Ultrition Privacy Policy

1. Scope and Data Controller

This Privacy Policy explains how Ultraspor Gıda Sanayi ve Ticaret Limited Şirketi, operating under the Ultrition brand ("Ultrition", "we", "us", or "our"), processes personal data in connection with ultrition.com, mobile applications, connected platform features, support, waitlist, and related services (the "Service"). Unless another notice states otherwise, Ultrition is the data controller for the processing described here.

The Policy is prepared for Türkiye, the EEA, the UK, and the US. Appendix A is the Consumer Health Data Notice for Washington, Nevada, Connecticut, and similar US laws. Appendix B contains additional US/California disclosures. Regional law applies only when place and applicability conditions are met; Ultrition may voluntarily honor a request more broadly.

2. Data We Process

3. Health, Fitness, and Sensitive Data

Profile, physiology, activity, symptom, nutrition, location, and inference data may indicate physical health or condition and may constitute special-category, sensitive personal, or consumer health data. For core personalization in the EEA/UK, the necessity of the requested contract under GDPR/UK GDPR Article 6 and separate explicit consent for health data under Article 9 are generally contemplated. In Türkiye and applicable US states, explicit consent or the requested-service basis permitted by applicable law is used.

Health-data consent must be specific, informed, affirmative, recorded, and separate from acceptance of the general Terms. You may withdraw it in privacy settings or by contacting us. Withdrawal does not affect prior lawful processing; core personalization may stop because it cannot operate without the relevant data.

4. Personalization, Artificial Intelligence, and Automated Processing

Ultrition applies rules, calculations, statistical models, and/or machine learning to your inputs and connected data. The system generally estimates activity demand, compares it with profile, tolerance, conditions, and history, and recommends targets and timing. Feedback and later activities may affect future outputs.

Recommendations support your decisions; they are not intended to be solely automated decisions that produce legal or similarly significant effects. You may change inputs, decline optional connections, choose not to follow an output, and request human support.

5. Integrations, Location, and Weather

You choose whether to connect Garmin, Strava, TrainingPeaks, or another service. The authorization screen should show the requested fields and whether access is read-only or includes write-back. We use OAuth keys to maintain the connection. If you grant location permission or provide a route, we use precise/approximate coordinates and elevation to match conditions for the requested plan.

6. No Sale or Targeted Advertising

Ultrition does not sell personal data or consumer health data for money or other valuable consideration and does not share it for cross-context behavioral advertising. It does not use health/fitness data for targeted advertising and does not collect advertising identifiers. It does not offer financial incentives in exchange for personal data.

7. Contact and Complaints

You may also lodge a complaint with Türkiye’s Personal Data Protection Authority or other competent regulators.