GSpike

Privacy Policy — GSpike

Last updated: 1 June 2026

Controller: Joanna Bednarczyk (independent developer based in Switzerland), operating under the trade name “Studio Volt”.
Contact: contact@studiovolt.dev

This Privacy Policy explains how GSpike (the “App”) handles your data, what limited technical information our third-party service provider processes on our behalf, and your rights under the EU GDPR, the Swiss revised Federal Act on Data Protection (revFADP/nFADP), the Polish Act on the Protection of Personal Data (UODO), the UK GDPR, and other applicable laws.

1. Your Data Stays on Your Device

GSpike stores all session data (peak G-force, average G-force, duration, timestamps, device origin) locally on your device in an on-device database. When you use the Apple Watch companion app, session data is synced directly between your iPhone and Apple Watch via Apple's WatchConnectivity framework — a peer-to-peer connection that does not pass through any external servers.

There are no user accounts, no logins, and no cloud storage. We do not operate any servers that receive your session data.

2. What the App Uses from Your Device

During measurement sessions, the App reads data from your device's built-in sensors:

• Accelerometer (to measure G-forces and acceleration)
• Apple Watch accelerometer (when using the companion Watch app)

This sensor data is used only to calculate and display G-force metrics and is stored only on your device. Accelerometer readings are never transmitted off-device by the App.

3. Crash & Error Reports — Sentry GmbH (Germany, EU)

To detect and fix bugs, the App uses Sentry for anonymous crash reporting. When the App crashes or encounters an unhandled error, the following technical information is sent to Sentry's infrastructure:

• Stack trace and error message
• Device model, iOS version, App version
• Anonymous Sentry install identifier (auto-generated UUID per install)
• Anonymous diagnostic breadcrumbs (e.g. which screen was open when the error occurred)

Your IP address is visible to Sentry's servers as part of the network connection that delivers a crash event (this is true of any internet request). Our Sentry configuration is set so that the IP address is not stored inside the crash event payload itself. Sentry retains incoming connection metadata under its own server-log practices for up to 30 days.

Crash reports do not include your G-force readings, session history, personal records, name, email address, or any account identifier (because there are no accounts). The App is configured to minimise the collection of personally identifiable information by Sentry.

Purpose: detect and fix bugs.
Legal basis (GDPR Art. 6(1)(f)): legitimate interest in ensuring App stability and security. You may object to this processing at any time (see “Your Rights” below).
Data location: EU and US (Sentry GmbH, Germany operates EU-region infrastructure; Sentry, Inc. operates US-region infrastructure for its parent service).
International transfers: Sentry is certified under the EU-US Data Privacy Framework (participant ID 5869 — verified 2026-06-01) and Sentry's DPA also incorporates the European Commission's Standard Contractual Clauses (SCCs) for any transfers outside the DPF scope, including UK Addendum and Swiss Addendum.
Provider: Sentry GmbH (acting jointly with Sentry, Inc.) — DPA: sentry.io/legal/dpa · Privacy: sentry.io/privacy.

We do not sell crash report data, do not use it for advertising, and do not enable Sentry's AI / Seer / Autofix features for the Studio Volt organisation.

4. Data Retention

• Local data (G-force sessions, peak/average records, settings): Stored on your device indefinitely until you delete it within the App or uninstall the App. We have no access to this data.
• Watch data: Session data synced between iPhone and Apple Watch is stored locally on both devices. Deleting a session on one device removes it from both.
• Crash reports (Sentry): Up to 30 days (Sentry Developer plan retention), then automatically deleted by Sentry.
• Sentry server connection logs (IP): Up to 30 days under Sentry's own log retention policy.
• We do not retain any other data about you.

5. Sharing

When you use the “Share” feature, you create an image (share card) that you can share via your phone's standard sharing options. This is entirely your choice and under your control. We are not involved in the onward sharing.

6. Your Rights

Under the EU GDPR, the Swiss revFADP/nFADP, the Polish UODO, the UK GDPR, and other applicable laws, you have the following rights:

• Access — view all your data in the App (History tab).
• Erasure — delete any session or all data at any time within the App; uninstalling the App removes all locally stored data from that device.
• Crash report deletion — request deletion of Sentry crash report data by emailing us (see below). We will process your request within 30 days.
• Object — object to crash reporting at any time by contacting us; we will provide instructions to disable crash reporting on your device or remove the relevant install identifier from Sentry.
• Portability — your local session data is yours; you can export it via the App's share feature.
• Lodge a complaint — see “Contact” below for supervisory authorities.

If you reside in the EU/EEA, nothing in this policy or our Terms of Service affects your rights under mandatory consumer protection laws of your country of residence.

7. Apple App Privacy Categories

In accordance with Apple's App Store privacy requirements, the App declares the following data categories as collected:

• Diagnostics (Crash Data, Performance Data, Other Diagnostic Data) — used for App functionality only, not linked to your identity, not used to track you.
• Identifiers (anonymous Sentry install ID) — used for App functionality only, not linked to your identity, not used to track you.

The App does not collect Location, Contacts, Health & Fitness, User Content, Purchases, Search History, Browsing History, Financial Info, Sensitive Info, or Usage Data.

Accelerometer / motion sensor readings are read on-device for the App's core function (G-force measurement) and are never transmitted off-device — they are therefore not declared as “collected data” under Apple's App Privacy framework.

8. Children

GSpike does not knowingly collect data from children under 16. If you are a parent and believe your child is using the App, please contact us.

9. Changes to This Policy

We may update this policy from time to time. The “Last updated” date at the top will reflect any changes. Material changes will be highlighted in the App and/or on studiovolt.dev/gspike/.

10. Contact and Supervisory Authorities

For any privacy enquiry, data-subject request, or to exercise your rights:

Email: contact@studiovolt.dev
Website: studiovolt.dev

If you believe your rights have been violated, you may lodge a complaint with:

• Switzerland: Federal Data Protection and Information Commissioner (FDPIC) — edoeb.admin.ch
• EU: your local Data Protection Authority
• Poland: Prezes Urzędu Ochrony Danych Osobowych (UODO) — uodo.gov.pl
• Germany: the competent Landesdatenschutzbeauftragte for your federal state
• United Kingdom: Information Commissioner's Office (ICO) — ico.org.uk