At RECOVA, we are committed to protecting the privacy, confidentiality, and security of your personal, training, and sleep recovery information. This Privacy Policy outlines how we collect, store, process, use, and delete your information when you use our Android mobile application ("Recova" or "App").
By installing, registering, or using Recova, you consent to the data practices described in this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of the App.
1. Information We Collect
A. Account & Profile Information (Firebase Authentication)
When you register or log in using Google Firebase Authentication, we collect:
- Your full name and email address.
- Your Google profile picture URL.
- A unique Firebase User Identification string (UID).
Purpose: Strictly required to authenticate your identity, create your user profile, prevent unauthorized access, and synchronize your historical recovery logs across your devices.
B. User-Logged Fitness & Athletic Data
We store the data you manually input, select, or confirm within the App:
- Subjective sleep quality ratings ("Poor", "Okay", "Good").
- Training session logs (workout type, duration, and subjective intensity rating: "Hard", "Moderate", "Rest").
- Completed daily physical therapy checklists and recovery action items.
Purpose: Used to compute your daily Recovery Readiness Score (0–100%) and select relevant recovery protocols.
C. Physical Activity & On-Device Sensors (ACTIVITY_RECOGNITION)
If you grant physical activity permissions, Recova accesses your local device motion sensors and Android's Google Play Services Sleep API to detect bedtime and wake-up windows.
- On-Device Local Processing Guarantee: All raw sensor micro-epoch evaluations occur 100% locally on your device processor. Continuous raw motion and ambient light streams are NEVER transmitted to external servers, cloud databases, or third parties.
- Saved Sleep Summary Logs: Once your sleep duration is calculated by our local algorithm or manually confirmed by you (bedtime, wake time, WASO, and net hours), the final summary log is saved in Google Firebase Firestore to render your personal historical recovery graphs and calculate your readiness score.
D. Device & Technical Diagnostic Data
We collect minimal technical parameters necessary for application performance:
- Device operational metadata (Android OS version, app version, time zone settings).
- Local crash logs to resolve bugs and performance bottlenecks.
3. Data Storage, Encryption & Security
- Cloud Infrastructure: Account profiles, streaks, and recovery logs are encrypted in transit (SSL/TLS) and at rest within Google Firebase Firestore databases.
- Access Control: Access is governed by strict Firebase Security Rules ensuring only your authenticated account UID can read or write your personal data.
- Local Storage: Ephemeral state flags (such as daily notification delivery status) are cached locally on your device in encrypted SharedPreferences.
- Third-Party Infrastructure (Data Subprocessors): We rely on industry-standard cloud infrastructure to operate the service: Google Cloud / Firebase (Identity authentication, Firestore database, and Cloud Messaging). We do not use any secondary third-party advertising or commercial analytics SDKs.
4. Account Deletion, Erasure & Legal Rights
You maintain full ownership of your data and possess the absolute right to access, rectify, or permanently erase all associated records at any time:
Method 1: In-App Instant Account Deletion
- Open the Recova App.
- Navigate to More > Privacy & Data > Delete Account.
- Verify your identity via your Google Account authentication.
Your account profile, streaks, workout logs, and historical sleep records will be permanently and irreversibly purged from our Firestore cloud servers.
Method 2: Web / Email Account Deletion Request
If you cannot access the mobile application, you can submit a deletion request by emailing recova.app0@gmail.com with the subject line "Account Deletion Request" from your registered Google email address. Your account and all associated data records will be manually verified and permanently erased within 48 hours.
Your Global Legal Rights (GDPR, CCPA/CPRA & DPDP)
Depending on your jurisdiction, you possess the following statutory legal rights:
- Access & Portability: Request a digital copy of your historical workout and recovery logs.
- Rectification: Request corrections to inaccurate personal account data.
- Erasure ("Right to be Forgotten"): Permanently delete all stored account and recovery data via in-app or email request.
- Non-Discrimination: We will never degrade app performance, restrict features, or discriminate against you for exercising your privacy rights.
5. Permissions & User Controls
You can grant or revoke device permissions at any time:
- Physical Activity Permission: Control via Android Settings > Apps > Recova > Permissions > Physical Activity.
- Notifications & Alarms: Control via Android Settings > Notifications > Recova.
Disabling permissions may deactivate automatic sleep duration estimation, but manual sleep confirmation will remain fully operational.
6. Children’s Privacy (COPPA & GDPR Compliance)
Recova is designed for athletes and active individuals aged 13 and older (or 16 in the European Union). We do not knowingly collect or solicit personal information from children under 13. If we learn that we have collected personal data from a child under 13 without verified parental consent, we will delete that information immediately.
7. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect operational updates or regulatory standards. Material updates will be posted on this page with a revised "Last Updated" date.
8. Contact Information
If you have any questions or concerns regarding your privacy or data rights: