Privacy Policy

Last updated: April 26, 2026

The Equora mobile app and web platform collect ONLY the data listed below. We believe in transparency and minimizing the data footprint required to deliver our service.

1Who we are

Equora is a stable management platform for equestrian sports — riders book lessons, coaches manage schedules, stable owners run their facilities. Operated by [legal entity name + jurisdiction].

Contact: privacy@equorariding.com

2Data we collect and why

Data Collected Used for Linked to user
Email addressYesAccount, login, supportYes
Phone numberYesAccount, OTP loginYes
NameYesAccount displayYes
User ID (server-side)YesApp functionalityYes
Photos (profile + horse photos)YesApp functionalityYes
Device push token (FCM)YesPush notificationsYes
Crash diagnostics (Sentry)YesDebugging, fix bugsNo (anonymised)
Performance diagnostics (Sentry)YesApp performanceNo

We do NOT collect: location, browsing history, contacts, health/fitness, financial data, advertising identifiers. We do not track users across apps or websites.

3Third parties

  • Firebase Authentication (Google) — phone OTP and email magic-link login
  • Firebase Cloud Messaging (Google) — push notifications
  • Sentry — anonymous crash + performance reports
  • Tap Payments (when payments are enabled) — handled by Tap directly; we receive only a transaction reference

4How we store data

  • All traffic over HTTPS with HSTS
  • Passwords stored as bcrypt hashes
  • Auth tokens (JWT) signed and short-lived; refresh tokens stored as SHA-256 hashes
  • Hosted on Railway (EU/US regions)
  • Database backups retained 30 days

5Account deletion

Users can delete their account from the app's Settings → Delete Account. On deletion, personal data (email, phone, name, photo, etc.) is removed from our database within 30 days. Anonymised historical booking records are retained for accounting and legal obligations.

6Data subject rights (GDPR / CCPA)

Users have the right to access, correct, delete, or export their data. Email privacy@equorariding.com with the request and we'll respond within 30 days.

7Children's privacy

Equora is not directed at children under 13. We don't knowingly collect data from children under 13. If you believe a child has provided us data, contact privacy@equorariding.com and we'll delete it.

8Changes to this policy

We'll update the "Last updated" date and, for material changes, notify users via email or in-app notice.

9Contact

  • privacy@equorariding.com for privacy questions
  • support@equorariding.com for general support