Privacy notice

1. Providing this website

This website is hosted on infrastructure managed by Lorenz Kromer at Hetzner Online GmbH, Industriestraße 25, 91710 Gunzenhausen, Germany. The servers are located in the EU. Hetzner provides the hosting service.

Page requests involve technical access data: IP address, date and time, requested address, HTTP status, amount of data transferred, referring page where provided, and browser and operating system information. Operational logs support secure delivery, troubleshooting and abuse prevention. The infrastructure may use a locally stored database to associate IP addresses with an approximate country or location; no visitor IP address is sent to a geolocation service for this purpose.

The legal basis is Article 6(1)(f) GDPR, our legitimate interest in secure operation. Central operational logs have a configured retention period of 30 days; technical deletion follows in the regular cleanup cycle.

2. Cookies, fonts and external content

The Rowivo website uses no analytics or advertising trackers, cookies or localStorage. The page address determines the language. Images and styles are loaded from the same domain; text uses the system fonts available on your device.

No third-party maps, videos, contact forms or social media content are embedded. External links transfer data to their destination only when opened. Email links open your own email application.

3. Contact by email

When you contact us, we process your email address, your name if provided, and the content and technical metadata of your message to respond to your enquiry. Business correspondence is handled through Microsoft 365. Please limit your message to information needed for the enquiry.

The legal basis for contract-related enquiries is Article 6(1)(b) GDPR. Other enquiries are handled under Article 6(1)(f) GDPR, our legitimate interest in communication. Correspondence is deleted when it is no longer needed to handle the enquiry, unless statutory retention obligations or evidence needed for legal claims require it to be kept.

4. Local data in the Rowivo app

Rowivo stores your profile, training goal, experience, training plans, completed workouts, feedback, notes and any received device readings locally on your iPhone. Effort ratings, discomfort, heart rate and free text may contain health-related information. Manual planning and workouts do not require a Rowivo account. These training records are not sent to a central Rowivo server.

Local processing supports the planning, workout and history features you use. Data remains until you remove entries or use “Delete profile and data” to clear the app. Depending on your operating system settings, local app data may also be included in a device backup that you manage.

5. Bluetooth, Apple Watch and Apple Health

With Bluetooth permission, Rowivo can connect to a Concept2 PM5 or a compatible FTMS rowing machine. Depending on the machine, distance, pace, stroke rate, power and heart rate are received and stored with the workout. You can disconnect the device and revoke permission in iOS settings.

The optional Watch app exchanges workout state, controls and feedback with your paired iPhone using Apple’s WatchConnectivity. With HealthKit permission, the Watch app can save a workout to Apple Health at your request. Direct heart-rate measurement with the Watch is not currently implemented. Health data is not used for advertising.

You can manage Apple Health permissions in system settings or Health. Deleting Rowivo app data does not automatically remove entries already saved to Apple Health. Your Apple settings and Apple’s privacy information also apply to storage and any enabled synchronisation of Apple Health data.

6. Exports and training backups

At your request, Rowivo exports CSV files or a restorable .rowivo training backup. You choose the destination through iOS Files. If you select iCloud Drive or another cloud provider, that provider handles storage and transfer according to your settings. Optional automatic file copies also use the folder you select.

Training backups may contain your profile, plan, history, notes and readings. The TypeSafe API key is not included in these exports. Exported files, cloud copies and external backups remain when you delete local Rowivo data; you manage and delete them with the relevant file provider.

7. Optional Jev suggestions through TypeSafe

Jev is a voluntary, experimental feature using your own TypeSafe access. You enter your API key in the app settings. It is stored in your iPhone’s keychain, accessible only while the device is unlocked and bound to that device. The key is sent to TypeSafe to authenticate requests. You can remove it in the app; deleting your profile and data also removes it.

Only when you select “Send to TypeSafe and get suggestion” does the app send an HTTPS request directly to api.typesafe.ai. It includes your training goal, experience, next session’s segments, time budget and up to three recent workout feedback entries with duration, effort, discomfort and up to 2,000 characters of notes each, plus up to 2,000 characters of your current note. Free text may contain personal and health information. TypeSafe also receives technical connection data such as your IP address.

The request content does not include your profile name, internal IDs, custom workout names or device measurement series. No requests are made automatically in the background. A structured discomfort report in the latest feedback currently blocks the request. This does not replace reviewing what you voluntarily put in notes.

The purpose is to assess your request for a shorter or easier next session. A preview is held temporarily in memory. Only applying it saves the plan change and a local history entry. You remain in control of the change.

Processing by TypeSafe takes place through your own provider account. The privacy and contractual terms for that account describe further processing, retention and any international transfers by the provider. Local storage in Rowivo does not mean that data you send to TypeSafe is processed only on your device or within the EU. If you do not want this transfer, use Rowivo without Jev; manual planning and workouts remain available.

8. Your rights and contact

Subject to the applicable legal requirements, you have rights of access, rectification, erasure, restriction, portability and objection under Articles 15–21 GDPR. You may object to processing based on legitimate interests on grounds relating to your particular situation. Where processing is based on consent, you may withdraw that consent at any time for the future.

Contact the controller listed above to exercise these rights. We have no remote access to training data stored exclusively on your device. You can use the app’s editing, export and deletion features for that data. Revoking a permission does not automatically remove data already exported or stored elsewhere.

You may complain to a data protection supervisory authority, particularly in the country of your habitual residence, workplace or the alleged infringement. In Austria, this is the Austrian Data Protection Authority, Barichgasse 40–42, 1030 Vienna, dsb.gv.at.

Rowivo does not make automated decisions that produce legal or similarly significant effects. Training suggestions are not applied automatically. This notice will be updated when features or data processing change.