Privacy Policy.
We take the protection of your personal data seriously. This policy explains which data we collect, how we use it and which rights you have.
This English translation is provided for convenience. The German version is legally binding.
Contents
1. Data Controller
The controller responsible for data processing within the meaning of the General Data Protection Regulation (GDPR) is:
MOA GmbH
Sebastianstr. 25
92224 Amberg
Germany
Phone: +49 (0)156 78602001
Email: info@moaacademy.com
Commercial register: HRB 7632 (Local Court of Amberg)
2. Types of Data Processed
- Master data: name, address
- Contact data: email address, phone number
- Content data: texts, photos, training data
- Usage data: content visited, access times, training progress
- Meta/communication data: device information, IP addresses, language preference
- Payment data: billing and transaction data (processed by the app store providers)
3. Purposes of Processing
- Providing the MOA app and website with all their features
- Managing user accounts and subscriptions
- Responding to contact requests and support tickets
- Security measures and troubleshooting
- Reach measurement and improvement of our content
- Compliance with statutory retention obligations
4. Legal Bases
- Art. 6 (1)(a) GDPR: consent (e.g. newsletter)
- Art. 6 (1)(b) GDPR: performance of a contract (e.g. account, subscription)
- Art. 6 (1)(c) GDPR: legal obligation (e.g. tax-related retention)
- Art. 6 (1)(f) GDPR: legitimate interests (e.g. security, reach measurement)
5. Third-Party Providers & Processors
We use the following services to operate the app and website. Data processing agreements pursuant to Art. 28 GDPR are in place with each of them:
App Backend & Subscription Management
- Adapty.io (Adapty, Inc., USA): management of in-app subscriptions, paywall configuration. Processes: subscription status, device ID, purchases. Privacy policy: adapty.io/privacy. Transfer to a third country: yes, based on Standard Contractual Clauses.
App Stores & Payment Processing
- Apple Inc.: App Store, in-app purchases, subscriptions on iOS. Privacy policy: apple.com/legal/privacy
- Google LLC: Google Play Store, in-app purchases, subscriptions on Android. Privacy policy: policies.google.com/privacy
6. Transfers to Third Countries
Some of our third-party providers are based outside the EU/EEA, in particular in the USA. Data transfers take place exclusively on the basis of:
- the EU-US Data Privacy Framework (DPF), where the provider is certified
- EU Standard Contractual Clauses (SCC) pursuant to Art. 46 (2) GDPR
- your explicit consent pursuant to Art. 49 (1)(a) GDPR
7. Cookies & Tracking
On the website we use technically necessary cookies (session cookies, security cookies). Additional cookies for reach measurement or marketing are only set with your consent via the cookie consent banner.
You can adjust your cookie settings at any time via the cookie banner, or delete cookies in your browser.
General opt-out options for marketing cookies:
8. Hosting
This website is operated on a certified EU hosting provider. When you visit the website, technically necessary data is processed (IP address, timestamp, user agent) to establish the connection. This data is stored in server logs and automatically deleted after 7 days. The legal basis is Art. 6 (1)(f) GDPR (legitimate interest in secure operation).
9. App-Specific Data Processing
Account Data
When you register in the MOA app, we store: email, password (encrypted), display name. This data is necessary for the performance of the contract (Art. 6 (1)(b) GDPR).
Subscription Data
When you take out a subscription, we process subscription status and purchases via Adapty.io. Payment itself is handled by Apple or Google. We never receive your payment details (credit card etc.).
Training Data
While you use the app, we store your progress: videos watched, series completed, workout history. This data is necessary to provide the app’s features and is fully removed when your account is deleted.
Push Notifications
We send push notifications via the Apple Push Notification Service (APNs) or Firebase Cloud Messaging (FCM). You can disable push notifications at any time in your device settings.
10. Data Deletion
We delete data as soon as it is no longer required for its purpose, unless statutory retention obligations prevent this (e.g. commercial and tax law obligations of 6 to 10 years).
Account Deletion in the App
You can remove your account and all associated data directly in the MOA app under Settings → Delete account. Once deleted, all of your training data is irrevocably removed. Existing subscriptions must be cancelled separately via the App Store or Google Play (see the support page).
Deletion After Inactivity
Account data is automatically deleted after 24 months of inactivity, provided there is no active subscription.
11. Your Rights
Under the GDPR you have the following rights:
- Right of access (Art. 15): information about the data we store about you
- Right to rectification (Art. 16): correction of inaccurate data
- Right to erasure (Art. 17): deletion of your data („right to be forgotten“)
- Right to restriction (Art. 18): restriction of processing
- Right to data portability (Art. 20): receiving your data in a machine-readable format
- Right to object (Art. 21): objection to processing, in particular direct marketing
- Withdrawal of consent (Art. 7 (3)): revocable at any time with effect for the future
To exercise your rights, write to us at info@moaacademy.com.
12. Right to Lodge a Complaint
Without prejudice to any other remedies, you have the right to lodge a complaint with a supervisory authority, in particular in the member state of your habitual residence, your place of work or the place of the alleged infringement (Art. 77 GDPR).
The authority responsible for MOA: Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach, Germany. Web: lda.bayern.de
13. Contact & Updates
For questions about data protection you can reach us at:
info@moaacademy.com
This privacy policy may be updated from time to time to reflect changed legal requirements or changes to our services. The current version is always available on this page.
Last updated: 04.05.2026