Privacy Policy

Last updated: 23 May 2026

1. Who we are

BIKINTULIS is an independent developer of Garmin Connect IQ apps and watch faces, based in Germany. This policy covers the bikintulis.de website and the general handling of your data. Each app additionally has its own policy describing what that specific app collects on your watch and server — see Section 8. For any privacy question or request, use the contact form.

2. Information we collect

Through the website, we collect only what you choose to send us, plus minimal technical data:

  • Comments & reviews — your name, email address, an optional star rating, and your comment text.
  • Contact messages — your name, email address, subject, message, and an optional photo or video attachment (up to 20 MB).
  • Technical data — your IP address, stored only as a salted SHA-256 hash for spam and rate-limiting (the raw IP is not retained), and standard web-server access logs kept for up to 30 days.

We use no cookies, no advertising, no analytics SDKs, and no tracking pixels. We do not ask for your date of birth, location, or any financial account details on the website.

3. How we use your information

  • To publish your comment/review after moderation (your name, rating and comment are shown publicly; your email is never published).
  • To read and reply to your contact messages.
  • To keep the site secure and prevent spam and abuse.
  • To operate, maintain and improve the website.

4. Payments

The apps are currently free to install (with a trial); paid licences are not yet sold through this site. If paid purchases are added later, payment will be handled by a third-party payment provider — you would enter your card details directly with them, and BIKINTULIS would never receive or store your full card number or security code. This policy will be updated with the provider's details before any payment is processed.

5. Disclosure — who we share data with

We do not sell, rent, or trade your personal data, and we do not share it for advertising. Data is disclosed only to the limited service providers needed to run the service, and only as far as necessary:

  • Hosting — our server and database are hosted in the EU (Germany).
  • Email — EU-based, used only to deliver/answer contact messages.

All transfers happen over encrypted connections (HTTPS/TLS). We may also disclose information if required by law. As an EU-based service, the GDPR applies.

6. How we protect your information

  • All traffic to and from the website and our servers is encrypted with HTTPS/TLS.
  • Data is stored in a private database that is not exposed to the public internet.
  • IP addresses are stored only as salted hashes, never in raw form.
  • No card or payment-account data is ever handled or stored by BIKINTULIS.

7. Data retention

  • Published comments: kept while the related app is listed on this site.
  • Contact messages (and any attachment): kept only as long as needed to handle your enquiry, then deleted.
  • Server access logs: up to 30 days.
  • App/licence data: as described in each app's own policy (Section 8).

8. The apps

Each app has its own detailed policy covering what it collects on your watch and server:

  • BabyTrack — feed / sleep / diaper tracker.
  • BabyTrack Face — companion watch face.
  • Burpee Workout — burpees coach (fully on-device, collects nothing).
  • Lotus Bloom — photographic watch face (fully on-device, collects nothing).
  • Pull-Up Workout — pull-up coach (fully on-device, collects nothing).
  • Bodyweight Workout — all-in-one bodyweight coach (fully on-device, collects nothing).
  • Dips Workout — dips coach (fully on-device, collects nothing).
  • Hyrox Power — HYROX race trainer (on-device, collects nothing; optional GPS for outdoor runs).
  • Matchday — live World Cup watch face (sends only an anonymous watch ID to fetch scores; no personal data).
  • NATURE — animated nature watch face (the free version sends only an anonymous watch ID for a licence check; the optional paid Pro version is fully on-device).
  • UFO — flying-saucer watch face (fully on-device, no permissions, collects nothing — free Trial and paid Pro alike).

9. Your rights

Under the GDPR you can ask to access, correct, or delete your data, withdraw consent, object to processing, or lodge a complaint with your data-protection authority. To exercise any right, use the contact form — requests are answered within 30 days.

10. Changes to this policy

We may update this policy to reflect new features or legal requirements. The "Last updated" date above reflects the latest change.

11. Contact

Questions or requests about privacy: please use the contact form.