Privacy policy

1. Who processes your data

Horse Performance Tracker (“the service”) is published by CraftData SASU (“the publisher”), which is the controller for the processing described here. Its full details are in the legal notice.

For any question or request about your data, write to contact@horseperformancetracker.com.

The publisher has not appointed a data protection officer: its size and the nature of its processing do not require one (article 37 of the GDPR). Your requests therefore go to the address above, and nothing falls between the two.

2. What this policy covers

It covers the mobile app and the website. It explains what the publisher collects, why, who it shares it with, how long it keeps it, and what you can require of it.

The rules for using the service are in the terms of use, and those for buying in the terms of sale.

It does not cover third-party sites and services you may reach from the service: they have their own policy.

3. The data processed

The publisher processes:

• your account: your email address, your name, your password (never in the clear — it is hashed), whether your address is verified, your account type and your plan;
• your settings: your language and your time zone — the latter is what decides which day a session belongs to;
• your billing details, asked for at your first purchase only: name, address, postcode, town, country, and EU VAT number if you have one;
• your content: sessions, rounds, fences, faults, notes, dictations, care, rations, reports, questions asked to the assistant and their answers, and data about your horses — name, age, breed, reference height, profile photo;
• your purchases: subscription, payments, invoices and credits. The publisher never sees your bank details: they are entered at the payment provider and do not pass through the service;
• your accounting records: for each sale, the date, the amount, the tax, the invoice number and your billing details, copied as they stood that day. They are kept for ten years under a legal obligation, so they outlive the deletion of your account — they keep no link to it, and not your email address either;
• your guest accesses: the email address of the person you invite, for as long as the access exists;
• your posted shorts: the video you post to a horse’s circle, its thumbnail, its length, its title, its jump score computed on your phone, its posting date, and the names of the people in the circle who watched it;
• your Leaderboard activity: the shorts you submit there and the moderation decision about them, the likes you give and the reports you make, with their reason;
• your feedback: the category and the length of the message. The message itself is not kept in the database — it goes by email to the support address;
• what you need to sign in safely: session, address verification and password reset tokens, all kept hashed.

A horse’s data is not personal data: a horse is not a person, and the service never asks for the name of one of your clients.

Some fields are free text — a session note, the title of a care item, the name of the professional who carried it out. You write what you like in them: only put in what you actually need about anyone else.

The service never asks for your location and collects no health data about you.

It has two photo and video features. A horse’s profile photo, cropped and resized on your phone, is shown to the horse’s circle. Shorts are put together on your phone: the clips and photos you pick there never leave it, and only the short you post and its thumbnail are uploaded to the service. People may appear in them: only post what they agree to have shown to the horse’s circle and, if you submit it to the Leaderboard, to everyone on the app.

4. Why, and on what legal basis

Each processing operation has a purpose and a legal basis:

• running the service — account, log, horses, analytics, reports, sharing, shorts: performance of the contract formed by the terms of use;
• carrying out the AI actions you trigger: performance of the contract;
• selling a subscription or a credit pack, and taking payment: performance of the contract;
• issuing invoices and keeping accounting records: a legal obligation;
• keeping proof of what you accepted at payment — the version of the terms of sale, your request for immediate performance, your waiver of the right of withdrawal: a legal obligation;
• sending you the written renewal reminder before your subscription renews: a legal obligation (article L215-1 of the French Consumer Code);
• handling a withdrawal and the refund that follows: a legal obligation;
• telling you that a renewal did not go through: performance of the contract;
• sending the guest access invitation to the address you give: the publisher’s legitimate interest, which is to open the read-only access you are asking it to open;
• keeping the service secure, preventing abuse, keeping technical logs and tracing administration actions: the publisher’s legitimate interest;
• answering your requests and improving the service from your feedback: the publisher’s legitimate interest.

None of this rests on your consent: it follows from the contract, from the law, or from a legitimate interest you can object to. That is why the service does not ask you to agree to anything on this account.

5. AI assistance

Six features call a language model, and none of them runs unless you ask: the AI summary, session dictation, the prose reading of a progress report, the suggested session, the stable digest and the question to the assistant.

What is sent to Mistral AI is the content the action needs: the name and reference details of the horse concerned, the figures for the session or period, your free-text notes if you wrote any, and the question you ask the assistant. Your name, your email address and any account identifier are not part of it.

Texts produced by the AI are kept for ninety days only: the article on how long data is kept gives the details. The suggested session and the stable digest are never stored — they are shown when you ask for them.

For a dictation, the audio recording only passes through: it is never stored. The transcript is saved with the session, so that you can read it back, and stays for as long as the session does.

The publisher undertakes that your content is not used to train any artificial intelligence model, neither by itself nor by its processor. For what Mistral AI keeps on its side and for how long, see its own terms: the publisher will not state a period it does not control.

6. Who else has access

Your data is not sold, rented, traded or passed to an advertiser. It is shared with three providers only, each for what it does:

• Scaleway (France): hosting, database and sending service emails;
• Mollie (Netherlands): payment and issuing invoices;
• Mistral AI (France): inference for the AI actions.

All three are established in the European Union and the data stays there: there is no transfer outside the European Union.

Inside the publisher, access is limited to those who need it, and administration actions on an account are logged.

The publisher may also have to disclose data to an authority that lawfully requires it.

7. How long your data is kept

Your account data and your content are kept for as long as your account exists, subject to what follows. There is no automatic purge of dormant accounts: an account you leave alone stays as it is until you delete it.

When you delete your account, erasure is immediate and permanent: horses, sessions, care, rations, reports, credits and billing records go with it. There is no bin, no retention period and no way back. Only the accounting records remain, and the article below says why.

A horse’s profile photo is kept until you remove or replace it, and at most for as long as the horse exists; its file is then erased. A posted short is kept until you remove it, and at most for as long as its session, its horse and your account exist; the number of posted shorts per horse is limited by your plan. Once removed, or taken away by the deletion of its session, its horse or your account, it disappears from the app at once; its file is then erased, along with the names of those who watched it.

A Leaderboard entry, with its likes and reports, is deleted at the end of its thirty days, or thirty days after a moderation refusal.

A text produced by the AI — AI summary, prose reading of a progress report, or the assistant’s answer with the question that prompted it — is kept for ninety days from its latest generation, then deleted automatically, at the latest the following day. Regenerating it restarts that period. Until then, you can read it again at no cost; after that, it has to be generated again. A dictation transcript is not affected: it is part of the session.

Tokens have short lifetimes, each suited to its job: fifteen minutes for a session token, thirty days for the one that renews it, twenty-four hours for an address verification link, one hour for a password reset link, seven days for a guest access invitation.

Accounting is the one exception. Every sale creates a record — date, amount, tax, invoice number and billing details — that the law requires to be kept for ten years (article L123-22 of the French commercial code). The basis for it is that legal obligation, not your consent: it therefore outlives the deletion of your account, of which the record keeps no link and not your email address. It is erased at the end of the ten years. Your invoices themselves are issued and kept by Mollie, under its own obligations, so keep your own copies.

The database is backed up automatically by the host, and running the service produces technical logs. Deleted data disappears from both as they roll over: nobody looks in them to recover content you have removed.

8. What you share yourself

You can grant read-only guest access to one horse. The invited person’s email address is used to send the invitation and to attach their access; it is kept for as long as the access exists and goes when you revoke it.

Once you hand over a summary card or a progress report, it is outside the service: the publisher can neither take it back nor control how it spreads.

A short you post is visible only to the horse’s circle — the members of its stable and its guests: the service produces no sharing link, it can only be watched in the app. Only you see who watched it.

A short you submit to the Leaderboard becomes visible to everyone on the app for thirty days, once the publisher’s team has watched and accepted it, with the horse’s name and its age on the day of the session, but without your name. They can like or report it: you submit it knowingly, and can remove it at any time. After thirty days, it leaves the Leaderboard and stays visible to the horse’s circle only. A short you share as a file, on the other hand, is outside the service, like a summary card.

If you work for clients, the service never asks for their names. Whatever you nonetheless write about them in a free-text field is your content, and you answer for it.

9. Your rights

You have the following rights over your data:

• to access what the publisher holds and get a copy of it;
• to have it corrected when it is inaccurate;
• to have it erased;
• to have its processing restricted;
• to object to processing based on the publisher’s legitimate interest, on grounds relating to your situation;
• to receive your data in a structured, machine-readable format and take it elsewhere.

Two of them you exercise on your own, from your account: exporting your data, which gives you a structured file, and deleting your account, confirmed by your password.

The others are exercised in writing at contact@horseperformancetracker.com. The publisher replies within one month; if your request is complex, it tells you so and may extend that by two months.

You can also leave directions on what happens to your data after your death (article 85 of the French Data Protection Act), at the same address.

If an answer does not satisfy you, you can lodge a complaint with the CNIL — 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, or at cnil.fr.

10. Cookies and audience measurement

The website sets no cookies. It carries no audience measurement, no advertising tracker and no social button that would follow you. That is why you see no consent banner: there is nothing to consent to.

Your browser keeps three things only, and they do not leave your device: the language you chose, the fact that you dismissed an announcement, and your sign-in token — that last one for the life of the tab, no longer.

The day audience measurement is put in place, it will ask for your consent, you will be able to refuse, and this page will say so.

11. Security

Traffic is encrypted end to end with TLS, data is encrypted at rest, and passwords are hashed with argon2id — the publisher cannot read yours.

The database is not exposed to the public internet, technical access follows least privilege, inputs are validated, request rates are limited, and backups are automatic.

No measure makes a service invulnerable. If you think your account has been compromised, change your password and write to contact@horseperformancetracker.com.

12. Minors

The service is intended for people aged 15 or over — the age at which a minor can consent alone to the processing of their personal data. Under 15, the account is the responsibility of a holder of parental authority.

The publisher does not verify the age of its users: no age check exists in the service. The terms of this rule are in the terms of use.

13. Changes to this policy

The publisher may change this policy, in particular to follow a change in the service or in the law. The version in force is the one published on this page, and its date is at the top.

Any substantial change is announced to you before it takes effect, by email or in the service.