Privacy Policy

This Privacy Policy describes how Kompi collects, uses and protects your personal information when you use our mobile application.

1. Data Controller

Francisco Javier Nieto Vílchez
NIF: 77437935V
Address: Avenida Santa Isabel 88, p1 4c, 04006 Almería, Spain
Email: info@trykompi.com
Web: https://trykompi.com

2. Data we collect

Account: email address or phone number
Profile: name, date of birth, gender, photos, city, sports you practise, level, what you're looking for, and biography
Location: GPS coordinates, only while the app is in use in the foreground, to show you nearby workout partners
Communications: private messages between users within the app
Technical data: activity logs and device identifiers necessary for the operation of the service

3. Purpose and legal basis of processing

Providing the sports-matching service — legal basis: performance of the contract (Art. 6.1.b GDPR)
Moderation, security and fraud prevention — legal basis: legitimate interest (Art. 6.1.f GDPR)
Compliance with legal obligations — legal basis: legal obligation (Art. 6.1.c GDPR)
Service communications (match notifications, messages) — legal basis: consent (Art. 6.1.a GDPR)

4. Recipients of the data

Your data is shared only with the following providers necessary to deliver the service:

Supabase Inc. — database, storage and authentication provider. Data is processed on servers located in the EU (Frankfurt, Germany), under a signed Data Processing Agreement (DPA) and in compliance with the GDPR.
Apple Inc. / Google LLC — distribution of the app through the App Store and Google Play.

We do not sell or transfer your personal data to third parties for advertising or commercial purposes.

5. Data retention

Account and profile data: for the duration of your account + 30 days after its deletion
Messages: for the duration of your account + 30 days after its deletion
Technical logs: maximum 12 months

6. Your rights (GDPR, Arts. 15–22)

You have the right to:

Access: know what data we hold about you
Rectification: correct inaccurate data
Erasure ("right to be forgotten"): delete your data
Restriction: restrict processing in certain circumstances
Portability: receive your data in a structured format
Objection: object to processing based on legitimate interest

You can exercise these rights by sending an email to info@trykompi.com. We will respond within a maximum of 30 calendar days.

You can also delete your account at any time directly from the app: Profile → Settings → Delete account. All your data will be permanently erased.

7. Minors

Kompi is intended exclusively for people aged 18 and over. We do not knowingly collect data from minors. If we detect that a user is a minor, we will delete their account and data immediately.

8. Security

We implement appropriate technical and organisational measures to protect your data: encryption in transit (TLS) and at rest, access control based on row-level security (RLS) policies in the database, and restricted access to data.

9. Complaints to the supervisory authority

If you believe the processing of your data does not comply with the GDPR, you have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD): www.aepd.es

10. Changes to this policy

We will notify you of any material changes within the app at least 15 days in advance. The always up-to-date version will be available at https://trykompi.com/privacy.

11. Contact

For any privacy enquiries: info@trykompi.com