GDPR Compliance

Your rights under the General Data Protection Regulation (GDPR).

Last updated: July 14, 2026

Your Rights Under the GDPR

Right of Access (Art. 15): receive a copy of the personal data we hold about you
Right to Rectification (Art. 16): have inaccurate data corrected
Right to Erasure (Art. 17): have your data deleted ("right to be forgotten")
Right to Restriction (Art. 18): limit how we process your data
Right to Data Portability (Art. 20): receive your data in a machine-readable format
Right to Object (Art. 21): object to processing based on legitimate interests
Right to Withdraw Consent (Art. 7): withdraw previously given consent at any time

Email us at hello@bfrbally.app with your request.

Access your data, update preferences, export your logs, or delete your account directly through the BFRB Ally app.

Response Time: We will respond to your request within 30 days (extendable by 60 days for complex requests, in which case we will let you know).

Consent (Art. 6(1)(a)): for optional features such as push notifications
Contract Performance (Art. 6(1)(b)): to provide the app and your subscription
Explicit Consent (Art. 9(2)(a)): for health-related data such as your episode logs, which we treat as special category data

If you believe we have not handled your personal data properly, you have the right to lodge a complaint with:

Your local data protection authority
The data protection authority in your EU member state
The authority responsible for us: Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW)

For any GDPR-related questions or to exercise your rights:

Privacy Email: hello@bfrbally.app
Data Controller: Timo Scholz-Fritsch, Kaiserallee 12, 58511 Lüdenscheid, Germany