Zona is a mobile app that maps outdoor training spots. This policy explains what personal data we collect, why, and what rights you have over it.
Data controller: Georgi Valentinov Venelinov · Sofia, Bulgaria · support@bgzona.app
| Data | Why | Legal basis |
|---|---|---|
| Email address | To create and secure your account | Contract |
| Username and Zona ID | To identify you to other users and enable friend requests | Contract |
| Approximate location, while the app is open | To centre the map on you and show nearby spots | Consent |
| Spots, photos and reviews you submit | To display them to other users | Contract |
| Profile photo and avatar colour, if you set them | To display your profile | Consent |
| Presence — which spot you are at, if you opt in | To show others who is training where | Consent |
| Activity: visits, confirmations, Zones balance, achievements, friends | To run the app's features | Contract |
Only the services needed to run the app:
| Service | Purpose | Location |
|---|---|---|
| Supabase | Database, accounts, photo storage | European Union (Paris) |
| Cloudflare | Map tile delivery | Global network |
Map data comes from OpenStreetMap. We send them nothing about you.
Public to all Zona users:
Controlled by your privacy setting:
Never shown to anyone: your email address, and your exact coordinates.
Until you delete your account, or until the data is no longer needed. See section 6 for exactly what happens on deletion.
Under the GDPR you have the right to:
Email support@bgzona.app and we will respond within 30 days. You also have the right to complain to the Bulgarian Commission for Personal Data Protection.
You can delete your account from within the app. When you do:
| Data | What happens |
|---|---|
| Your profile, email, username, Zona ID | Deleted |
| Your profile photo | Deleted |
| Reviews you wrote | Deleted |
| Friendships | Deleted |
| Your Zones balance and leaderboard position | Deleted |
| Your favourites | Deleted |
| Spots you added | Kept, with your name removed |
| Photos you uploaded | Kept, with your name removed |
Spots and photos are kept because they are shared community information — removing them would take a training spot off the map for everyone else. They are no longer linked to you in any way.
Zona is intended for people aged 16 and over. We do not knowingly collect data from anyone younger. If you believe a child has created an account, email us and we will remove it.
Data is stored with Supabase in the EU, encrypted in transit, and protected by database-level access rules so users can only read and change what they are entitled to. No system is perfectly secure, but we take this seriously and fix problems promptly.
If we change this policy we will update the date at the top and, for significant changes, notify you in the app.