Privacy Policy
Legal
Privacy Policy for Ares – Workout Interval Timer
Effective Date: 25/03/2025 (Last updated: 14/10/2026)
This Privacy Policy explains what data we process when you use the Ares mobile application (“App”) and the website ares.eris.one, why we process it and what rights you have.
1. Data Controller
The data controller is Krzysztof Orłowski, the developer of the App, operating under the eris.one brand (“we,” “us,” or “our”). For anything related to your data, you can write to ares@eris.one.
2. Information We Collect
The App does not require an account and we do not know who you are. To improve the App, we use three Google Firebase services:
Firebase Analytics – usage statistics:
- the country and language set on your device, and your approximate location (country or region) derived from your IP address, which we do not store,
- your operating system version and device model,
- the version of the App installed,
- events in the App, such as launches, completed workouts (for example their length, number of rounds and whether heart rate was available), changed settings and purchases,
- if you fill in your profile in the App: your age range (for example 25–34) and gender. We never send your exact age or date of birth.
Firebase Crashlytics – crash reports: what went wrong, device model, operating system and App version, and the time of the crash.
Firebase Performance Monitoring – performance measurements: how long the App takes to start and how smoothly its screens run, device model, operating system and App version, network type, and the country derived from your IP address.
These services assign a random identifier to your installation of the App, so that events from one device can be linked together. It is not linked to your name, email address or Apple Account. We do not collect your name, email address, precise location (GPS) or advertising identifier (IDFA), and we do not track you across other apps or websites.
Apple Ads – once after installation, the App asks Apple’s attribution server (AdServices) whether the download followed a tap on or a view of our ad in the App Store. We record only the result in Firebase Analytics: “from an ad” together with the campaign identifier, or “organic”. This does not require the advertising identifier (IDFA) or your permission to track.
When you visit ares.eris.one, our hosting provider VH.pl automatically records server logs: your IP address, the date and time, the page requested, and your browser and operating system.
If you email us, we process your email address and the content of your message in order to reply.
3. Purposes and Legal Bases
- We use statistics, crash reports and performance measurements only to improve the performance, reliability and user experience of the App. The legal basis is our legitimate interest in developing the App (Article 6(1)(f) GDPR).
- We use the Apple Ads campaign information only to see which of our App Store ads lead to installs. The legal basis is our legitimate interest in promoting the App (Article 6(1)(f) GDPR).
- Server logs are needed to deliver the website and protect it from attacks and errors; the legal basis is our legitimate interest (Article 6(1)(f) GDPR).
- Google Analytics on the website runs only with your consent (Article 6(1)(a) GDPR) – see section 9.
- We handle emails on the basis of our legitimate interest in answering your message (Article 6(1)(f) GDPR).
We do not sell your data, do not use it to target ads at you and do not make automated decisions based on it.
4. Recipients and Transfers Outside the EEA
Data from Firebase and Google Analytics is processed on our behalf by Google (Google Ireland Limited and Google LLC). It may be transferred to servers in the United States. Google LLC participates in the EU-U.S. Data Privacy Framework, and transfers are additionally covered by standard contractual clauses approved by the European Commission. More about data protection in Firebase: https://firebase.google.com/support/privacy
The website is hosted by VH.pl (Prociv Sp. z o.o., Wrocław, Poland), which processes server logs on our behalf. Emails are stored with our email provider.
5. Data Retention
- Statistics from the App and the website – no longer than 14 months, after which they are deleted automatically. Aggregated reports (for example the number of workouts in a month) contain no data about individual devices.
- Crash reports – up to 90 days; performance measurements – up to 60 days.
- Server logs – only as long as needed for security and troubleshooting, after which the hosting provider deletes them automatically.
- Emails – until the matter is closed, and afterwards for as long as they may be needed to deal with possible claims.
6. Your Rights
You have the right to access, rectify and erase your data, to restrict its processing and to data portability. You can withdraw your consent to Google Analytics at any time (section 9); this does not affect the lawfulness of processing before the withdrawal.
Right to object: you can object at any time, on grounds relating to your particular situation, to processing based on our legitimate interest (Article 21 GDPR).
Because we do not know who you are, we may be unable to tell which data in the statistics relates to you. Deleting the App stops the collection of data from your device.
To exercise your rights, write to ares@eris.one. You also have the right to lodge a complaint with the Polish supervisory authority, the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warsaw, Poland, uodo.gov.pl), or with the supervisory authority in your country.
If you live outside the European Union, the law of your country may give you similar rights (for example the LGPD in Brazil, the KVKK in Turkey or the PIPA in South Korea). You can exercise them in the same way, by writing to ares@eris.one, and you can also complain to the data protection authority in your country.
7. Health and Fitness Data
Ares uses Apple HealthKit and the Motion & Fitness APIs for workout features: starting workout sessions on Apple Watch, live heart rate from Apple Watch or compatible earbuds, heart rate zones and calories. Workouts can also be saved to the Health app on your device.
Your workout history, including the heart rate chart and the average heart rate of each workout phase, is stored only on your iPhone and Apple Watch.
Heart rate, calories and other data from Apple HealthKit are never uploaded, synced or shared, and are never sent to Firebase or any other service. Analytics only records whether heart rate was available during a workout and where it came from (Apple Watch, earbuds or none), never the values themselves.
Health data is never used for analytics, advertising, marketing, tracking or profiling.
8. In-App Purchases and Subscriptions
Ares offers optional paid features available as in-app purchases and subscriptions.
- All payments are processed securely by Apple via the App Store.
- We do not collect or have access to your payment information (such as credit card details).
- Subscriptions are managed through your Apple Account settings, where you can cancel or modify them at any time.
- Refund requests are handled by Apple according to their policies.
9. Website and Cookies
Our website ares.eris.one uses Google Analytics 4, a service provided by Google, to understand how visitors use the site, but only if you accept cookies in the banner shown on your first visit. Without your consent, no analytics cookies are stored on your device.
If you accept, Google Analytics collects usage data such as pages visited, time spent on the site, device and browser type, approximate location (country or city) and clicks on the App Store link. Google Analytics cookies expire after 2 years at the latest. We do not collect your name or email address, and we do not use this data for advertising.
You can change or withdraw your consent at any time via “Cookie settings” in the website footer. More information about how Google processes data: https://policies.google.com/privacy
10. Sharing Workouts and the Camera
You can share a workout or a set as a link or a QR code. The link contains only the workout itself: its name, times and settings, icon, theme and, if you choose to include it, your note. It contains nothing that identifies you or your device. The link travels only through the channel you choose (for example Messages), and we never receive or store it.
If the recipient does not have Ares, the link opens a page on ares.eris.one. The workout is in the part of the address after “#”, which browsers never send to our server; the page displays it locally in the browser. Server logs (section 2) and website analytics (section 9) record the page address without that part.
The camera is used only to scan workout codes and, if you choose, to take a photo for your workout result card. Images are processed on your device and are never uploaded. When you pick a photo from your library, you choose it in the system picker, and Ares does not get access to the rest of your library.
Firebase Analytics records that a workout was shared or added (for example, whether it was a set and whether a note was included), never the name or the note of a shared workout.
11. Third-Party Services
Ares may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties and encourage you to read their respective privacy policies.
12. Data Security
We take reasonable measures to protect the limited data we collect. However, no method of transmission over the internet or method of electronic storage is 100% secure.
13. Children’s Privacy
Ares is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe that a child has provided us with personal information, please contact us and we will delete it.
In South Korea and mainland China, users under 14 may use Ares only with the consent of a parent or legal guardian.
14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the date at the top. Please review this policy periodically.
15. Contact Us
If you have any questions about this Privacy Policy or your data, please write to us: