Sospita Software Privacy Policy

SOSPITA YAZILIM LIMITED ŞİRKETİ (“Sospita”, “Sospita Software”, “we”, “us”, or “our”) develops and provides enterprise platforms, business applications, professional mobile applications, and consumer software.

We are committed to protecting personal data and designing our services with privacy, security, responsible use of artificial intelligence, and confidentiality in mind.

This Privacy Policy explains how personal data may be collected, used, stored, disclosed, and protected when you use Sospita websites, applications, platforms, and related services.

Depending on the service and the circumstances, Sospita may act as a data controller, a data processor/service provider acting on behalf of an organization, or may provide applications in which certain information remains stored locally on the user’s device.

This Policy is intended to support compliance with applicable privacy legislation, including the Turkish Personal Data Protection Law No. 6698 (“KVKK”) and, where applicable, the EU General Data Protection Regulation (“GDPR”).

1. Services Covered by This Policy

This Privacy Policy applies to Sospita-operated websites and current or future Sospita software products, including, where applicable:

• Sospita SafeGuard

• Sospita HSE Platform and its modules

• Sospita Risk Assessment

• My Checklists

• Sospita Athletic Performance

• Huner

• other applications and services released by Sospita Software that reference this Privacy Policy

Individual products may provide additional privacy notices where a particular feature, integration, or category of information requires more specific explanation.

Separate Terms of Use may apply to each product.

2. Our Role in Processing Personal Data

2.1 When Sospita Acts as a Data Controller

Sospita generally acts as a data controller when we determine why and how personal data is processed, including for:

• visitors to our corporate website;

• people who contact us;

• demo and information requests;

• customer and prospective-customer administration;

• billing and subscription administration;

• direct users of Sospita applications where Sospita determines the processing purposes;

• account security and fraud prevention;

• product administration and support;

• service improvement where permitted by law;

• legal and regulatory compliance.

For some direct-to-consumer products, including individual use of sports or professional applications, Sospita may therefore act as the controller of account and cloud-service information.

2.2 When Sospita Acts as a Processor

Where an organization such as an employer, club, academy, contractor organization, or other customer uses a Sospita service to manage its users or operational records, the organization will generally determine:

• whose personal data is entered;

• which information is collected;

• why it is processed;

• who may access it;

• how long it should be retained.

In those circumstances, the customer organization generally acts as the data controller and Sospita acts as a data processor, processing the information according to the customer’s instructions and the applicable agreement.

Examples may include:

• Permit to Work records;

• observations and safety records;

• risk assessments;

• incident investigations;

• contractor and personnel records;

• audit records;

• club membership records;

• athlete records managed by a club;

• attendance and training records;

• club-administered performance measurements.

Where Sospita acts only as a processor, the customer organization is responsible for establishing the applicable legal basis for processing and for providing required notices to individuals.

2.3 Local-First Applications

Some Sospita applications are designed so that some or all user-created information is stored locally on the user’s phone or tablet.

Depending on the application and features enabled, this may include:

• risk assessments;

• checklists;

• audit records;

• photographs;

• signatures;

• evidence;

• locally stored templates;

• assessment history.

Where information remains only on the device and is not transmitted to Sospita, Sospita does not receive or control that content.

Information may nevertheless leave the device when the user deliberately:

• exports or shares a report;

• creates a backup;

• uses a cloud feature;

• submits information to support;

• enables an online or AI-supported feature.

The application will determine which of these capabilities are available.

3. Categories of Personal Data

The information processed depends on the Sospita product used.

3.1 Account and Identification Information

We may process information such as:

• name and surname;

• email address;

• account identifier;

• organization or club affiliation;

• role and permissions;

• preferred language;

• profile information;

• authentication and account-security information.

3.2 Organizational and Operational Records

Enterprise and professional applications may process information contained in business records such as:

• Permit to Work records;

• approvals and workflow actions;

• observations;

• risk assessments;

• incident and investigation records;

• findings and corrective actions;

• contractor information;

• competency information;

• audit records;

• checklists;

• comments and notes;

• photographs and attachments;

• signatures where enabled;

• activity and audit logs.

The contents of such records are generally determined by the organization or user creating them.

3.3 Sports, Training and Performance Information

Sports and performance services may process:

• training programmes;

• scheduled activities;

• attendance;

• completed workouts;

• exercise results;

• progress information;

• performance measurements;

• club or team membership;

• coach-athlete relationships;

• match or game statistics;

• athlete statistics;

• training history;

• performance goals.

Performance parameters may vary depending on the sport, club, coach, or individual user.

3.4 Health, Wellness and Injury Information

Where specifically enabled by the user or customer, certain sports features may process health or wellness-related information, including:

• height and weight;

• injury information;

• injury status and history;

• activity data;

• sleep information;

• energy or calorie information;

• wellness indicators;

• recovery-related information;

• other health or fitness information entered by the user or authorized organization.

Such data may qualify as special-category personal data under GDPR or special categories of personal data under KVKK and will be processed only where an appropriate legal condition applies.

Health data receives enhanced legal protection under applicable privacy laws.

We do not assume that all information entered into a sports application is non-medical. Injury or health-related information may be legally treated as health data depending on its content and context.

3.5 Apple Health and Health Connect Information

Where supported and enabled, Sospita Athletic Performance may request permission to read limited health and fitness information through Apple HealthKit or Android Health Connect.

The currently supported information includes:

• sleep information; and

• total calories or energy used.

Access is optional, permission-based, and controlled through the user’s device settings.

The underlying numerical sleep and calorie/energy values are processed on the user’s device. They are not transmitted to Sospita’s backend, stored in the Sospita database, or sent to Sospita’s AI service provider.

The application may derive limited categorical indicators from these values, such as sleep trend, sleep consistency, recovery state, burn trend, source and coverage information. These derived indicators do not contain the underlying numerical health values.

Derived indicators may be transmitted to Sospita’s backend and stored as part of daily coaching records and monthly athlete evaluation records. They are used by Sospita’s application logic to support features such as Recovery & Readiness information.

These health-derived indicators are not sent to OpenAI as part of Athletic Performance AI prompts.

Users can enable or revoke access to health information through their device settings.

Sospita does not use health or fitness information obtained through HealthKit or Health Connect for advertising or marketing.

3.6 Uploaded Content

Depending on the product, users may provide:

• photographs;

• videos;

• documents;

• evidence;

• signatures;

• training materials;

• programme content;

• profile images;

• other user-generated content.

Users and customer organizations are responsible for ensuring that they have the authority to upload personal data relating to other individuals.

3.7 Technical and Security Information

When online services are used, we may process technical information such as:

• IP address;

• browser and device type;

• operating system;

• application version;

• login and authentication events;

• timestamps;

• security events;

• diagnostic information;

• crash and error information;

• performance logs;

• request metadata.

This information is used primarily to operate, protect, troubleshoot, and improve our services.

3.8 Subscription and Transaction Information

We may process information relating to:

• subscription status;

• purchased products or modules;

• subscription tier;

• transaction references;

• entitlement status;

• billing contact information;

• renewal or expiration status.

Purchases made through Apple App Store or Google Play are processed by the relevant platform.

Sospita generally does not receive the user’s full payment-card details from those platforms.

Other payment or entitlement service providers may be used where specified for the relevant service.

3.9 Website and Communication Information

When you use our website or contact us, we may process:

• contact details;

• company information;

• demo requests;

• support correspondence;

• information included in messages;

• website security and anti-abuse information;

• limited analytics information.

4. Purposes of Processing

Depending on our role and the relevant service, personal data may be processed to:

• provide and operate Sospita services;

• create and administer accounts;

• authenticate users;

• manage access and permissions;

• deliver customer-requested workflows;

• maintain records and audit trails;

• provide training and performance functionality;

• generate reports;

• support subscription and entitlement management;

• respond to support requests;

• prevent misuse, fraud, and security incidents;

• diagnose technical problems;

• maintain service reliability;

• improve functionality;

• comply with legal obligations;

• establish, exercise, or defend legal claims;

• provide AI-assisted functionality where enabled.

We do not sell personal data.

5. Artificial Intelligence

Certain Sospita products may include AI-assisted functionality.

Examples may include:

• review of safety-related content;

• identification of possible omissions or inconsistencies;

• coaching suggestions;

• performance insights;

• athlete evaluation reports;

• incident-analysis support;

• summarization or structured recommendations.

Depending on the product and feature, AI processing may use information supplied by the user or organization, such as:

• workflow content;

• observations;

• incident information;

• workout information;

• performance measurements;

• attendance;

• statistics;

• injury or wellness information where specifically enabled and legally permitted.

For Sospita Athletic Performance, AI coaching and athlete evaluation requests may include app information such as schedules, attendance, training adherence, fitness goals, performance measurements, game statistics, sport, position, age or age group and sex, and, where recorded in the app, nutrition logs and active injury information. These requests do not include sleep or calorie/energy information obtained through Apple HealthKit or Android Health Connect, or the health indicators derived from that information.

Where an AI feature requires information to be processed by an external AI service provider, Sospita may transmit the information necessary to provide that feature.

Relevant service providers and applicable transfer arrangements are identified where appropriate in our Subprocessor and Service Provider information.

Sospita’s design principle is:

“AI assists; people decide.”

AI output is intended to support users and professionals. It is not intended to replace professional judgment.

In particular:

• AI does not make final Permit to Work approvals;

• AI does not independently make final safety decisions;

• AI coaching output is not medical diagnosis or medical treatment;

• AI-generated athlete evaluation is intended as decision support for the athlete or coach;

• AI-generated output should be reviewed before being relied upon for important decisions.

We do not use AI output as the sole basis for decisions producing legal or similarly significant effects on an individual.

Sospita AI integrations are designed not to create a persistent AI profile of the user.

AI requests are intended to contain only information required for the requested feature and, where applicable, limited prior AI-generated context. Sospita does not use AI provider-side conversation history or previous-response chaining for these requests.

6. Legal Bases for Processing

Where GDPR applies and Sospita acts as a controller, processing may rely on one or more of the following:

• performance of a contract;

• compliance with a legal obligation;

• legitimate interests, where those interests are not overridden by the individual’s rights;

• consent, where required;

• another lawful basis permitted by applicable law.

Where special-category data such as health information is processed, an additional lawful condition applicable to special-category processing must also apply.

Where KVKK applies, personal data and special-category personal data are processed in accordance with the applicable conditions under Law No. 6698.

Where Sospita acts as a processor, the customer organization is responsible for determining the lawful basis for the underlying processing.

7. Clubs, Employers and Other Organizations

If you use a Sospita service through an employer, club, academy, school, contractor organization, or other customer:

• that organization may create or manage your account;

• it may determine which information is collected;

• authorized administrators may access information associated with your account;

• the organization may determine retention periods and access rights;

• requests concerning organization-controlled data should ordinarily be directed to that organization.

Sospita supports customer organizations in responding to applicable data-subject requests where required by law and contract.

8. Children and Young Athletes

Some sports or club-management services may be used by clubs or academies that include younger athletes.

Where a club, academy or other organization manages a young athlete’s account, that organization is responsible for ensuring that it has an appropriate legal basis, authority, and any required parental or guardian authorization for the information it submits.

Sospita Athletic Performance includes functionality that allows organizations to record parent or guardian information and, where appropriate, parental/guardian consent.

Sospita provides this functionality on behalf of the relevant organization and does not independently verify every organization-managed parental consent.

Where Sospita directly determines the processing purposes for a child’s account, applicable legal requirements concerning parental or guardian authorization will apply.

9. Sharing of Personal Data

We may share personal data only where necessary and lawful, including with:

• customer organizations administering the relevant service;

• authorized users within those organizations;

• hosting and infrastructure providers;

• database and storage providers;

• authentication providers;

• email and notification providers;

• payment and subscription platforms;

• customer-support providers;

• analytics and security providers;

• AI service providers where an AI feature is used;

• professional advisers;

• authorities where required by law.

We require service providers acting on our behalf to process personal data only for authorized purposes and subject to appropriate contractual safeguards.

We do not sell personal data or health data to advertising platforms or data brokers.

10. Data Hosting and International Transfers

Application and service data hosted by Sospita is stored in EU regions.

Sospita operates from Türkiye and may use service providers with operations, support functions, affiliates or subprocessors in other jurisdictions.

Where personal data is transferred internationally, we use a lawful transfer mechanism applicable to the circumstances.

For transfers subject to GDPR, this may include:

• an adequacy decision;

• Standard Contractual Clauses;

• another lawful safeguard or applicable derogation.

For transfers subject to KVKK, transfers are handled under Article 9 of Law No. 6698 and applicable regulations, including adequacy mechanisms, appropriate safeguards such as standard contracts, or applicable statutory exceptions.

Current service providers and relevant processing information are maintained separately in our Subprocessor and Service Provider List.

11. Data Storage and Retention

We retain personal data only for as long as reasonably necessary for the relevant purpose, taking into account:

• contractual obligations;

• customer instructions;

• account status;

• legal and regulatory requirements;

• safety or audit requirements;

• dispute-resolution needs;

• backup and disaster-recovery periods.

Retention varies by product and category of information.

Examples include:

• organization-controlled data retained according to the applicable customer agreement or customer instruction;

• direct-user account information retained while the account remains active and for a limited period afterward where necessary;

• financial and transaction records retained as required by applicable tax and accounting law;

• support correspondence retained for a reasonable support and audit period;

• security logs retained for a period proportionate to their security purpose.

For local-first applications, information stored solely on the device remains subject to the user’s own deletion, backup, and device-management choices unless a cloud feature is enabled.

More specific retention schedules may be provided in product notices or customer agreements.

12. Data Security

Sospita uses technical and organizational safeguards designed to protect personal data against:

• unauthorized access;

• disclosure;

• alteration;

• destruction;

• loss;

• misuse.

Measures may include, depending on the system:

• encrypted network communications;

• access controls;

• role- and permission-based authorization;

• authentication safeguards;

• tenant separation;

• logging and monitoring;

• secure development practices;

• backups and recovery mechanisms;

• restricted administrative access.

No system can guarantee absolute security, and security controls evolve as technology and risks change.

13. Data Breaches

Where Sospita acts as a processor and becomes aware of a personal-data breach affecting customer-controlled information, we will notify the relevant controller without undue delay, in accordance with applicable law and contractual obligations.

Where Sospita acts as a controller, we will make required notifications to competent authorities and affected individuals in accordance with applicable law.

14. Cookies and Website Analytics

Our corporate website uses:

• strictly necessary technologies to deliver and secure the website, protect forms against spam and automated abuse, and remember your privacy choice in your browser’s local storage;

• optional first-party analytics, used only if you allow it, to measure campaign page views, store and download clicks and form submissions;

• campaign attribution, used only if you allow analytics, which keeps the campaign source of your visit (UTM parameters, landing page and referring domain) in session storage for the current browser tab and attaches it to analytics events and form submissions.

Optional analytics is stored by Sospita in its own database without IP addresses, browser user agents or persistent visitor identifiers, and is not used for advertising or cross-site profiling. Your form submissions are delivered whatever your analytics choice.

If your browser sends a Global Privacy Control or Do Not Track signal, optional analytics and campaign attribution remain off.

You can change your choice at any time on our Privacy Settings page. Details of the cookies and browser storage we use, and how long they are kept, are set out in our Cookie & Local Storage Notice.

15. Your Privacy Rights

Depending on applicable law, individuals may have rights to:

• know whether personal data is being processed;

• access personal data;

• obtain information about processing purposes;

• correct inaccurate or incomplete information;

• request deletion or destruction;

• restrict processing;

• object to certain processing;

• receive portable data where applicable;

• withdraw consent where processing depends on consent;

• object to certain solely automated decisions;

• complain to an applicable supervisory authority.

Where the relevant data is controlled by your employer, club, academy, or another organization, please contact that organization first.

We will assist the organization where required.

Instructions for submitting an account or personal-data deletion request are available on our Account & Data Deletion Requests page.

16. Managing Health and Device Permissions

Permissions for Apple HealthKit and Android Health Connect can be managed through the relevant device settings.

Sospita Athletic Performance accesses supported health information only where the user grants the required device permission.

Currently, supported device-health information is limited to sleep information and total calories or energy used.

The underlying numerical values remain on the user’s device and are not stored in the Sospita database or transmitted to OpenAI.

The application may calculate limited non-numeric indicators, such as sleep trend, sleep consistency, recovery state and burn trend. These derived indicators may be sent to Sospita’s backend and retained as part of daily coaching records and monthly athlete evaluation records.

Revoking device permission prevents future access to the affected health information. Previously created derived coaching or evaluation records may remain subject to the applicable retention policy.

17. Third-Party Platforms and Links

Sospita products may interact with third-party services such as:

• Apple App Store;

• Google Play;

• Apple HealthKit;

• Android Health Connect;

• payment or entitlement services;

• authentication services;

• external links chosen by users.

Those providers may process information independently under their own privacy policies.

Maps and site location services. Certain Sospita SafeGuard features use Google Maps Platform to allow authorised users to select, save and display the location of operational sites and related records, and to support address or place search where enabled. Sospita does not use Google Maps for continuous tracking of users’ location. When Google Maps features are used, the user’s device connects to Google and Google may receive technical information such as IP address, device/browser information and map or search requests. Google processes this information under its own terms and privacy policy.

Sospita is not responsible for independent processing conducted by third parties outside our control.

18. Changes to This Privacy Policy

We may update this Privacy Policy to reflect:

• new products or features;

• changes to our processing activities;

• changes to service providers;

• changes in applicable law;

• security or operational developments.

The current version will always display its effective date.

Where required by law, we will provide additional notice of material changes.

19. Contact

For privacy questions, requests, or concerns:

SOSPITA YAZILIM LIMITED ŞİRKETİ
Türkiye
Email: info@sospita.io

Where required for formal KVKK requests, additional application methods or company identification details may be published separately.

These Terms of Use (“Terms”) govern use of the My Checklists application (“App”), provided by SOSPITA YAZILIM LIMITED ŞİRKETİ (“Sospita”, “we”, “us”, or “our”). By using the App, you agree to these Terms.

1. Nature of the App

My Checklists is a local-first checklist, inspection and audit application. No Sospita account is required for normal use. User-created records are stored primarily on the device unless the user deliberately exports or shares them.

2. Professional Use

The App may provide checklist templates and professional kits covering areas such as quality, health and safety, environment, information security, construction, suppliers and contractors. These materials are tools for organising audits, inspections and reviews. They are not legal advice, professional certification or a guarantee of compliance. Users remain responsible for determining whether a checklist is suitable for their organisation, jurisdiction, industry and purpose.

3. ISO-Related Kits

Where a Sospita Professional Kit refers to an ISO standard, the kit is independently prepared by Sospita; it is not published, approved or certified by ISO; it does not constitute ISO certification; it does not guarantee conformity with the referenced standard; and it does not replace the authoritative standard or competent professional advice. Users remain responsible for obtaining and applying authoritative standards where required.

4. User-Created Content

Users may create or modify checklists, templates, answers, findings, photographs, supporting documents, signatures and reports. Users retain their rights in their own content and are responsible for ensuring they have the right to include personal, confidential or third-party information in their records.

5. Records and Signatures

The App may lock recorded or completed checklists against further modification as part of its record workflow. Signature functionality is intended for documentation and acknowledgement purposes and is not represented as a qualified or cryptographic electronic signature.

6. Local Data and Backup

The App stores user-created information locally. Loss, reset, corruption or uninstalling the App may result in loss of data. Where backup functionality is available, users are responsible for creating and safely storing appropriate backups. Backup archives may contain confidential or sensitive information and should be protected accordingly.

7. Premium Subscription

The App may offer a Premium subscription that enables additional capacity or functionality such as backup, branding, custom answer sets or advanced reporting. Premium subscriptions purchased through Apple App Store or Google Play may renew automatically under the applicable store terms. Users manage cancellation and subscription settings through the applicable store account. Refunds for store purchases are generally subject to the relevant store rules and mandatory law.

8. Professional Kits

Professional Kits may be sold as one-time, non-consumable purchases. Purchase grants access according to the entitlement rules shown in the App. Where the App requires an active Premium subscription to purchase or use a Professional Kit, ownership of the purchased entitlement may remain associated with the store account while access to use the kit is paused until Premium becomes active again. The applicable purchase conditions should be reviewed before completing a purchase.

9. Reports

PDF, CSV or other reports generated by the App reproduce or summarise information entered by the user. Sospita does not independently verify the accuracy, completeness, legal sufficiency or professional adequacy of user-entered information or generated reports.

10. Intellectual Property

Sospita retains copyright and other intellectual-property rights in the App software, supplied Professional Kits, Sospita-authored templates and checklist content, system content, user interface and documentation, and Sospita trademarks. Purchase of a kit or subscription grants a limited right to use the relevant content through the App. It does not transfer copyright or ownership of Sospita content. Users retain rights in their own original checklists and records.

11. No Guarantee of Certification or Compliance

Use of the App does not guarantee certification, regulatory approval, ISO conformity, successful audit results or compliance with all applicable legal or contractual requirements. Users remain responsible for professional review and final decisions.

12. Availability

Certain subscription or purchase validation functions may depend on third-party stores or network connectivity. Sospita does not guarantee uninterrupted availability of every feature or third-party service.

13. Liability

To the maximum extent permitted by law, Sospita will not be liable for indirect, consequential or special losses arising from professional decisions made using the App or from loss of locally stored data where reasonable backup options were available. Nothing in these Terms excludes rights or liabilities that cannot lawfully be excluded.

14. Privacy

The Sospita Software Privacy Policy describes how Sospita handles information in connection with its products. Information stored solely on the user’s device is not received by Sospita unless deliberately transmitted through an enabled feature.

15. Consumer Rights

Nothing in these Terms excludes or limits mandatory rights available to consumers under Turkish law or other applicable law.

16. Governing Law

These Terms are governed by the laws of Türkiye, subject to mandatory consumer-protection and forum rights.

Contact

SOSPITA YAZILIM LIMITED ŞİRKETİ
Talaytepe Mah. 4035. Sokak
Güneşyapı Sunrise Garden Sitesi H Blok No: 27
21070 Kayapınar / Diyarbakır
Türkiye
Email: info@sospita.io

These Terms of Use (“Terms”) govern use of Sospita Athletic Performance (“Service”), provided by SOSPITA YAZILIM LIMITED ŞİRKETİ (“Sospita”, “we”, “us”, or “our”). The Service supports both individual athletes and clubs or other sports organisations. By creating an account or using the Service, you agree to these Terms.

1. Service

Sospita Athletic Performance provides tools for athletes, coaches and sports organisations. Depending on the account, subscription and enabled modules, functionality may include exercises and workouts, progress tracking, performance measurements, custom performance parameters, schedules and attendance, team and club management, nutrition, injury management, game and athlete statistics, club finance records, member-payment records, progressive and advanced workout functionality, AI-assisted daily coaching and AI-assisted athlete evaluation.

2. Solo Athletes and Club Users

The Service supports individual or solo users and athletes using the Service through a subscribing club or organisation. Where an athlete uses the Service through a club, the club determines the subscribed functionality available to that athlete. Features supplied through a club’s active subscription may be made available to club members without a separate individual purchase.

3. Clubs, Coaches and Administrators

Clubs and other subscribing organisations are responsible for managing members and teams, authorising coaches and administrators, maintaining accurate athlete and organisational information, deciding which modules are enabled, obtaining any required authority to process athlete and minor information, and making final coaching, participation, injury-management and performance decisions. Sospita provides software tools but does not replace the professional responsibilities of a club, coach, trainer, healthcare provider or guardian.

4. Age and Minors

Direct solo use is intended for persons aged 18 or older. A person under 18 may participate through a club, academy or other authorised organisation where appropriate. The organisation is responsible for obtaining any legally required parental or guardian authorisation. The Service may allow authorised club personnel to record guardian information such as name, contact information, relationship and consent status. Sospita provides functionality for recording such information but does not independently verify every parental or guardian consent entered by an organisation.

5. Training and Health Disclaimer

Physical training and sport involve inherent risk. The Service does not provide medical diagnosis, medical treatment, emergency medical services or medical clearance. Users should stop training and seek appropriate professional advice if they experience pain, injury, illness or other concerning symptoms. Athletes, coaches and organisations remain responsible for deciding whether an athlete is medically and physically suitable to participate in training or competition.

6. Injury, Wellness and Nutrition Features

Where enabled, the Service may process injury, wellness, nutrition and related athlete-management information. These features are intended to support training and organisational workflows and do not replace medical, nutritional or other regulated professional advice. Users and organisations remain responsible for obtaining appropriate professional advice where required.

7. HealthKit and Health Connect

Where the user grants device permission, the mobile application may read supported sleep and energy/calorie information from Apple HealthKit or Android Health Connect. Raw numerical health values remain on the user’s device. The application may derive limited non-numeric indicators such as sleep trend, sleep consistency, recovery state and calorie-burn trend. These derived indicators may be transmitted to Sospita and retained as part of coaching or athlete-evaluation records. The underlying raw numerical HealthKit or Health Connect values are not sent to OpenAI as Athletic Performance prompt inputs. Users may revoke device permissions through operating-system settings.

8. AI Daily Coach

The AI Daily Coach may use information such as age or age group, sex, sport and position, schedules, recent activity, attendance, goals, training volume and candidate training plans. AI coaching output is informational and advisory. It is not medical advice and does not replace a qualified coach, healthcare professional or trainer.

9. Monthly Athlete Evaluation

Where the applicable organisation feature is enabled, authorised coaches or administrators may request an AI-assisted athlete evaluation. Inputs may include adherence, attendance, performance measurements, nutrition information, game and player statistics, and active-injury count or affected body regions. Where implemented, identifying information such as name, email address and date of birth is removed before the AI request. The generated report may be stored and may be exportable as PDF. The coach or organisation remains responsible for interpreting the report and deciding whether any recommendation is appropriate.

10. AI Limitations

AI output may be incomplete, incorrect, outdated or unsuitable for a particular athlete. No AI output constitutes medical diagnosis, medical clearance, mandatory training instruction, an autonomous decision concerning an athlete, or a guarantee of performance or injury prevention. Users and coaches must review AI-generated information before relying on it.

AI assists; people decide.

11. Performance Results

Sospita does not guarantee athletic improvement, competition results, fitness gains, injury prevention, weight change or achievement of a specific performance target. Results depend on factors outside Sospita’s control.

12. Club Modules

Optional club functionality may include Nutrition, Injury/Health, Membership, Statistics, Club Finance, Progressive Workouts, Advanced Workouts and AI Athlete Reports. Availability may depend on the club’s subscription, member band and current product configuration.

13. Member Payments and Club Finance

Where the Service records member payments or club-finance information, those records are administrative records unless a separate payment-processing feature expressly states otherwise. Recording a payment does not make Sospita the bank, merchant or payment processor for an external transaction between a club and its member.

14. Subscriptions, Trials and Billing

Subscriptions may be purchased through Apple App Store, Google Play or, for eligible organisations, through direct commercial arrangements such as bank transfer. Store subscriptions may renew automatically according to the relevant store terms. A trial may be offered where displayed during signup or purchase. Club and individual features remain available only while the applicable subscription or entitlement remains active, subject to any grace period shown in the Service.

15. Cancellation and Refunds

App Store and Google Play purchases are subject to the relevant platform’s subscription-management and refund mechanisms and to mandatory law. For directly billed organisational subscriptions, amounts already paid are not automatically refundable after the paid service period begins unless required by law or otherwise agreed in writing.

16. Account Deletion and Retained Records

Where self-service deletion is available to a solo user, deletion may technically involve anonymisation and deactivation rather than immediate physical erasure of every related record. Certain records may be retained where reasonably necessary for subscription or transaction records, finance records, historical training or measurement integrity, organisation-controlled records, or legal, accounting, security or contractual obligations. Club-managed users may need to submit deletion requests through the relevant organisation or administrator. For more information, see the Sospita Software Privacy Policy.

Instructions for submitting an account or personal-data deletion request are available on our Account & Data Deletion Requests page.

17. User and Organisation Content

Users and clubs may create or upload exercises, training plans, videos, photos, announcements, athlete records and other content. Users and organisations retain their rights in their own original content. They are responsible for ensuring they have the authority to upload and use personal, copyrighted, confidential or third-party content. They grant Sospita the limited rights necessary to host, process, transmit, secure and display such content to operate the Service.

18. Sospita Intellectual Property

Sospita retains all rights in the Service software, system exercises, system plans, templates, system goals, user interface, documentation, trademarks and other Sospita intellectual property. No ownership of Sospita software or system content is transferred to the user or organisation.

19. Availability

Cloud functionality depends on network connectivity and supporting infrastructure. Sospita does not guarantee uninterrupted or error-free service. Clubs and users should not rely on the Service as the sole repository for information required for medical emergencies or immediate safety decisions.

20. Organisational Suspension and Termination

Organisation access may be restricted where a subscription expires, remains unpaid beyond an applicable grace period, is cancelled, or where suspension is otherwise permitted under the applicable commercial agreement. Post-termination handling of organisation-controlled data may also be governed by a commercial agreement or DPA.

21. Liability

For B2B use and to the maximum extent permitted by law, Sospita will not be liable for indirect, consequential, special or loss-of-profit damages arising from use of the Service. Unless otherwise stated in a signed B2B agreement, Sospita’s aggregate contractual liability to an organisation will not exceed the fees paid or payable by that organisation for the Service during the 12 months preceding the event giving rise to the claim. For consumers, nothing in these Terms excludes or limits mandatory rights or liabilities that cannot lawfully be excluded.

22. Privacy

Personal data is handled in accordance with the Sospita Software Privacy Policy. Current service providers may be described separately in Sospita’s Subprocessors and Service Providers information.

23. Consumer Rights

Nothing in these Terms excludes or limits mandatory consumer-protection rights available under Turkish law or other applicable law.

24. Governing Law and Jurisdiction

These Terms are governed by the laws of Türkiye. For consumers, mandatory consumer forum and jurisdiction rights are preserved. For B2B customers, the competent courts and enforcement offices of Diyarbakır, Türkiye will have jurisdiction unless mandatory law or a signed agreement requires otherwise.

25. B2B Contract Hierarchy

For organisational customers, where applicable: (1) signed Order Form or specifically negotiated commercial agreement; (2) MSA; (3) DPA for matters concerning personal-data processing; (4) these Terms.

Contact

SOSPITA YAZILIM LIMITED ŞİRKETİ
Talaytepe Mah. 4035. Sokak
Güneşyapı Sunrise Garden Sitesi H Blok No: 27
21070 Kayapınar / Diyarbakır
Türkiye
Email: info@sospita.io