1. Who we are
This policy covers the website spiderssolutions.com and the applications published by Gabriel Pająk „Rozwiązania Informatyczne” (trading as Spiders Solutions), NIP 8191670878, Poland — including Hirdfit, Elarion and Oceaner. We are the data controller. Contact: contact@spiderssolutions.com.
2. Data we collect
This website. We do not use advertising or tracking cookies. If you email us, we hold your message and address for as long as needed to answer it.
Hirdfit. Account data (email, sign-in identifier); workout and health data you choose to import from connected services such as Garmin, Strava and Hevy (activities, routes, heart rate, body metrics, training history); routes and plans you create; and technical logs needed to run the service.
Games. Elarion and Oceaner collect account and gameplay progress data, plus crash and diagnostic reports. They do not collect health data.
3. Third-party connections
Connections to Garmin, Strava and Hevy are made only after you authorise them, using each provider's official authorisation flow. We request the narrowest scopes the feature needs, and you can disconnect a provider at any time from inside the app; disconnecting stops further imports.
4. AI processing
Hirdfit's training assistant sends the training data relevant to your request to a third-party large-language-model provider in order to generate advice. Data is sent for the purpose of answering your request, is not used by us to train models, and identifying details are minimised where the feature allows it. If you do not want this, the assistant can be left unused; the rest of the app works without it.
5. Why we process it, and on what basis
To provide the service you asked for (performance of a contract), to keep it secure and working (legitimate interest), and — for health and fitness data, which is a special category under the GDPR — on the basis of your explicit consent, given when you connect a provider. Consent can be withdrawn at any time.
6. Sharing
We do not sell personal data and we do not share it for advertising. Data is processed by service providers acting on our instructions: cloud hosting and storage, crash and analytics reporting, and the LLM provider described above. Where data leaves the EEA, transfers rely on the European Commission's standard contractual clauses.
7. Retention
Account and training data are kept while your account is active. Delete your account and the data is removed from live systems within 30 days and from backups within 90. Logs are kept for up to 12 months.
8. Your rights
Under the GDPR you may request access, correction, deletion, restriction, portability, or object to processing, and withdraw consent. Write to contact@spiderssolutions.com and we will respond within one month. You also have the right to complain to the Polish supervisory authority (Prezes Urzędu Ochrony Danych Osobowych).
9. Children
Our services are not directed at children under 16 and we do not knowingly collect their data.
10. Changes
If this policy changes materially we will update the date above and, for account holders, notify you in-app or by email.