Privacy Policy
Effective: January 12, 2026
Sportygram is a mobile fitness app, and this website is its home: it shares our blog and lets you join the waitlist for early access to the app. This policy explains, in plain language, what data we collect while you’re here, why we collect it, and what we will never do with it.
Here’s the short version. We collect your email address only if you choose to give it to us, and we keep a minimal set of technical logs to keep the site running and safe. That’s it. We don’t sell your data, we don’t run advertising trackers, and we don’t build profiles of our visitors. Being straightforward about data isn’t a legal formality for us — it’s how we want to build this product from day one.
1. Who We Are
Sportygram is an international technology project headquartered in Limassol, Cyprus. We operate the website at https://sportygram.com (the “Site”) and are the controller of the personal data described in this policy. For anything related to your data, write to us at privacy@sportygram.com.
Your use of the Site is also governed by our Terms of Use.
2. What Data We Collect
We collect far less than most websites. Here is the complete list.
- Early access form. When you join the waitlist, we receive the email address you enter, the language of the page you were on, and a note of which form you used (the one at the top of the page or the one further down). Nothing else — no name, no phone number, no payment details.
- Technical logs. Our hosting infrastructure automatically records standard server logs: your IP address, your browser’s user-agent string, and the time of each request. These logs help us keep the Site secure and diagnose problems.
- Cookies, analytics and reCAPTCHA. The Site uses strictly necessary cookies and keeps an anonymised count of visits — with our own cookieless counter and with Yandex Metrica. Extended analytics — click maps and full Google Analytics — runs only with your consent, and choosing “Essential only” switches off every analytics cookie. Our forms are protected by Google reCAPTCHA v2, an anti-bot service that helps us tell real people from automated scripts.
Just as important is what we don’t collect. There are no advertising cookies or trackers on the Site. We don’t use behavioral profiling, we never record your screen, and analytics never receives your name, email or other contact details.
3. Why We Use Your Data
We use the data above for a short list of purposes, each with a legal basis:
- To run the early access list — keeping your email on the waitlist, inviting you to Sportygram, and delivering the bonus we promised early supporters (premium access before everyone else). Legal basis: your consent, which you give when you submit the form and can withdraw at any time.
- To protect the Site from abuse — spam, bots, and attacks, using server logs and reCAPTCHA. Legal basis: our legitimate interest in keeping the Site safe.
- To operate and improve the Site — making sure pages load, finding and fixing errors, and seeing which articles readers find useful (anonymised visit statistics). Legal basis: our legitimate interest in running a working website.
We don’t use your data for automated decision-making that affects you, and we never use it for targeted advertising.
4. Cookies and Similar Technologies
By default the Site sets only cookies that are strictly necessary for it to function — for example, to remember your cookie choice itself. The cookie banner shown on your first visit lets you accept or decline the optional category before anything is set; you can change your mind at any time by clearing the Site’s data in your browser.
Basic visit statistics. To know whether the Site works and which articles people actually read, we keep an anonymised count of visits with Yandex Metrica: page, referrer, device type and visit duration. IP addresses are truncated and session recording is never enabled. The legal basis is our legitimate interest in running and improving the Site; your name and email are never passed to analytics.
Our own visit counter. We count visits ourselves, inside the Site: the page you opened, the language version, the domain you arrived from, your country and device type. This counter sets no cookies and stores nothing in your browser, so it does not require consent. To tell one reader from another we use an irreversible daily hash; the IP address and user-agent themselves are never stored, and the hash changes the next day. The data cannot identify you — we only see totals: how many people visit and which pages they read. The legal basis is our legitimate interest in knowing whether the Site works.
Extended analytics runs only with your consent. Choosing “Accept all” additionally enables click maps, accurate bounce measurement and full Google Analytics. Choosing “Essential only” stops Yandex Metrica from loading at all and puts Google Analytics into cookieless mode (Consent Mode): it sends only anonymised, aggregated signals, with no identifiers and nothing written to your browser. Our own counter, described above, keeps working — it never uses cookies.
Google reCAPTCHA v2 protects our waitlist forms from bots. When you interact with a protected form, Google may process technical data (such as your IP address and browser details) under its own terms. You can read how Google handles this data in the Google Privacy Policy.
5. Who We Share Data With
We share personal data only with the infrastructure providers that make the Site work, and only to the extent needed for their job. They act as our processors under data protection agreements:
- Our hosting and CDN provider — serving the website and its content.
- Our managed database provider — storing waitlist entries on servers in the European Union.
- An anti-bot service (reCAPTCHA) — described above.
- Our business email provider — receiving and answering your messages.
Each provider is bound by a data processing agreement. We will share the current list of processors on request at privacy@sportygram.com.
We do not sell your personal data, and we do not share it with advertising networks or data brokers. The only other situation in which we might disclose data is if we are legally required to — for example, by a valid court order — and even then only what the law demands.
6. International Transfers
Our providers may process data outside the country where you live. Whenever personal data leaves the European Economic Area or another jurisdiction with similar protections, we rely on recognized safeguards: the European Commission’s Standard Contractual Clauses (SCCs) and, where available, adequacy decisions. Our waitlist database itself is hosted in the European Union.
7. How Long We Keep Data
- Waitlist emails — no longer than 24 months after your last interaction with us, or until you withdraw your consent, whichever comes first.
- Technical server logs — up to 90 days.
When a retention period ends, we delete the data or irreversibly anonymize it.
8. How We Protect Data
Our security approach starts with collecting as little as possible. Beyond that:
- The entire Site runs over HTTPS, and data is encrypted in transit.
- Access to personal data is limited to the people who genuinely need it.
- We practice data minimization: we don’t ask for data we don’t need, so there is very little to lose in the first place.
No online service can promise absolute security, but keeping our data footprint small is the most honest protection we can offer.
9. Your Rights and How to Use Them
Wherever you live, you can ask us to:
- tell you whether we hold data about you (access);
- give you a copy of your data;
- correct inaccurate data;
- delete your data;
- restrict how we process it;
- object to processing based on legitimate interest;
- receive your data in a portable format;
- withdraw your consent at any time, with effect for the future.
To exercise any of these rights, email privacy@sportygram.com. We respond within 30 days. We may ask you to confirm you control the email address in question — that’s to protect your data, not to slow you down. Exercising your rights is free, and we will never treat you worse for doing so. You also have the right to lodge a complaint with a data protection supervisory authority (see section 11).
10. Children
Our Site and services are not intended for anyone under 16, and we do not knowingly collect personal data from children under 16. If you believe a child has given us their email address, write to privacy@sportygram.com and we will delete it promptly.
11. Rights in Specific Jurisdictions
The rights in section 9 apply to everyone. Depending on where you live, additional rules may also apply:
European Economic Area, Switzerland, and the United Kingdom
If you are in the EEA, Switzerland, or the UK, we process your data under the GDPR (or its Swiss and UK equivalents). Our legal bases are your consent (for the waitlist) and our legitimate interests (for security and site operation), as described in section 3. You have all the rights listed in section 9, including the right to object to processing based on legitimate interest.
You may lodge a complaint with your local supervisory authority or with the authority in Cyprus, where we are headquartered: the Office of the Commissioner for Personal Data Protection (Republic of Cyprus).
United States — California
Under the CCPA/CPRA, the data we collect falls into two categories: identifiers (your email address and IP address) and internet activity (server log records such as user-agent and request time). We collect them for the purposes in section 3 and share them only with the service providers in section 5.
We do not sell personal information, and we do not share it for cross-context behavioral advertising. California residents have the right to know, access, correct, and delete their personal information, and the right not to be discriminated against for exercising these rights. To make a request, email privacy@sportygram.com.
Brazil
If you are in Brazil, we process your data under the LGPD, relying on your consent and our legitimate interests as described in section 3. You have the rights granted by the LGPD, including confirmation of processing, access, correction, anonymization, deletion, and information about sharing. Contact us at privacy@sportygram.com; you may also contact the Brazilian data protection authority (ANPD).
Other countries
We apply the same standards to everyone, everywhere: minimal collection, no selling of data, no advertising trackers, and the rights in section 9. If your local law gives you additional rights, email us and we will honor them.
12. Changes to This Policy
As Sportygram grows, this policy will evolve. When it does, we will post the updated version on this page and change the effective date at the top. If a change meaningfully affects how we handle your data, we will say so prominently on the Site before it takes effect. We will never quietly weaken the promises made here.
13. How to Contact Us
Questions, requests, or concerns about your data — we genuinely want to hear them. Email us at privacy@sportygram.com and we will get back to you within 30 days at the latest.
Sportygram — an international technology project headquartered in Limassol, Cyprus.