Availability and local prices depend on your country. Check the app store before subscribing. Physical 3D-printed products are offered only in Germany.
The German version is legally authoritative. This English version is provided as a non-binding translation.
This privacy policy explains how personal data is processed when you use the Equinora app for iOS and Android, the website at equinora-app.de and the web portal for clubs and stables at equinora-app.de/portal.
PrismaWorks, Fabien Sombrofsky
Braune-Moor-Str. 1b, 49844 Bawinkel, Germany
Email: support@equinora-app.com
When you register, we collect your name, email address and password. Our authentication provider stores the password only in hashed form. You may optionally add a profile photo and further profile details.
Depending on your use, we store content you enter: club or stable memberships, horse data including photos, ride bookings, event registrations, training, health, feeding, appointment and cost entries, and posts or news within your club or stable.
The weather display is optional. If you enable it, the app processes your approximate foreground location to show your place and local weather. Coordinates are rounded to a grid of about two kilometres and sent through a Google Firebase server function to the Bright Sky weather API. Bright Sky receives the rounded coordinates and, for technical reasons, the IP address of our server function, but no Equinora user identifier. To display a place name, the operating system's geocoding service provided by Apple or Google may also process the rounded coordinates. Without location permission, weather remains hidden. We store neither the location in Firestore nor a movement profile in your Equinora account; the weather response is cached only locally on your device.
Precise location recording starts only when you deliberately begin a GPS ride. To continue while the screen is locked, the app may also request the operating system's precise background-location permission. Route, timestamps, altitude, speed and technical quality values are stored only locally on your device and are not sent to Firebase or another Equinora-operated server. Rides are associated with your account on that device, not with a selected club or stable.
You can delete individual rides, only their precise route or all local rides. For route data, you may select automatic retention of 30, 180 or 365 days, or keep it locally without a time limit. If you revoke location permission in the system settings, further recording is not possible.
Private expense entries may contain amount, category, date, note, horse reference, cost shares and budgets. Optional receipt photos are stored in Google Firebase Storage. Receipt text recognition runs on the device; recognised values are used only after your review. Cost forecasts are calculated from your existing entries.
When you create a shareable payment link for joint horse costs, we store the request, the relevant share, a hard-to-guess link key, status and timestamps. A person with the link sees only the information needed for the request. You can revoke the link. Equinora does not process the payment or receive payment details; authorised users record receipt themselves.
Clubs and stables may record turnout and paddock assignments, courses, lessons, waiting lists, helper roles, attendance, QR check-ins, working time, corrections, compensation rules, bonuses and closed payroll periods. Depending on the workflow, this processes names or user identifiers, roles, assignments, times, status, amounts and change timestamps. The information is visible only to the authorised members and managers of the relevant organisation.
QR and NFC quick actions contain no names or health information. Their stored key points to a prepared action; account, membership and permission are checked again on every use. Security-relevant changes are logged with user ID, action and time.
For a Premium request, we process the billing address, selected tier and order status to perform the contract. Private or Instructor Premium purchased in the app is processed by the Apple App Store or Google Play. We do not receive payment information such as card numbers. We use RevenueCat to manage the active tier and term (see section 5).
If you send a non-binding 3D-print enquiry, we process contact and delivery details, product choice, design requests, optional photos and other information to prepare an offer and fulfil a later expressly confirmed order (Article 6(1)(b) GDPR). Payment details are not collected in the app.
If you report content, we process the reported content, reason, optional comment, name and email address to review the report, confirm receipt, inform those involved and ask follow-up questions where needed.
If you use our electronic withdrawal function, we process your name, contract or order reference, email address and the content, date and time of your declaration to review and handle it and to send the legally required acknowledgement (Article 6(1)(c) GDPR in conjunction with section 356a BGB and Article 6(1)(b) GDPR).
An individual Equinora account may be registered from age 16. Younger people may not create their own account. A responsible organisation may process data about minor members only with a suitable legal basis and the required information or consent.
For secure operation, technical support and preventing misuse, specially authorised operator administrators may access limited overviews in an internal, non-public tool. They include account and membership status, name and email address, aggregated activity information, club and stable assignments, basic horse data and profile, horse or content images displayed in the app. Images are reviewed only when there is a reason or through proportionate spot checks.
Private horse documents, invoice and payment files, support attachments, message content and sensitive health or feeding notes are not displayed in this moderation overview. No automated facial or content analysis takes place. Access is purpose-limited and based on Article 6(1)(f) GDPR.
If you allow push notifications, we store a device token to deliver messages about bookings, events, emergency alerts or news. You can disable push messages in the app or system settings; categories and quiet times can be configured in the app.
For a support request, we process your message, email address and technical context such as the app version so that we can respond.
For the newsletter, we process your email address using double opt-in and store the registration and confirmation time as evidence. Delivery uses our Google Firebase and Strato infrastructure; there is no separate newsletter provider. You can unsubscribe through the link in each message or by emailing support@equinora-app.com.
If your organisation uses the web portal, we process member records, category and status, fee plans, invoices and receipts, payment and reminder status and cash-book postings. SEPA direct debits involve mandate details and IBAN/BIC. The IBAN is stored encrypted, is accessible only to authorised roles and access to financial information is logged.
In the personal member area, you can maintain contact details, retrieve your invoices and donation receipts as PDFs and request termination of membership. If you provide a SEPA mandate there, we process the account holder, IBAN and optional BIC; the IBAN is encrypted immediately and only its last four characters remain visible. For sensitive areas, the organisation may require a short-lived email code that is stored only in hashed form. Portal sessions end after 30 minutes of inactivity.
If you activate a digital membership card, we create a publicly accessible page behind a hard-to-guess link showing your name, organisation, membership number and validity, but no contact or financial information. Publication takes place only with your consent and can be disabled at any time. The same applies to an intentionally shared public horse emergency profile.
For a public membership application without an account, we process name, email address and optional phone number and message to take steps towards membership on behalf of the organisation. To prevent misuse, we briefly store a hashed value derived from the IP address; the IP address itself is not stored in the application.
The AI help assistant and AI-assisted reminder-text preview are currently disabled. While disabled, no questions, chat histories, reminder stages or help text are sent to DeepSeek. Before any future reactivation, we will reassess the scope, data minimisation, legal basis and international transfer and update this policy where required.
Equinora is a community app. Your name, profile photo, bookings, event registrations and organisational assignments are visible to other members where required for shared organisation. Depending on their role, managers see additional administrative information.
The relevant club or stable is normally the controller for administrative, work, attendance and finance data in the portal or organisation area. PrismaWorks processes this information as processor under Article 28 GDPR. Financial information is visible only to specifically authorised roles. Details are set out in the Data Processing Agreement.
In the free personal tier, we show advertising through Google AdMob. Only active Private Premium removes ads from the personal account; Organisation Premium does not change a member's personal advertising status.
The app obtains privacy choices through Google UMP and requests ads only when the choice and region permit it. Depending on your choice, Google may deliver personalised, non-personalised or limited ads. Advertising ID, IP address, device information, interactions and an approximate location inferred from the IP may be processed. The choice can be changed under Settings → Advertising. Where consent is required, the basis is Article 6(1)(a) GDPR; limited technically necessary processing relies on Article 6(1)(f) GDPR.
Voluntary crash reporting is off by default. With consent, error message, stack trace, app and device version and an anonymous user identifier are stored in our Firebase environment, but not your name, email address or content. Reports are deleted after no more than 90 days.
The website uses necessary cookies and other cookies only after consent under section 25 TDDDG. “eq_consent” stores your choice for six months. After statistics consent, “eq_vid” stores a random pseudonymous identifier for six months.
For consented self-hosted reach measurement, we store page path, referrer, time zone, language, device type, pseudonymous identifier and time in Google Firestore in the EU. We do not store the IP address or use geolocation; loading the Firebase Web SDK technically transfers the IP address to Google.
The website and portal keep functional settings such as theme, language and tutorial state in browser local storage. They are not used for advertising or analytics and are not sent to us or third parties (section 25(2)(2) TDDDG). You can change your cookie choice at any time through “Cookie settings” in the footer.
Account data is generally stored while your account exists. You can delete it in the app or request deletion through equinora-app.de/konto-loeschen.html. Statutory retention duties remain unaffected. An organisation's commissioned data is deleted or returned according to its instructions and the DPA.
You have rights of access, rectification, erasure, restriction, data portability and objection under Articles 15 to 21 GDPR. You may withdraw consent at any time for the future. Contact support@equinora-app.com. You may also complain to a supervisory authority; our competent authority is the State Commissioner for Data Protection of Lower Saxony, Prinzenstraße 5, 30159 Hanover, Germany.
We update this policy when the app or applicable law changes. The current version is available in the app and at equinora-app.de/datenschutz.html.
To process our organisation invoices we use the invoice recipient, billing address, contact email, organisation, plan, invoice number, amount, payment status and payment or bank booking identifiers. This serves contract performance and statutory retention duties (Article 6(1)(b) and (c) GDPR). For bank transfers we check receipt in our business bank account. Selecting PayPal transmits invoice and transaction information and technical device data to PayPal. Its button is loaded only after an explicit click. PayPal processes payment data under its own privacy policy; Equinora does not store PayPal passwords or full card details. Private payment links grant access to the invoice and must remain confidential; only the link hash is stored in the invoice database. Short-lived hashed IP identifiers that change daily protect against misuse. Invoice and payment evidence subject to mandatory retention remains stored for the statutory periods.
For portal orders we also store the account ID, organisation admin association, chosen language, version, contents and acceptance time of the order terms, and declared authority to order. Website registration creates a shared app account, not paid Premium or automatically approved organisations. Processing serves contract performance, proof of the order and protection against unauthorised orders.
PayPal privacy policy