A summary of the key privacy principles of all services provided by HeiaHeia Oy (including HeiaHeia, MarsMars, Spordivägi).
05 March 2025
1. We are GDPR compliant. You as an end-user control your own personal data in the service and you decide how much of your personal data you want to share with others. You can remove your account or download your data at any point.
2. You can manage your detailed privacy level from the settings.
3. Our basic privacy control is friendships: friends share activities with each other to enable peer support by "cheering" each other in the service.
4. You can separately control the privacy level of each of the events you have created in the service (also sharing to friends). Some of the data types you can include in your entries (e.g. location data, heart rate) have their own additional privacy settings.
5. If you join the service via a community invite or code, you give consent to participate in activity challenges, which may include rewarding for activity, being included on participant lists visible to all participants, and reporting to the challenge organiser. Participating in activity challenges includes sharing high level personal data, like meeting your daily step target or the amount of “wellbeing points” you have collected, with the challenge organiser and other participants. You can choose to opt-out or opt-in to the parts including personal data sharing at any point via the settings, under “Participant lists and reporting”.
6. If you join the service via a community invite or code, the service may include a recurring wellbeing survey. The results of the survey may be utilised in anonymised aggregate reports to the community admin, if a minimum of 5 people have answered the survey.
7. If you have a coach in the service, you give consent for the coach to see all of your entries in the service. You can discontinue the coaching relationship at any point.
More information: heiaheia.com/privacy
