BluBelt Privacy Notice

Last updated: November 6, 2026

About this notice

This notice covers one thing: the BluBelt app for Android (package com.aunova.blubelt). BluBelt logs your martial arts training and shows your progress on the belt system. This notice explains what happens to data when you use it. It covers both Aunova companies involved in the app.

It does not cover the rest of aunova.net, which has its own privacy policy, or the BluBelt web app.

The short version:

  • Your training log stays on your phone. It is never sent to us or to anyone else.
  • We have no account, no sign-in, no cloud, no analytics and no crash reporting of our own.
  • The free version shows a Google ad only if you agree. If you say no, no ad is requested. If you say yes, Google's ad software collects data for the ad, and this notice says what.
  • Neither Aunova company receives anything about you from the app. Aunova Technologies Ltd sees only Google's overall ad reports, such as how many ads were shown, which do not identify you.

Who is responsible, and how to reach us

Two Aunova companies are involved in BluBelt.

Aunova OÜ, Ahtri tn 12, 15551 Tallinn, Harju maakond, Estonia (registry code 16837438, VAT: EE102670613). Aunova OÜ makes BluBelt and publishes it on Google Play. It decides how Google's ad software is built into the app and when the app asks for consent. It is also responsible for the purchase, the order records and the emails you send us.

Aunova Technologies Ltd, GA-00-SZ-L1-RT-164, Level 1, Gate Avenue - South Zone, Dubai International Financial Centre, Dubai, United Arab Emirates (DIFC licence CL13718). The ads in the free version run under Aunova Technologies Ltd's Google AdMob account. It sets up Google's consent form and receives the ad revenue.

Both companies are responsible for the ads. You can contact either of them about the ads, and exercise your rights against either of them.

You can reach both companies by email at chris@aunova.net, or by post at either address above.

Neither company has appointed a Data Protection Officer. Data protection is handled internally, and the email address above reaches the person responsible for it at both companies.

Your training log stays on your phone

BluBelt saves what you enter in a database in the app's own storage on your phone: each training session (its date and the martial art), your list of martial arts and your Sessions per stripe setting.

  • It is never sent anywhere, to us or to anyone else. The app works offline.
  • There is no account, no sign-in and no cloud copy.
  • There is no analytics and no crash reporting of our own.
  • Clear All Data in Settings deletes your sessions, resets the list of martial arts and sets Sessions per stripe back to 40. Uninstalling the app deletes your log from your phone. A file you exported is yours and stays where you put it.

Because we hold no copy, we cannot restore your log if you lose your phone or clear the app. Pro users can make their own backup, as described below.

Backup and restore (Pro)

With Pro, Export Data writes your sessions, your martial arts list and your Sessions per stripe setting to a file, and Import Data reads such a file back. Both use Android's own file picker, so you choose where the file goes and which file to read. The app sees only the one file you pick.

The file is plain text (JSON): each session's date, martial art and a random ID the app gave it, your list of martial arts and your Sessions per stripe number. It is not encrypted.

If you save the file to a cloud folder, such as Google Drive, that service stores it under its own privacy policy. We never receive the file.

Permissions

BluBelt never asks you to grant a permission. It needs none of the ones Android prompts for: no location, no contacts, no files, no phone state. The file picker for backup and restore works without one.

The app does declare permissions that Android grants without asking. BluBelt's own code declares two of them; Google's ad, consent and billing software and Android's support library add the rest. None of them is for anything the training log does:

  • Internet and network state, to fetch an ad and the consent form, and for Google's other software in the app.
  • Advertising ID and Android's ad services (ad ID, attribution and topics), because Google's ad software uses them.
  • Google Play Billing, for the Pro purchase.
  • Wake lock and foreground service, which Google's software declares for its own background work.
  • Private receivers (a permission named after the app), which Android's support library declares so that only BluBelt itself can send messages to its own internal parts. Android never shows it to you, and it gives no other app access to anything.

Ads in the free version

The free version can show one banner ad at the bottom of the screen, and only if you have agreed (see Consent for ads). The ad comes from Google AdMob, through the Google Mobile Ads SDK, and runs under Aunova Technologies Ltd's AdMob account. If you have not agreed, no ad is requested.

BluBelt's own code makes no network call. Only Google's software inside the app uses the network: the ad software with its consent form, Google Play's purchase library, and the libraries that come with them. Some of it does so whether or not you agree to ads. Each time the app starts, it asks Google Play whether your Google account owns Pro. Unless Google Play has already confirmed that it does, Google's consent tool also checks with Google whether it needs to ask you. Neither check carries anything from your training log. From version 1.0.2 of the app, Google's ad software is set to wait with its own app measurement until BluBelt starts the ad software, which it does only after you agree.

Once you have agreed, Google states that its Mobile Ads SDK collects and shares the following data automatically, for advertising, analytics and fraud prevention:

  • IP address, which may be used to estimate the general location of your device.
  • Product interactions, such as app launches, taps and video views.
  • Diagnostic information about how the app and the SDK perform, such as app launch time, hang rate and energy usage.
  • Device and account identifiers: the Android advertising ID, the app set ID and, where applicable, other identifiers related to accounts signed in on the device.

Google states that this data is encrypted in transit. The source is Google's own data disclosure for the Mobile Ads SDK, which Google keeps up to date.

Your training log is never part of the ad request. We do not pass Google any data of our own.

Google uses the data it collects through its SDK under its own rules, and for AdMob it acts as an independent controller. Google may process this data outside your country, including in the United States. See Google's privacy policy and how Google uses information from sites or apps that use its services.

Consent for ads

In the free version, BluBelt asks for your consent through Google's consent form, from Google's User Messaging Platform. It includes a Do not consent option. No ad is requested unless you agree; if Google's form has not been shown to you, or you did not agree, the app requests no ads at all.

If you say no, you see no ad and the app works exactly the same.

What is saved on your phone. Google's consent tool saves your answer in BluBelt's own storage on your phone, in the standard format of the IAB Transparency and Consent Framework. It does this so that you are not asked every time you open the app, and so that Google's ad software can read what you allowed it to do. Your answer is not sent to us.

Changing your mind. Where Google's consent tool says one is required, Settings has a Privacy options button. It reopens Google's consent form, so you can change your answer or withdraw consent at any time. If you withdraw consent, you stop seeing the ad: from then on, no ad is requested. Withdrawing does not affect what happened before. From version 1.0.2 of the app, BluBelt requests an ad only while that button is in Settings, so anyone who can see an ad can withdraw from there. If Google's consent tool stops showing the button, for example because you are now in another country, BluBelt stops requesting ads.

You can also:

  • Reset or delete your advertising ID with the ad ID controls in your phone's Android settings. This works for every app on the phone, not just BluBelt.
  • Buy Pro, described below. When Google Play confirms, as the app opens, that the purchase is on your Google account, BluBelt neither shows the consent form nor starts the ad software. If Google Play has not answered within about three seconds of the app opening, BluBelt treats that session as the free version. On such a start a buyer can still see the consent form and, after agreeing, the ad.

The Pro purchase

A one-time in-app purchase, Pro, removes the ad and unlocks backup and restore. "Restore purchase" in Settings brings it to another device signed in to the same Google account.

The purchase runs through Google Play Billing. Google handles the payment. We never see your card or any other payment details.

The app reads from Google Play only what it needs: whether Pro is on sale to this Google account, whether this account owns it and whether that purchase has already been confirmed to Google Play, and the purchase token Google uses to identify the purchase. The app uses that token only to confirm the purchase to Google Play. It is not sent to us.

Aunova OÜ, as the Google Play developer, can see an order record for each sale in Google Play Console. Google decides what it contains. It includes an order number, the date, the product, the price and tax, and the buyer's country, and in some cases the region and postcode. Aunova OÜ uses it only for its accounts.

See the Google Play Terms of Service and Google's privacy policy.

Links that leave the app

Some things in BluBelt open a web address. Tapping one hands that address to your browser and leaves BluBelt. From there, the site you visit and its own privacy policy apply. Nothing from your training log goes with the link.

  • The footer links open our Terms of Service and this notice on aunova.net.
  • The banner ad, in the free version, opens whatever the advertiser's link points to. That link is not ours. What Google's ad software sends with the tap is covered by Google's policies above, and the advertiser's site has its own.

Our lawful basis

  • Your training log involves no processing of personal data by us. It stays on your phone and we never receive it. It leaves your phone only if you move it yourself, for example as a file you export with Pro.
  • Ads. Consent is the only basis, for every user. Aunova OÜ and Aunova Technologies Ltd rely on your consent for having the ad software store and read information on your phone, and collect your data and send it to Google: GDPR Article 6(1)(a), and the consent rules for information stored on your device. For Aunova Technologies Ltd, this is also consent under Article 10(a) of the DIFC Data Protection Law 2020. No ad is requested without your consent, and you can withdraw it at any time (see Consent for ads). Google relies on its own lawful bases for what it does with the data afterwards; see Google's privacy policy.
  • The purchase. Aunova OÜ handles the purchase status so that Pro works, because that is necessary to give you what you paid for: Article 6(1)(b). Keeping order records for its accounts is a legal obligation: Article 6(1)(c).
  • If you email us, the company you write to uses your message to answer it, on the basis of its legitimate interest in replying to you: Article 6(1)(f).

Neither company makes any decision about you automatically.

How long we keep it

Neither Aunova company receives any data about you from the app, so neither keeps any.

  • Your training log stays on your phone until you delete it, clear BluBelt's storage or uninstall the app. A file you exported stays where you put it.
  • Your answer about ads stays on your phone until you change it, clear BluBelt's storage or uninstall the app.
  • Order records stay in Google Play Console. Aunova OÜ keeps them for as long as accounting law requires.
  • Emails you send us are kept until your question is settled, and then deleted.

What Google keeps from its ad software and from Google Play is set by Google's policies, linked above.

Your rights

You have the following rights over any personal data we hold about you. Exercising any of them is free, and you never have to justify asking.

  • Access to the data and a copy of it. GDPR Article 15.
  • Rectification of inaccurate data. Article 16.
  • Erasure of your data. Article 17.
  • Restriction of what we do with it. Article 18.
  • Portability of the data you gave us. Article 20.
  • Objection to processing based on our legitimate interest. Article 21.
  • Withdraw consent at any time, without affecting what was done before. Article 7(3). For ads, see Consent for ads above.
  • Complain to a supervisory authority, and seek a remedy in court. See below.

Because the app sends us nothing, we usually cannot link any data to you from BluBelt alone. Your training log is on your phone and under your control. The data the ad software collects is held by Google; to exercise your rights over it, use Google's own tools, described in Google's privacy policy.

To ask us, email chris@aunova.net or write to either postal address above. For the ads, you can ask either company. You do not need to cite a law or fill in a form. We answer without undue delay and within one month of receiving your request. If a request is complex, or we receive many, we may extend that by up to two further months. If we do, we tell you within the first month, and why (GDPR Article 12(3)).

Complaining to a supervisory authority

We would rather hear from you first, but you do not have to come to us at all. You can complain to the data protection authority of the country where you live, where you work, or where you think the problem happened, and you may seek a remedy in court.

The authority for Aunova OÜ is the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon), Tatari 39, 10134 Tallinn, Estonia. Telephone +372 627 4135. Website www.aki.ee.

Aunova Technologies Ltd is also subject to the DIFC Data Protection Law 2020, and you can complain about it to the DIFC Commissioner of Data Protection, Dubai International Financial Centre, Dubai, United Arab Emirates. Website difc.com.

Children

BluBelt is not directed at children.

Changes to this notice

We update this notice when what the app does changes, and the version and date change with it. If a new version of the app sends anything new off the phone, this notice changes first.

Version and effective date

Version BB-PRIVACY-v1.5, in force from 6 November 2026.

  • 1.5 says that from version 1.0.4 of the app, the list of permissions includes the one Android's support library uses to keep the app's internal parts private.
  • 1.4, 4 November 2026, said that from version 1.0.2 of the app, BluBelt requests an ad only while the Privacy options button is shown, and that Google's ad software is set to wait with its own app measurement until the app starts it; and it added the Sessions per stripe setting to what the app saves, what Clear All Data resets and what an exported file contains.
  • 1.3 says that the app also reads from Google Play whether a purchase has already been confirmed to Google Play, and that the permissions for the internet and network state are also used by Google's other software in the app.
  • 1.2 says that uninstalling the app does not delete a file you exported, that your log leaves your phone only if you move it yourself, that some of Google's software in the app contacts Google whether or not you agree to ads, which article of the DIFC law the consent for ads rests on, what the app reads from Google Play, how long your answer about ads is kept, and that an exported file is not encrypted.
  • 1.1, published on 2 November 2026 but wrongly dated 3 November, corrected three statements: which parts of the app use the network, when Settings shows the Privacy options button, and the name of the Restore purchase button.
  • 1.0, 2 November 2026, was the first version. Its Permissions section was reworded twice that day without a new version number. The reworded list is the one on this page.

This notice is pending review by qualified counsel. It is not legal advice.