Privacy Policy
Last Updated: 9 September 2026
Raw Control respects your privacy and is committed to protecting your personal data. This Privacy Policy explains what information we collect, why we collect it, how it is used, who we share it with, and your rights regarding your personal data.
1. INFORMATION WE COLLECT
Depending on how you use the app, Raw Control may process:
- Account information (your name, email address, and login credentials, or your Google/Apple account identifier and name/email if you sign in that way)
- Membership and purchase information (which plan you have, price paid, renewal status, purchase/transaction identifiers)
- Purchase verification data provided by Apple App Store or Google Play (such as a purchase token or transaction receipt) used to confirm your membership is genuine and active
- Legal consent records (confirmation that you stated you are 18 or older and accepted the Terms of Use, Health & Safety Disclaimer and risk acknowledgement, and when)
- A profile picture, only if you choose to add one using your device's camera or photo library
- Technical device and connection information necessary for app functionality and security, including your IP address (Firebase Authentication and Cloud Functions receive it automatically on sign-in and on every server call, to prevent abuse; Bunny.net receives it whenever a training video is streamed or downloaded)
- App usage information required to provide the service
- Crash and technical error reports (see Section 10)
- Support messages that you voluntarily send to us
Raw Control does not collect or store your payment card information, and does not use advertising or behavioural-analytics SDKs (see Section 10).
2. HOW WE USE YOUR INFORMATION
Your information is processed only as necessary to:
- Create and manage your account
- Authenticate your login
- Verify and provide access to your purchased membership
- Stream training videos and make downloaded trainings playable offline
- Maintain a record of legal consent for safety and liability purposes
- Maintain app security
- Respond to support requests
- Keep business/accounting records of memberships and payments, and produce internal business statistics (such as how many users, members and sales Raw Control has)
- Comply with applicable legal obligations
3. INFRASTRUCTURE AND THIRD-PARTY SERVICES
Raw Control is built on Google's Firebase platform (Google Cloud Platform). Your account data, membership records, and consent records are stored and processed using Firebase Authentication, Firebase Cloud Firestore (database), and Firebase Cloud Functions (server-side logic), all operated by Google.
Raw Control also relies on other trusted third-party service providers, including:
- Apple App Store (purchases, subscriptions, Sign in with Apple)
- Google Play (purchases, subscriptions)
- Google Sign-In (optional sign-in method)
- Sign in with Apple (optional sign-in method)
- Bunny.net (video streaming)
- Gmail/Google Workspace (used by us to send account verification and support emails)
These providers may process certain information according to their own privacy policies, in addition to this one.
4. INTERNAL RECORD-KEEPING (GOOGLE SHEETS)
In addition to the Firebase database above, Raw Control automatically mirrors certain records into private Google Sheets spreadsheets that only Daniel Machek can access, so there is a plain, human-readable business record of who has an account, who has agreed to the legal documents, and who holds a membership.
Specifically, this includes: your name and email address, sign-in method, which legal documents you accepted and when, your membership tier, amounts paid, renewal status, and purchase dates, and — only if you have unlocked it — the date you earned the final trophy. Promo/redeem codes are recorded as free (not a payment). These spreadsheets are used for accounting, customer support, legal/audit evidence, and internal business reporting (for example, tracking how many users, members and sales Raw Control has over time), and are never sold, published, or shared with anyone outside Raw Control. Each person is referenced by a sequential internal ID number that is the same across all three spreadsheets, so records can be matched to one another.
5. VIDEO STREAMING
Training videos are securely streamed through Bunny.net. Technical information required to deliver video content efficiently may be processed during streaming.
6. ON-DEVICE STORAGE
If you add a profile picture, it is stored only locally on your device (in the app's private storage) and is never uploaded to our servers. If you download a training for offline playback, the video is likewise saved only to the app's private, sandboxed storage on your device — not to your Photos library, Files app, or any publicly accessible location, and not to our servers. Removing the app or removing a download deletes these local copies.
Your training diary — which trainings you finished and when, your own notes, the skill levels you mark for yourself, your weekly goal, the training plans you build, and the trophies you earn — is created and kept on your device.
So that you do not lose it when you change or lose your phone, the app also keeps a copy of this diary under your account in Firebase Cloud Firestore. The copy is sent after every training you finish, and once more the moment you switch the backup on. Other changes on their own — your weekly goal, or a skill level you mark — do not trigger a copy; they travel with the next one. This automatic backup is switched ON by default; you can switch it off at any time in Account (and equally in My Progress), and you can delete the stored copy there, which removes it from our servers — deleting it also switches the automatic backup off, so nothing is sent again unless you switch it back on. The controls live in Account on purpose — that screen is always available, with or without an active membership. The copy is readable only by your own account and is never used for marketing, profiling, or public statistics.
Your trophy collection is kept under your account as well, in a separate record that contains only the identifiers of the trophies you have earned — nothing from your trainings. Without it, trophies awarded for a single moment in your history (a training before 7 a.m., a full weekend, two trainings in one day) could not be proved again once that training dropped out of the 2,000 the app keeps, and they would not come back on a new phone. In addition, if you unlock the final trophy ("TOTAL CONTROL"), the date you did so is copied into the private Members spreadsheet described in Section 4. No other trophy is copied there, and nothing from your diary is.
7. ACCOUNT DELETION
You may permanently delete your account directly within the application (Account > Delete Account). This immediately and permanently deletes your Firebase Authentication sign-in — your login credentials and your ability to sign back into that account.
Together with your sign-in, the stored copy of your training diary (Section 6) and your trophy collection are deleted from our servers. The deletion is carried out by a server-side function triggered by the account deletion itself, so it happens even if you uninstall the app immediately afterwards. One copy is outside its reach: if you earned the final trophy, the date recorded in the private Members spreadsheet (Section 4) stays there, as part of the business record described below.
For legal, safety-liability and accounting reasons, Raw Control retains certain records even after your login is deleted, referenced by the internal ID number described in Section 4 rather than by an active login: (a) your legal consent evidence — the tamper-evident record confirming that you stated you are 18 or older and accepted the Terms of Use, the Health & Safety Disclaimer and the voluntary-risk acknowledgement, together with the date and version; and (b) your membership and purchase history — which plan you held, amounts paid, and renewal/cancellation dates; and (c) the account record behind that internal ID — the ID number itself, your name and email address, your sign-in method, the date the account was created and, if you earned it, the date of the final trophy — kept in the private spreadsheets described in Section 4 and in the internal mapping that assigns the ID. Because these records stay linked to your internal ID (and, through the consent record, to your email address), they can still be traced back to you — they are not anonymised.
We keep them on the legal basis that they are necessary for the establishment, exercise or defence of legal claims (Article 17(3)(e) GDPR) — given the physical-training nature of the app — and to meet accounting and record-keeping obligations. They are retained only for as long as such claims could reasonably arise or such obligations require, and are never used for marketing, profiling, or any purpose other than those stated. If you would like these records erased, contact us using the details in the Legal Contact section; we will erase them unless we are entitled or required to keep them for one of the reasons above, and we will tell you which applies.
8. DATA RETENTION
Active account data is retained for as long as your account exists. After you delete your account, the records listed in Section 7 — your legal consent evidence, your membership and purchase history, and the account record behind your internal ID — are retained as described there — referenced by your internal ID and still traceable to you — for as long as related legal claims could reasonably arise or accounting obligations require, and no longer. Other personal data is retained only for as long as necessary to provide the service, comply with legal obligations, resolve disputes, and enforce our legal agreements.
9. DATA SECURITY
Raw Control uses reasonable technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure.
10. CRASH REPORTING; NO ADVERTISING OR ANALYTICS TRACKING
Raw Control does not use advertising SDKs, does not sell your data, and does not run behavioural analytics on your usage. Firebase Analytics and Firebase's advertising features are explicitly disabled for this app.
To keep the app reliable, Raw Control uses Firebase Crashlytics, a crash-reporting service operated by Google. If the app crashes or encounters a technical error, a technical report is automatically sent to us so the problem can be found and fixed. Such a report contains technical information about the crash and your device (for example the device model, operating system version, and the technical state of the app at the moment of the crash). Crash reports are used solely for app stability and are never used to profile you or to advertise to you.
Any other data processing described in this policy exists solely to run the app itself (accounts, memberships, video playback, legal evidence, and basic business record-keeping) — not to profile or advertise to you.
11. YOUR RIGHTS
Depending on your country or applicable law, you may have the right to:
- Access your personal data
- Correct inaccurate information
- Request deletion of your personal data (subject to Section 7)
- Restrict or object to certain processing
- Request a copy of your personal data where applicable
- Lodge a complaint with a data protection supervisory authority
Raw Control is operated from the Czech Republic, so the competent supervisory authority is the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů, Pplk. Sochora 727/27, 170 00 Prague 7, Czech Republic, uoou.gov.cz). If you live in another EU or EEA country, you may also complain to the supervisory authority of the country where you live.
12. CHILDREN'S PRIVACY
Raw Control is intended for adults aged 18 and over. We do not knowingly collect personal data from anyone under 18, and the app provides no parental consent mechanism.
If you believe someone under 18 has created an account, contact us at rawcontrolapp@gmail.com and we will close the account and delete the associated login data.
13. CHANGES TO THIS PRIVACY POLICY
This Privacy Policy may be updated from time to time. Continued use of Raw Control after changes become effective constitutes acceptance of the updated Privacy Policy.
14. CONTACT
For privacy-related questions or requests, please contact us using the contact information provided in the Legal Contact section.