Privacy policy

In brief: AuraX Arena has no account and shows no ads. To see whether our ads on Meta work, the iPhone app can report installs and purchases to Meta — without an advertising ID. In the EU, the EEA, the UK and Switzerland only if you turn it on. Your workouts are stored on your device and, if you enable sync, in your private iCloud or Google Drive area, which we cannot see. With the full version they are also sent to our service so you can see them in the browser (web access); you can delete them there at any time from the app. What you share via Gym Buddies is kept by our service for at most 7 days. The app also counts anonymously how often it is opened and how often workouts are started — without any identifier, and you can turn this off in your profile.

Controller

Codex Consulting GmbH
Bahnhofstrasse 21
6300 Zug, Switzerland
Email: info@codex-consulting.ch

This website

The AuraX website does not set cookies, use advertising trackers, or embed social-network content.

Anonymous visit counts: So that we know how many people find the website, each page sends one anonymous count to our service on Cloudflare (aurax-arena.ch/besuch) when it opens. It contains only which page was opened (such as the home page, help or web access), the language of the page, the platform (iPhone, Android or another device) and what kind of source you came from (such as a search engine, Instagram or direct), never the exact address. The country is derived from the connection; we do not store the IP address. There is no cookie and no identifier, and nothing is stored in your browser. A count cannot be linked to any person. The figures are kept in Cloudflare Analytics Engine, evaluated only in aggregate and deleted automatically after three months at the latest. If “Do Not Track” or “Global Privacy Control” is switched on in your browser, nothing is counted.

The hosting provider may create technically necessary server logs containing the IP address, time and requested page. They are used solely to operate the website securely.

Workout data in AuraX Arena

Workouts, exercises, sets, weights, repetitions, notes and calculated analysis are stored in the app's private area on your device. Exceptions are what you share via Gym Buddies (see the next section) and, with the full version, the workouts for web access (see web access). We do not maintain an AuraX user account.

Gym Buddies

Gym Buddies is optional. Only if you join or create a group does AuraX Arena send the following to our service on Cloudflare (aurax-arena.ch/buddy) during your workout:

• your display name (up to 24 characters)
• the exercise name and your confirmed set values, e.g. “40 kg × 10”
• for cardio, the recorded time and distance
• the start and end of the workout and the workout name
• markers for a new PB or an improvement

The members of your group see this information. A group has up to 10 people, a public one up to 20. There is no account; the app uses a device key instead. The server keeps the feed for at most 7 days and at most 2100 events per group. The app shows the last 24 hours of it, web access the last 7 days. Heart rate and calories are never sent. If you leave the group, your membership is removed.

Find a workout partner: If you post a request, the service stores your display name, the sport and optionally goal, location and times — for 30 days or until you withdraw it; anyone in the app can see it. If someone asks to join, the service stores only their display name; only you as the creator see it. If you accept, a buddy group of two is created (see above) and the request receives its code. Deleting the request also deletes all requests to join. A request can be reported (name, goal, location, 30 days for review); we can delete it.

Following: Following is voluntary and needs no account. If you allow it, the service stores, under a random code, your display name and the same details as for your profile page (streak, this week as the number of workouts, sets and PBs, at most five recent personal bests, current plans, weekly goal). Anyone with your link or code can follow you and only sees these details. For each follower the service stores only a random device identifier so that it can count them — you only see how many follow you, not who. “New code” or “Stop allowing followers” deletes the entry and all followers immediately. Whom you follow stays on your device; for this the service only knows the device identifier. A profile can be reported (name and code, 30 days for review); we can delete it.

Public groups: If the founder makes a group public, it appears in the directory, which anyone can open in the app without an account — with the group name, sport, optionally a location, the number of members and the weekly summary as a total (workouts, sets, PBs of the current week). Member names and the feed do not appear there. Anyone can join with the code shown in the directory. If the group becomes private again or is dissolved, the entry disappears immediately; without activity it is no longer shown after 60 days. A public group can be reported; the service then keeps the group name, sport, location and code for review by us (30 days), and we can remove the group from the directory.

Reactions: If you react to a member's set (thumbs up, heart, flame), the service stores the reaction with your display name for as long as the set is in the feed, at most 7 days.

Comments: If you comment on a member's set or finished workout, the service stores your text (at most 140 characters) with your display name for as long as the set is in the feed, at most 7 days. You can delete your comment at any time.

Profile in the group: So that the members of your group can see your profile page, the app sends your streak (weeks in a row with a workout), at most five of your most recent personal bests from the last 90 days (exercise, value, date) your current plans (plan name, week) and your weekly goal (workouts per week) to the service. It keeps them as long as you are a member and deletes them when you leave the group.

Profile picture: Voluntary. If you choose a picture in the app or in web access, it is cropped to a square and scaled down on your device (320 × 320 pixels) and sent to the service: to each of your groups and, if you use web access, to your training log. The members of your groups see it next to your name. In a group the picture stays stored until you remove it or leave that group; in your other groups and in your training log it stays until you remove it. If you remove it, the service deletes the picture in all groups and in your training log and keeps only the time, so that another device does not bring the old picture back. If the picture was reported, the copy kept for review follows the period under “Report and block”.

Sharing in the group: If you share a plan or a share card with the group, the service stores the plan's name or the card's image with your display name for at most 24 hours; the members of your group can view it. If you leave the group, it is deleted.

Training together: If you arrange a joint workout, the service stores the time, optionally the name of the workout, your display name and who has said yes; six hours after the start the arrangement is deleted. Your device schedules the reminder ten minutes before by itself.

Weekly summary: For the group's weekly summary the service counts, per member and week, the finished workouts, the sets and the PBs — only these numbers, no exercises and no values. The counts are deleted after three weeks, and also when you leave the group.

Voice messages: Voice messages are voluntary and switched off by default in the app. Only when you switch them on and hold the microphone button on the phone or the watch does the app record at most 5 seconds and send them (from the watch via your phone) with your display name to the service; the members of your group can play them. The microphone is used only at that moment. The service keeps a voice message for at most 24 hours and also deletes it when you leave the group. Messages you have played stay in the app's cache on your device until the system clears it. Report and block: You can report a member's voice message, comment or profile picture; the service then keeps a copy including the audio, text or picture, the sender's display name, your display name and the group code for review by us, and deletes it after 30 days. After a review we can remove a member from the group or delete their profile picture. If you block a member, your app hides their voice messages, comments, reactions and profile picture; this stays on your device. The legal basis is providing the feature you chose (Art. 6(1)(b) GDPR) and, for reviewing reports, our legitimate interest in a safe service (Art. 6(1)(f) GDPR).

Web access (aurax-arena.ch/web)

With “Open on the web” you can see your workouts, your groups, your feed and your profile in a browser. Web access is part of the full version (subscription or purchase). There is no account and no password: the website shows a QR code that you scan with the app. The app then sends once to our service at Cloudflare (aurax-arena.ch/buddy): your Buddy groups with your member key, your display name, the device model, your chosen design, the code of your profile for following, and the store’s proof of purchase. The service checks the purchase itself – for Apple using the transaction signed by Apple (app, product, expiry, refund), for Google Play by asking Google with the purchase token. The browser then receives its own key per group that can only read, react and comment and expires when your subscription ends. For this we store a hash of the key, the device model, the time and the expiry date. The browser never receives your member key. Whenever the app checks your purchase, it reports the new status to the service.

With the full version, the app sends every finished workout to the same service so you can see it in the browser: name, sport, start and end, duration, sets with exercise, weight, reps, time and distance, volume, distance and pace, calories, average and maximum heart rate and the heart-rate curve (at most 400 points), plus a summary per sport with personal bests. No locations and no GPS tracks. The workouts are stored under an identifier generated at random by the app; there is no account, email address or name attached to it. Only your connected browsers can read them. Whatever you delete or change in the app is deleted or changed there too. Web access sets no cookies and uses no advertising trackers. It is only counted anonymously: page views as described under “This website”, plus each connection made with “Open on the web” (whether it succeeded, the phone's platform, the country) and which section a connected browser opens. For this your browser itself remembers only the date of the last count. We store no IP address and no identifier; a count cannot be linked to any person or any connection. With “Do Not Track” or “Global Privacy Control” your browser reports nothing. “End web access” in the app under Profile › Website (all browsers) or on the website under Sharing (this browser) deletes the browsers’ keys immediately; the workouts stay stored until you choose “Delete workouts from server” in the app – then everything is deleted immediately. The legal basis is the performance of the contract for the full version (Art. 6(1)(b) GDPR).

When connected, the app also sends your plans (name, days, exercises, sets and reps) and planned sessions (day, time and name) to the same service so you can see them in the browser. Plans built in the browser stay there until you accept or discard them in the app.

Your profile on the website: For your profile picture see “Gym Buddies”. If you enter a location (at most 40 characters), a motto (at most 60 characters) or your usernames on Instagram, TikTok and YouTube, the service stores them for your profile in web access. Only your connected browsers can see them. There is currently no public profile.

Your calendar in the web planner: Off by default. If you turn it on in the app under Profile › Calendar and allow access, the app reads the events of the next 12 weeks from your phone's calendar: depending on your setting only date and time, or the title as well, never location, attendees or notes. The data reaches our service encrypted. The app creates the key and your connected browsers receive it in encrypted form via the QR code; we cannot read the events ourselves. Turning it off deletes them from the server immediately. The legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time by turning it off.

Planner and browsers: Drafts from the planner are stored with our service, encrypted in the same way, so you can see them on every connected device. The browser keeps its access data locally only. For each connected browser we store a hash of its key, its label (for example “Chrome · Mac”) and the day it was last used. In the app under Profile › Website you can remove each browser individually; a browser unused for 90 days is disconnected automatically. Our service runs on Cloudflare, a US provider. Data is processed and stored in the EU and is encrypted in transit and at rest. For operation, Cloudflare also processes technical identifiers outside the EU; standard contractual clauses apply.

iCloud and Google Drive

If you enable sync, AuraX Arena stores the workout file in your private iCloud area or a private app folder in your Google Drive. We have no access to either. The app continues to work locally without cloud sync. Apple's or Google's privacy terms also apply.

Location and weather

AuraX Arena can record the weather for a workout. It requests a coarse location once at the start. The weather request goes through a relay operated by us at Cloudflare to Open-Meteo. The relay rounds coordinates and does not store requests; anti-abuse counters may process the IP address transiently. Only the weather result, not the location, is saved with the workout. If location access is denied, only the weather entry is omitted.

Apple Health and Health Connect

With your explicit permission, AuraX Arena can write completed workouts and, where measured, calories, and read health values for the workout and analysis. This data stays on your device and in Apple Health or Health Connect; only a workout’s heart rate and calories are sent to web access with the full version. It is not sold or used for advertising. Permission can be revoked in system settings at any time.

Apple Watch and Wear OS

The optional watch app can run a workout session, record heart rate and confirm sets on your wrist. Data is exchanged with the companion phone app and is not sent to us by the watch. Sharing with Gym Buddies is covered in the “Gym Buddies” section.

When you send us a report

If equipment or an exercise is missing, you can voluntarily send us a report. Only the text you enter, an optional photo, an optional email address for a reply, and the app name and version are transmitted. The report passes through a service operated by us and is forwarded to our mailbox. Please do not photograph people. We delete the message and any photo once the report has been handled.

Anonymous usage statistics

So that we know whether and how AuraX Arena is used, the app sends short anonymous counting messages to our service on Cloudflare (aurax-arena.ch/nutzung): on first launch, at most once a day when opened, for every workout started, and at most once a day when the purchase screen appears. Each message contains only the event, the platform (iOS or Android), the app version, the days since installation in broad steps, the app language, the access state (trial, expired or purchased), the distribution channel (store or test build) and, for a workout, whether it started on the phone or the watch, the type of sport (such as strength, running or cycling) and whether indoors or outdoors. The country is derived from the connection; we do not store the IP address. There is no device or advertising identifier, no account and no further workout content (no exercises, weights, times, distances or heart rate) — a message cannot be linked to a person or a device. The figures are kept in Cloudflare Analytics Engine, evaluated only in aggregate and deleted automatically after three months at the latest. You can turn the counting off at any time in the app under Profile › Legal › “Anonymous usage statistics”.

Ad measurement (Meta, iPhone only)

We advertise AuraX Arena on Facebook and Instagram. To see whether these ads lead to installs and purchases, the iPhone app contains Meta's software development kit (Meta Platforms Ireland Ltd., Merrion Road, Dublin 4, Ireland). It reports to Meta that the app was installed and opened and, when you start a free trial, subscribe or buy lifetime access, which product it was, price and currency, and an App Store order ID. It also sends technical device details (model, iOS version, language, time zone) and a random identifier created by the SDK itself. AuraX Arena does not ask for permission to track you across apps, so Meta receives no advertising identifier (IDFA); attribution to an ad only happens in aggregated form through Apple's SKAdNetwork and Meta's Aggregated Event Measurement. Workouts, heart rate, health data, location, buddies, your name or email address are never sent to Meta. Meta may also process this data for its own purposes; we and Meta are joint controllers (Art. 26 GDPR), see Meta's privacy policy at facebook.com/privacy/policy. For transfers to the USA, Meta relies on the EU-US Data Privacy Framework (Art. 45 GDPR) and standard contractual clauses (Art. 46 GDPR).

In the EU, the EEA, the United Kingdom and Switzerland this is off by default. It only runs there if you turn it on in the app under Profile › Legal › “Measure ad performance”; turning it on is your consent (Art. 6(1)(a) GDPR), and turning it off withdraws it for the future. The app takes the country from your App Store account (or, failing that, the device region). In all other countries it is on by default and you can turn it off at any time (legitimate interest in measuring our advertising, Art. 6(1)(f) GDPR). The Android app does not contain the Meta SDK.

Crash alert

Crash alert is voluntary and off by default. You switch it on in your profile after the app has explained which data goes to whom. The legal basis is your consent (Art. 6(1)(a) GDPR). Switching it off withdraws it with effect for the future.

On the phone: Only during an outdoor workout with GPS recording (cycling, skiing, riding, in the mountains, climbing outdoors) does the app evaluate the accelerometer and GPS speed on the device. As long as no alarm is triggered, these values do not leave the phone. If you stay down after a detected crash, a 60-second countdown with an alarm sound starts. If you tap “I'm OK”, nothing is sent. The names of your emergency contacts stay on the phone.

Emergency service: When you switch the feature on, the app registers with our emergency service at notfall.auracurve.app (operated by us, Codex Consulting GmbH, for several of our apps; the apps' data is kept separate). It runs at Cloudflare; its storage is technically pinned to Cloudflare's EU jurisdiction. What is stored is a random device identifier, a hash of the device secret and two timestamps. For each contact — at most three, numbers from the EU, EEA, Switzerland and the United Kingdom only — the phone number, its hash, status, message language, channel and an unsubscribe token are added. The names of the contacts, your name and your position are not stored. Your name (letters only, at most 30 characters) is sent with every request and only inserted into the messages.

Alarm: When the countdown runs out, the app sends position, accuracy, time, time zone, language and your name. From this, every contact who has agreed receives an SMS with your name, the time, the accuracy and a map link to your location. The link leads to Google Maps; if the contact opens it, Google processes the location under its own terms. For 24 hours the service stores only the alarm identifier, time, time zone and which contacts (as a hash) were notified — so that a retry never messages anyone twice and the all-clear reaches the same contacts. The position is not stored. With “Send all-clear”, these contacts receive an all-clear. A test SMS contains only your name.

Emergency contacts, only with their consent: Every newly entered contact receives one SMS with your name and the question whether they want to be an emergency contact, together with a link. Only once they choose “Yes, I agree” there do they receive alarm, all-clear and test messages. The legal basis is their consent (Art. 6(1)(a) GDPR); as proof, the service stores the time of the consent. We send the one-time request SMS so that the contact can be asked at all (legitimate interest, Art. 6(1)(f) GDPR). Until they answer, the service stores only the number, the language and the status “waiting”. If the contact chooses “No, thanks” or later withdraws their consent through the same link, they receive no more messages, not even from other devices. For that purpose their number remains blocked permanently as a hash; they can change their mind through the same link. If you remove a contact, it is deleted at once. The SMS are sent by seven communications GmbH & Co. KG (seven.io, Germany) as our processor; seven.io receives the contact's number and the text of the SMS.

WhatsApp, only with the contact's consent: Where we offer WhatsApp as an additional channel, the page behind the link offers WhatsApp in addition after the consent. Only if the contact chooses “Yes, also on WhatsApp” there do alarm, all-clear and test go to their number on WhatsApp in addition to the SMS; the SMS is always included. The legal basis is the contact's consent (Art. 6(1)(a) GDPR), which is confirmed on WhatsApp. As proof, the service stores the hash of the number, the time and the source of the consent. The contact can withdraw at any time on the same page (“SMS only”), by replying “STOP” on WhatsApp or by unsubscribing. Incoming WhatsApp messages are only checked for “STOP” and are not stored. The consent also lapses as soon as nobody has the number entered any more. Sending runs through seven.io to Meta's WhatsApp Business Platform (Meta Platforms Ireland Ltd. and Meta Platforms, Inc., USA). What is transmitted is the number, the message content (name, time, accuracy, map link) and technical delivery details. For the transfer to the USA we rely on the EU-US Data Privacy Framework (Art. 45 GDPR), supplemented by standard contractual clauses (Art. 46 GDPR).

Abuse protection and deletion: To prevent abuse, the service counts messages per device and per number; these counters are deleted after 48 hours. When a device registers, the IP address is noted only as a hash, counted for one hour for the rate limit and deleted together with the other counters after 48 hours. If you switch crash alert off, the service deletes the device and its contacts at once; without a connection, the app catches up at the next sync. Devices that have not checked in for 365 days are deleted automatically together with their contacts. The emergency service writes no access logs; numbers, names and positions are not logged.

Important: Crash alert is not an emergency call system and no substitute for the emergency number 112. It only works with a mobile network, with the phone on your body and during an ongoing outdoor workout. Not every crash is detected, and not every alarm is a crash.

Notifications

Alerts such as “rest finished” are local notifications created by your device. Only if you use “Open on the web” and allow notifications does AuraX Arena tell your phone about a plan sent from the browser. For this our service stores your device’s push token and sends the plan’s name through Apple Push Notification service (Apple) or Firebase Cloud Messaging (Google, Android only). Without web access or without your permission there is no push. Only if you use Gym Buddies does our buddy service learn about your active workout (see “Gym Buddies”). If you are in a buddy group and allow notifications, AuraX Arena tells you about reactions and comments on your workouts and about voice messages in your group. For this the group service stores your device's push ID and your choices; only the sender's name and the type of message are sent, never comment text or voice recordings. You can turn off each type separately in the app under Profile.

Purchase and trial

AuraX Arena can be tested fully and then unlocked monthly, yearly, or once for lifetime access. Purchases and subscriptions are handled by the App Store or Google Play. We receive no credit-card or address data. Subscriptions are managed and cancelled in the relevant store account.

Deletion and your rights

Delete local data in the app or by removing the app. Manage cloud copies in your Apple or Google account and health records in Apple Health or Health Connect. For privacy questions and rights of access, correction or deletion under the Swiss FADP and GDPR, contact info@codex-consulting.ch.