felia
Privacy policy
Last updated: 15 November 2026
This is a translation for convenience. If the versions differ, the German version applies.
1. Controller
Luise Riebel
Pilgrimstraße 6
50674 Köln
Germany
Email: hallo@getfelia.com
No data protection officer has been appointed, as there is no legal obligation to do so.
2. In short
- Felia is free. The app contains no ads, no tracking, no analytics tools and no third-party crash reporting.
- What you share is only visible to the people you choose. This is enforced on the server.
- Your data is stored in a data centre in Frankfurt am Main, Germany.
- You can delete your account in the app at any time.
3. Processing in the app
| Purpose | Data | Legal basis | Retention |
|---|---|---|---|
| Sign-in with a code | Email address, sign-in code, time and IP address of sign-in (sign-in service log) | Art. 6(1)(b) GDPR | Until account deletion; codes expire after a short time |
| Profile | Name, friend code; optional: profile photo, about me, sports, Instagram name | Art. 6(1)(b) GDPR | Until you change it or delete your account |
| Sharing and joining classes | Class (title, studio, time, Urban Sports Club link, note), audience, status (going, waiting list, cancelled), "Were you there?" | Art. 6(1)(b) GDPR | Until you delete the entry or your account |
| Friends and groups | Friendships, requests, groups and memberships, favourites, muted chats | Art. 6(1)(b) GDPR | Until you end them or delete your account |
| Feed, comments, chat, polls | Posts, photos, texts, stars, tags, reposts, chat messages and photos, reactions, mentions, read receipts, votes | Art. 6(1)(b) GDPR | Until you delete the content or your account |
| Push notifications | Your iPhone's push token; log of whether a push was delivered (recipient ID, result) | Art. 6(1)(a) GDPR (permission in iOS) and (f) | Token until sign-out or deletion; logs 30 days |
| Class reminders | Scheduled only on your iPhone, not on our server | – | On the device |
| Spam and abuse prevention | Times of certain actions (e.g. sending messages, entering codes) with your user ID | Art. 6(1)(f) GDPR (a safe app) | 2 days |
| Reports and blocking | Who reports what, reason, reported content; who blocks whom | Art. 6(1)(c) GDPR (Digital Services Act obligations) and (f) | Blocks until lifted; reports as long as needed to resolve them, unlinked from your account on deletion |
| Feedback | Your message and app version | Art. 6(1)(f) GDPR | Until handled; unlinked from you on account deletion |
Photos and camera
Felia only accesses the camera and photos when you take or choose a photo yourself. Photos (except GIFs) are resized and re-saved before upload; embedded metadata such as the location is not kept.
Photos are stored at random, unguessable addresses. In the app they are only shown to people allowed to see the content. Anyone who knows a photo's address can, however, open it without signing in.
Who sees your content
Each class is visible to exactly one audience: all your friends, one group or only you. Posts are visible to your friends, to people who can see the related class, to people tagged in them and to friends of people who repost them. In public communities, all members see the names and profiles of other members. Blocked people no longer see each other's content.
Chat messages are encrypted in transit but not end-to-end encrypted.
4. Recipients and processors
| Provider | Purpose | Location |
|---|---|---|
| Supabase Inc., USA | Database, sign-in, photo storage, sending sign-in codes, server function for push notifications | Data centre in Frankfurt am Main (EU). Data processing agreement with EU Standard Contractual Clauses for possible access from the USA. |
| Apple Inc. / Apple Distribution International Ltd., Ireland | Delivering push notifications, distributing the app via the App Store and TestFlight | EU/USA |
| Cloudflare Inc., USA | Hosting this website | Global network; certified under the EU-US Data Privacy Framework |
Apple's privacy policy also applies to the App Store and TestFlight. If you allowed sharing analytics with developers in iOS, Apple provides us with aggregated usage and crash statistics.
Transfers to the USA are based on the Standard Contractual Clauses or the EU-US Data Privacy Framework (Art. 45, 46 GDPR).
5. This website
getfelia.com sets no cookies, uses no tracking and loads no fonts or scripts from third parties. Cloudflare processes technically necessary data (IP address, time, page, browser) to deliver the site and protect it against attacks (Art. 6(1)(f) GDPR). If you email us, we only use your details to reply.
6. Deleting your account
In the app: Profile → Settings → Konto löschen (delete account). Your profile, classes, posts, comments, messages, photos and connections are deleted immediately. See Delete account.
7. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). You can withdraw consent, e.g. for push notifications, at any time with effect for the future. Email us at hallo@getfelia.com.
You can also lodge a complaint with a data protection supervisory authority.
8. Required data
An account requires an email address and a name. Everything else is optional. There is no automated decision-making or profiling within the meaning of Art. 22 GDPR.
9. Age
Felia is for people aged 16 and over.
10. Changes
When Felia changes, we update this policy. The date above shows the current version.