Requests: For any inquiries regarding technical data logs, contact us atsupport@reseroapp.com.
You can withdraw the App's access to Apple Health at any time in the iPhone Health app, and turn off crash reporting in the App's Settings.
§7. Children's Privacy
The App has no accounts and is not directed at children. Information you can enter, such as your date of birth, stays on your devices and is never sent to us.
§8. Changes to This Privacy Policy
We may update this policy to reflect changes in the App's functionality. Updates will be made available within the App. We encourage you to review this Privacy Policy periodically to stay informed about our data practices.
Effective Date: April 19, 2026; Last updated: October 17, 2026