Introduction
This Privacy Policy explains how Nader Grebe ("we", "our", or "us") handle information in connection with the Shivaki app ("App") for iPhone.
We take your privacy seriously. Shivaki is designed so that your personal data stays on your device and in your personal iCloud account. We do not operate external servers, and we do not collect, store, or process your personal data on our own infrastructure.
Data Controller
The data controller responsible for the processing of personal data in connection with this App is:
Nader Grebe
Email: contact@valinorlabs.de
Website: https://valinorlabs.de
Data We Process
3.1 Practice Data
The App stores all data you enter or generate while using it — including your custom flows, custom exercises (optionally with a photo you choose yourself), and the history of your completed practice sessions. This data is stored locally on your device and, if you have iCloud enabled, synchronized across your Apple devices via Apple iCloud (CloudKit).
This data never leaves your personal Apple ecosystem. We have no access to it.
3.2 Health Data (Apple HealthKit)
If you grant permission, the App writes the following data to Apple Health:
Yoga workout samples containing the start time, end time and a brand name ("Shivaki")
The App does not read any data from Apple Health. This integration is entirely optional. You can use the App without granting HealthKit access. Health data is stored in the Apple Health app on your device and is never transmitted to us.
3.3 Subscription & Purchase Data
Shivaki uses Apple's In-App Purchase system (StoreKit) for the optional Shivaki Pro subscription. All payment and purchase processing is handled exclusively by Apple. We do not receive or store your payment information. For details, please refer to Apple's Privacy Policy at https://www.apple.com/legal/privacy/.
Purpose and Legal Basis for Processing
All data processed by the App is used solely to provide the App's core functionality. Specifically:
- Practice data is used to display your library of poses and flows, to guide you through a session and to show your history, statistics and streaks.
- Health data: completed sessions are written to Apple Health as Yoga workouts so you can see them alongside your other activities.
The legal basis for processing is the performance of a contract (Art. 6(1)(b) GDPR), as processing is necessary to provide the App's features you have requested. Where data processing is based on your explicit permission (HealthKit), the legal basis is your consent (Art. 6(1)(a) GDPR), which you may withdraw at any time via your device settings.
Data Storage and Security
Your data is stored locally on your device and, if enabled, in your personal iCloud account via Apple CloudKit. iCloud data is encrypted by Apple both in transit and at rest. We do not operate any servers or databases that store your personal data. We have no technical access to the data you enter in the App.
Third-Party Services
The App integrates exclusively with Apple's own services:
- Apple iCloud / CloudKit – for optional data synchronization across your devices
- Apple HealthKit – for optional one-way writing of your finished sessions to Apple Health
- Apple App Store / StoreKit – for subscription management
Each of these services is governed by Apple's Privacy Policy. We have no control over and assume no responsibility for Apple's data practices. Please review Apple's Privacy Policy at https://www.apple.com/legal/privacy/.
Data Sharing
We do not sell, trade, or otherwise share your personal data with third parties. We do not use any third-party analytics tools, advertising networks, or crash reporting services. The only data transfer that may occur is between your device and your personal Apple iCloud account, which is governed by Apple's terms.
Data Retention
Your data is retained for as long as you use the App and have it installed on your device. You can delete all App data at any time using the "Delete all data" function within the App's settings, or by deleting the App from your device. Deleting the App removes all locally stored data. iCloud data can be managed and deleted via your iCloud account settings.
Your Rights (GDPR)
If you are located in the European Economic Area, you have the following rights regarding your personal data:
- Right of access – You can request information about what data we process about you.
- Right to rectification – You can correct inaccurate data directly within the App.
- Right to erasure – You can delete your data at any time via the App's reset function.
- Right to withdraw consent – Where processing is based on consent (HealthKit), you may withdraw it at any time in your device settings under Privacy & Security.
To exercise any of these rights, please contact us at contact@workout-tracker.de.
Children's Privacy
The App is not directed at children under the age of 13, and we do not knowingly process personal data from children under 13. If you believe a child under 13 has provided personal information through the App, please contact us and we will take appropriate steps to remove such information.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. The updated version will be made available within the App and on our website at https://workout-tracker.de/privacy. We encourage you to review this policy periodically. Continued use of the App after changes constitutes your acceptance of the updated policy.
Contact
If you have any questions or concerns about this Privacy Policy or our data practices, please contact us:
Nader Grebe
Email: contact@workout-tracker.de
Website: https://workout-tracker.de