Privacy policy

Protecting your data is important to us. This privacy policy explains how we collect, use, and protect your personal data. It applies to all services provided through HorseCompanion.

Data Controller

The operator of HorseCompanion is responsible for data processing. If you have questions about data protection, you can contact us at any time via the feedback function in the app.

What Data We Collect

We only collect data necessary for the app's function: email address and name upon registration, information about your horses (name, breed, date of birth, photos), activities and calendar entries, health records and feeding plans, training entries and BCS scores, expenses and receipts, emergency contacts and QR code emergency profiles. When GPS ride tracking is enabled, location data is only captured and stored during an active ride.

How We Use Your Data

Your data is used exclusively for providing and improving the service. This includes: coordinating riding partnerships between partners, displaying your horses, activities and health data, notifications and reminders, anonymised usage statistics to improve the app. We do not sell data to third parties and do not use it for advertising purposes.

Cookies & Tracking Technologies

HorseCompanion does not set its own cookies. We use localStorage for functional purposes (authentication, language setting, theme preference) and sessionStorage for session management. Cloudflare as CDN and WAF provider may set technically necessary security cookies. With consent to the analytics category, we use Sentry for session recording and performance tracking as well as our own usage statistics. You can adjust your settings at any time via the cookie banner or under Security & Privacy in your profile.

Third-Party Services

We use the following third parties: Cloudflare (CDN, WAF and DDoS protection – processes connection data to secure the app), Sentry (error monitoring – captures technical error data to ensure app stability; session replay and performance tracking only with consent), OpenStreetMap (map display in the security section – no personal data is transmitted).

Data Storage & Security

All data is transmitted encrypted (TLS/HTTPS) and stored on servers in Switzerland. Access is protected by authentication with one-time codes. Regular backups protect your data against loss. Sessions can be viewed and revoked at any time in the security section.

Your Rights

You have the right at any time to: access your stored data, export your data in JSON format (via Security & Privacy in your profile), delete your account and all associated data, withdraw your consent to analytics tracking. To exercise your rights, use the corresponding functions in the app or contact us via the feedback function.

Retention Periods

Your data is stored for as long as your account exists. If you delete your account yourself, all personal data is removed immediately and irrevocably. If an account goes unused for a longer period, we contact you after 90 days; if it stays unused, we announce the deletion by email at least 30 days in advance with a concrete date and delete the account at the latest 180 days after the last use. You can keep your account at any time by signing in or clicking the link in our email, or you can pause it. Backups already created are not covered by a deletion; they are automatically overwritten within at most three months as part of the retention schedule. Anonymised usage statistics without personal reference may be retained longer.

Changes to This Privacy Policy

We may update this privacy policy from time to time. Significant changes will be communicated via the app. Continued use after an update constitutes acceptance of the amended policy.