Qvezt Privacy Policy
Effective date: 28.06.2025.
Welcome to Qvezt! Your privacy is of utmost importance to us. This Privacy Policy outlines how we collect, use, share, and protect your personal data when you use our website (“Site”), mobile application (“Platform”) and all of their offerings (“Services”). By using Qvezt, you agree to the practices described in this policy.
Any information relating to an identified or identifiable natural person (“Data Subject”). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier.
A special category of personal data that includes information revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data for uniquely identifying a natural person, health data, or data concerning a natural person's sex life or sexual orientation. Processing of Sensitive Personal Data requires explicit consent from the Data Subject under GDPR.
Any operation or set of operations performed on personal data or on sets of personal data, whether or not by automated means. This includes collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction of personal data.
The natural or legal person, public authority, agency, or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.
A natural or legal person, public authority, agency, or other body which processes personal data on behalf of the Data Controller. Data Processors do not own or control the personal data they process.
Accounts created with external service providers such as Meta (Facebook), Google, or Apple, which can be used to access and log in to the Qvezt Platform. These accounts allow users to authenticate without creating a separate Qvezt account.
Data that has been anonymized and combined with data from other users, making it impossible to identify any individual. Examples include usage statistics, demographic data, and participation rates in challenges etc.
A security incident that leads to the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to, personal data transmitted, stored, or otherwise processed.
The right of Data Subjects to receive their personal data in a structured, commonly used, and machine-readable format and to transmit that data to another Data Controller without hindrance. This facilitates the transfer of personal data between services.
Any freely given, specific, informed, and unambiguous indication of the Data Subject's wishes by which they signify agreement to the processing of personal data relating to them. Consent must be obtained before processing Sensitive Personal Data unless another legal basis applies.
A lawful basis for processing personal data under GDPR, where the Data Controller has a genuine and legitimate interest in processing the data, provided that such interests are not overridden by the interests or fundamental rights and freedoms of the Data Subject.
A lawful basis for processing personal data where processing is necessary for the performance of a contract to which the Data Subject is party or to take steps at the request of the Data Subject prior to entering into a contract.
The legal agreement between Qvezt and users that outlines the rules, responsibilities, and guidelines for using the Site and Platform. Users must agree to the Terms of Service to access and use Qvezt's Services.
Options available to users within their Qvezt account that allow them to control how their personal data is shared, displayed, and used.
Records automatically maintained by Qvezt’s systems that capture details about user interactions, system performance, and security-related events. System Logs are used for troubleshooting, security monitoring, and maintaining the integrity of the Platform.
A principle under GDPR that dictates that personal data collected should be adequate, relevant, and limited to what is necessary in relation to the purposes for which they are processed.
Data from which personally identifiable information has been removed, making it impossible to link the data back to any individual. De-Identified Data is used for analysis, research, and improving Services without compromising user privacy.
Qvezt Technology Kft. determines the purposes and means of processing your Personal Data. Qvezt is responsible for ensuring your data is processed lawfully, securely, and transparently.
This Privacy Policy serves to inform you about:
For clarity and consistency, key terms used in this Privacy Policy are defined in the Definitions section below.
This Privacy Policy applies to all personal data collected through:
We adhere to the EU General Data Protection Regulation (GDPR) and other applicable data protection laws to ensure that your personal data is handled with the highest standards of privacy and security. This Privacy Policy is designed to comply with these regulations, providing you with transparency and control over your personal data.
By using Qvezt’s Site and Platform, you consent to the collection, use, and sharing of your personal data as described in this Privacy Policy. If you do not agree with our practices, please do not use our Services and delete your account as outlined in the Deleting Information and Accounts section.
We collect various types of personal data to provide, enhance, and personalize our Services. This data is categorized to ensure clarity and compliance with applicable data protection laws.
This category includes the personal data you actively provide to us when creating or managing your account, participating in activities, or interacting with our Platform.
To comply with legal obligations and protect minors, Rewards and prizes are only issued directly to users aged 18 or older. If a winner is underage, the prize may only be claimed by their parent or legal guardian, subject to verification of identity and relationship. In such cases, we may collect limited additional information about the legal guardian solely for the purpose of prize administration and compliance.
Participation in a challenge or prize-based activity constitutes your consent to Qvezt processing your data for this purpose, as described in this Privacy Policy and in accordance with applicable legal bases under the GDPR.
This category includes data collected automatically as you interact with our Site and Platform.
We may obtain personal data from sources other than you to enhance our Services.
We may anonymize and combine personal data to create Aggregated Information, which is non-identifiable and used for various purposes.
We adhere to the principles of Data Minimization and Purpose Limitation, ensuring that we collect only the personal data necessary for the specified purposes and use it solely for those purposes as outlined in this Privacy Policy.
We collect and process your personal data based on the following legal grounds:
For detailed explanations of these legal bases, please refer to the Legal Bases section of this Privacy Policy.
We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. For more information on our data retention practices, please refer to the Retention of Personal Data section.
Your personal data is used to deliver and improve our Services, ensuring a seamless and personalized experience on Qvezt.
We use your personal data to provide and manage the core functionalities of Qvezt, ensuring that you can fully utilize our Services.
We create and manage your profile using your email address, password, or Third-Party Accounts. This includes your name, username, gender, and activity preferences (e.g., walking, running).
Legal Basis: Contractual necessity and Consent.
We track your fitness activities, compare your past efforts, and display your statistics and records. This includes your status on leaderboards, points, captures, and zone controls. We may align your GPS activities with specific coordinates and zones to evaluate your performance relative to others.
Legal Basis: Contractual necessity and Consent.
We enable interactions with other users by using your username, profile picture, and shared content. This includes creating and participating in leagues, joining teams, taking part in challenges or events, adding friends, sharing activity summaries, sending messages, and utilizing interactive features.
Legal Basis: Contractual necessity and Legitimate Interests.
We help you discover new zones for your activities. If multiple users have captured specific zones, we use this information to recommend these areas to you.
Legal Basis: Legitimate Interests.
We use your contact information, including your name and email address, to communicate important updates about the Platform, such as policy changes or significant feature updates.
Legal Basis: Contractual necessity and Legitimate Interests.
With your consent, we process your device token ID to send push notifications to your mobile device for updates, reminders, and other relevant information.
Legal Basis: Consent.
Data Sharing: Your personal data, including parts of your profile, username, teams you are part of, your achievements, and your comments and interactions are shared to facilitate participation in features like displaying your position on leaderboards.
Legal Basis: Contractual Necessity and Legitimate Interests.
We use your personal data to personalize and enhance your experience on Qvezt, ensuring that the Platform caters to your individual preferences and interests.
We suggest leagues, teams, zones, or challenges that align with your activity preferences and past behavior.
We recommend other users you may want to add as friends based on your interactions and mutual interests.
We introduce new features and functionalities that may interest you, enhancing your overall experience on the Platform.
Legal Basis: Legitimate Interests and Consent.
Your personal data helps us improve and develop our Platform to better serve you and other users.
We conduct research and analyze data to develop new features, troubleshoot issues, and improve the overall functionality of the Platform.
We utilize third-party analytics providers to gain insights into how our Site and Platform are used. This involves analyzing aggregated data to inform enhancements and optimizations.
Legal Basis: Legitimate Interests and Contractual Necessity.
We deliver relevant promotions and advertisements tailored to your interests and activities.
We send you relevant promotions based on your preferences and activity history, subject to your notification and email preferences.
We use cookies, SDKs, and mobile analytics to inform targeted advertising, ensuring that the ads you see are relevant to your interests.
Legal Basis: Consent and Legitimate Interests.
We use your personal data to keep you informed and engaged with Qvezt's Services and events.
We send you emails and push notifications about updates, new features, events, and other activities that may interest you.
Legal Basis: Consent.
We use your personal data to ensure the safety and integrity of Qvezt and its users.
We identify and remove content that violates our Terms of Service, and may suspend or terminate accounts that engage in prohibited activities.
We employ tools and protocols to protect against misuse, unauthorized access, and other security threats.
We reserve the right to review user accounts and activities to ensure compliance with our Terms of Service.
We use device information and data from system logs, including IP addresses, to maintain the security and integrity of our Platform.
Legal Basis: Legitimate Interests and Legal Obligations.
Data Breach Notification: In the event of a data breach, we will promptly notify affected users and relevant authorities in accordance with applicable laws and regulations.
Legal Basis: Legal Obligations.
We adhere to the principles of Data Minimization and Purpose Limitation, ensuring that:
We understand that sharing your personal data is a significant aspect of your experience with Qvezt. This section outlines the circumstances under which we share your personal data, the categories of third parties with whom we share data, the legal bases for such sharing, and the safeguards we implement to protect your information.
We may share your personal data with trusted third-party service providers who assist us in operating, enhancing, promoting, securing our Site and Platform, or processing payments. These service providers are granted access only to the personal data necessary to perform their specific functions on our behalf and are obligated to protect and secure your personal data.
Examples of Third-Party Service Providers:
Legal Basis: Legitimate Interests and Contractual Necessity.
We allow you to share your personal data and content with third parties who collaborate with us to offer integrated features, such as partners, sponsors, media streaming services, or event organizers. You have the option to share your profile data and activity data with these third parties.
Examples of Partners and Sponsors:
Legal Basis: Consent and Legitimate Interests.
Important: Personal data collected by these third parties is subject to their own terms and policies and may not offer the same privacy controls available on our Platform. We are not responsible for the terms or policies of these third parties. We encourage you to review the privacy practices of any third party you choose to share your data with.
If you choose to use a Third-Party Account (e.g., Meta, Google, Apple) to log in to our Platform, we share only the personal data necessary to enable your login and to protect and secure your personal data. This may include your name, email address, profile information, and preferences as provided by the Third-Party Account.
Additionally, you can share your activities with your contacts via text, email, or on social media applications. If you link your account to other social networks and share your activities, they may be viewable on such third-party platforms and may include your location information.
Legal Basis: Contractual Necessity and Consent.
Important: You should exercise caution when sharing personal data via third parties and carefully review the privacy practices of these third parties.
We may share your personal data with third parties, including law enforcement, public or governmental agencies, or private litigants, both within and outside your country of residence, if we determine that such disclosure is compelled by or reasonably necessary to comply with the law. This includes responding to court orders, warrants, subpoenas, or other legal or regulatory processes, or as otherwise permitted by law.
Additionally, we may retain, preserve, or disclose your information if we find it reasonably necessary or appropriate to prevent any person from death or serious bodily injury, address issues of national security or other matters of public importance, prevent or detect violations of our Terms of Service or fraud or abuse of our Platform or its users, protect our operations, property, or other legal rights, including by disclosing information to our legal counsel, other consultants, and third parties in connection with actual or potential litigation.
Legal Basis: Legal Obligations and Legitimate Interests.
We may anonymize and combine your personal data with data from other users to create Aggregated Information, which is non-identifiable and used for various purposes such as research, analysis, and community-driven features.
Uses of Aggregated Information:
Legal Basis: Legitimate Interests.
Note: Aggregated Information cannot be used to identify individuals.
When you join our community as an individual, your profile is set to be visible to all users by default, while your activities are set to be private. Any additional personal data and content you choose to share may also be viewable publicly.
Legal Basis: Consent and Legitimate Interests.
Privacy Controls: We provide privacy controls to help you manage the sharing of your personal data.
Your personal data may be transferred to and processed in countries outside of your jurisdiction. When transferring data internationally, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions, to protect your data in accordance with applicable data protection laws.
Third-party service providers and partners are restricted to using your personal data only for the purposes specified by Qvezt. They are obligated to comply with our data protection policies and relevant legal requirements. We do not permit third parties to use your data for any other purposes.
In cases where third parties act as Data Processors on behalf of Qvezt, they are bound by strict contractual agreements to ensure the protection and confidentiality of your personal data. No third party acts as a Data Controller unless explicitly stated, and their responsibilities are clearly delineated.
Under applicable data protection laws, you have the right to:
You can manage these rights through your Account Settings on the Platform or by contacting us directly at info@qvezt.com.
We share Aggregated Information with third parties for research, business insights, and enhancing community-driven features. Since Aggregated Information is de-identified, it does not contain any personal identifiers and cannot be used to identify individuals.
Legal Basis: Legitimate Interests.
We do not sell your personal data or Aggregated Information for direct monetary gain. All data sharing practices are aligned with the purposes outlined in this Privacy Policy and based on the legal grounds specified.
In providing our Services, Qvezt may transfer your personal data to countries outside your country of residence. These international transfers are essential for the operation of our Platform and the delivery of our Services. This section outlines the nature of these transfers, the safeguards in place to protect your data, and your rights concerning international data transfers.
International Data Transfers refer to the movement of personal data from one country to another, particularly from countries within the European Economic Area (EEA) to countries outside of it. Given the global nature of our Services, some of our data processors and service providers may be located outside your jurisdiction.
The types of personal data we may transfer internationally include:
We utilize various third-party service providers located in different countries to support our operations. These include:
Provides cloud computing services for data storage and processing. AWS data centers are located in multiple regions worldwide, including the United States and Europe.
Offer mapping and geolocation services. Their servers are based in regions that may be outside the EEA.
Facilitate third-party account sign-ins (e.g., Google Sign-In, Facebook Login, Apple Sign-In) and may process data related to authentication and user preferences.
To ensure that your personal data remains protected when transferred internationally, Qvezt employs the following legal mechanisms in compliance with GDPR:
We have incorporated SCCs into our contracts with third-party service providers to ensure that they adhere to the same data protection standards as required within the EEA.
Where applicable, we rely on countries recognized by the European Commission as providing an adequate level of data protection.
Note: Qvezt does not rely on Binding Corporate Rules (BCRs) for data transfers, as our data processors are independent third parties rather than internal entities.
We have implemented robust safeguards to protect your personal data during international transfers:
We enter into comprehensive data processing agreements with all third-party service providers, outlining their responsibilities in handling your data.
Personal data is encrypted during transfer using industry-standard protocols (e.g., TLS) to prevent unauthorized access.
Strict access controls are in place to ensure that only authorized personnel can access your personal data.
Under GDPR, you have the following rights regarding international data transfers:
You have the right to be informed about the countries to which your data is transferred and the safeguards in place to protect it.
You can object to the transfer of your personal data to third countries, subject to certain conditions.
You can request access to the personal data we hold about you, including details about international transfers.
How to Exercise These Rights:
To exercise any of these rights, please contact us at info@qvezt.com. We will respond to your request in accordance with applicable laws.
Qvezt may update its international data transfer practices to reflect changes in legal requirements or our operational needs. We will notify you of any significant changes through prominent notices and update this section accordingly.
At Qvezt, we prioritize the security and protection of your personal data. This section outlines the measures we implement to safeguard your data and your rights concerning how it is handled.
We implement robust measures to ensure that your personal data is handled securely and in accordance with the terms outlined in this Privacy Policy. Our security framework includes:
In the unlikely event of a data breach, we have established procedures to:
You play a crucial role in safeguarding your account and personal data. We recommend the following practices:
Privacy laws grant you specific rights regarding your personal data. Below are the rights available to you under applicable laws, including GDPR:
You have the right to:
You have the right to:
How to Exercise These Rights:
Important Notes:
You have the right to receive your personal data in a structured, commonly used, and machine-readable format and have the right to transmit that data to another Data Controller without hindrance.
How to Exercise This Right:
If we process your personal data based on our Legitimate Interests, you have the right to object to this processing under certain circumstances.
How to Exercise This Right:
Exceptions: We may continue processing your data if we have compelling legitimate grounds or if it is necessary for legal purposes.
If you have concerns about how we handle your personal data:
We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Our retention policies consider the following factors:
Personal data that is no longer necessary for providing our Platform to you may be de-identified and aggregated with other non-personal information to generate valuable insights, such as usage statistics. This Aggregated Information is dissociated from your name and other personal identifiers and cannot be used to identify you.
We adhere to the principles of Data Minimization and Purpose Limitation, ensuring that:
We reserve the right to alter this Privacy Policy at any time. If we update this privacy statement, we will:
User Actions:
Questions or comments about this information, your rights, or our disclosures, or requests to appeal a decision made regarding your privacy rights may be submitted by email using the contact information provided below:
Email: info@qvezt.com
Qvezt Technology Kft.