Bravo!app — Privacy Policy

Effective date: 2026-09-29

This Policy tells you what personal data Bravo!app collects, why, who can see it, how long we keep it, and what your rights are.

1. Who is responsible

Maravilla Trading Limited (Hong Kong SAR, Business Registration No. 78380745), Flat A, 8/F, Kingswell Commercial Tower, 171 Lockhart Road, Wan Chai, Hong Kong, is the controller of your personal data.
Contact for all privacy questions and requests: privacy@bravoapp.cc (company: kp@maravilla.trading)

2. What we collect

Data	Examples	Where it comes from
Account	e-mail address, password (stored only as a secure hash), Google account identifier if you sign in with Google	you, Google
Profile	name, photo, bio, city and country, phone number (if you add it), sex, date of birth, height, weight, heart-rate and power thresholds	you
Activities	GPS route and times, distance, speed, elevation, sport, title, notes, photos	the app, files you import
Sensor data	heart rate, power, cadence, temperature	sensors you connect
Original files	the activity files you import (for example FIT or GPX)	you
Social	follows, Bravos, comments, blocks	you
Messages	chat messages and their time, sender and room; group-chat names and photos	you and the people you write to
Reports	reports you make, reports about you, with a copy of the reported text	you and other athletes
Device and app	phone make and model (shown on an activity as "recorded with"), app version, push-notification token	your phone
Technical	IP address and request details in server logs	your connection
Consent	whether and when you allowed us to process health data	you

We use no advertising, no analytics tools and no tracking. We do not sell your data.

3. Why we use it (and the legal basis)

Purpose	Legal basis (EU/UK GDPR)
To run your account and the app: record, store and show activities, compute statistics and training load, social features, chat, notifications	performance of our contract with you (the Terms)
To process health data (heart rate, weight, date of birth, power and heart-rate thresholds)	your explicit consent, which the app asks for before you first give such data
To keep Bravo!app safe: prevent abuse and fraud, handle reports, enforce the Terms, keep security logs	our legitimate interest in a safe service
To answer your requests and to meet legal duties	legal obligation, and legitimate interest

You can withdraw your health-data consent at any time by writing to privacy@bravoapp.cc, or by removing that data from your profile or deleting your account. Withdrawal does not affect what was done before.

4. Who can see your data

Other athletes see your profile, your activities (route, map and numbers), your comments and Bravos, and your lifetime statistics block, as the app shows them. Anyone signed in to Bravo!app can see your lifetime statistics block on your profile.
The people you message see your messages.
We see data when we need to run Bravo!app, solve a problem, or handle a report.
Service providers who work for us:
- OVH — hosts our servers in the European Union.
- Google — Sign in with Google, and push notifications (Firebase Cloud Messaging). A chat notification can include the sender's name and the message text, and it passes through Google to reach your phone.
Authorities, only when the law requires it.

5. Where your data is stored

Your data is stored on our servers in the European Union. Traffic to the .ru addresses passes through a server in Russia. Google, as a provider (section 4), can process data in other countries, including the United States, under its own safeguards.

6. How long we keep it

Data	How long
Account, profile, activities, files, social data, messages	until you delete them or delete your account
After you delete your account	erased at once. A few technical records remain: the chat server keeps a disabled account identifier and some technical records of the former account; the text of deleted messages is removed from the chat server within 1 day
Server logs (IP addresses, requests)	about 14 days; mail logs about 35 days; sign-in records 90 days; other technical logs until they are overwritten, usually within a few weeks
Chat server IP records	7 days
Data export files	3 days, then deleted
Records of actions we take on accounts (moderation, changes, deletions)	kept, to show what we did and why
A banned and deleted account	a protected (hashed) form of its e-mail address, to stop the same address from creating a new account

7. Your rights

You can:

see and download your data — Settings → Export my data (we e-mail you a download link);
correct it — in your profile, or by writing to us;
delete it — Settings → Delete account, or bravoapp.cc/delete-account;
object to or restrict some processing, and withdraw consent;
complain to your data-protection authority.

To use a right, write to privacy@bravoapp.cc. We answer within one month.

8. Security

We use encrypted connections (HTTPS), store passwords only as secure hashes, limit who can access the servers, and keep logs for a short time. No system is completely safe; if a breach affects you, we will tell you as the law requires.

9. Children

Bravo!app is not for children. You must be 16 or older. If we learn that a user is younger, we delete the account.

10. Changes

We publish changes on this page with a new effective date, and we tell you in the app before an important change applies.

11. Contact

Maravilla Trading Limited — Flat A, 8/F, Kingswell Commercial Tower, 171 Lockhart Road, Wan Chai, Hong Kong — privacy@bravoapp.cc