Legal
Privacy Policy
Last updated: 25 April 2026
The short version. HorseJournal is built to be private by design. We collect only what we need to run the app. We never sell your data. There is no public feed, no tracking ads, and no profiling. You can delete your account at any time.
1. Who we are
HorseJournal is operated by Corani BVBA, a company registered in Belgium (company number 0808.134.120, VAT BE 0808.134.120), with its registered office at St.-Ermelindisstraat 11, 3320 Hoegaarden.
For the purposes of the EU General Data Protection Regulation (GDPR), Corani is the data controller for the personal data processed through the HorseJournal app and website. You can reach us by email.
2. What data we collect
2.1 Account data
When you create a HorseJournal account we process basic identifiers such as a display name, an avatar (optional), and an account identifier provided by Sign in with Apple. If you choose to use email instead, we store that email.
2.2 Content you create
HorseJournal exists to keep your horse story. The content you put into the app — horses you add, activities you log, photos and videos you upload, notes you write, and circles you join or create — is processed and stored so we can show it back to you and to the people in your circles.
2.3 Technical data
We do not directly collect diagnostic information from your device. Apple may, with your permission, provide us with anonymized crash and performance reports through the standard iOS diagnostics opt-in.
2.4 Subscription data
When you purchase HorseJournal Premium, the purchase itself is handled by Apple. We receive a confirmation that an active subscription exists for your account, but we do not receive your payment card details.
2.5 What we do not collect
- We do not use third-party advertising trackers.
- We do not sell your personal data to anyone, ever.
- We do not profile you for advertising.
- We do not read the content of your photos, videos, or notes for marketing purposes.
3. How we use your data
- To create and manage your account.
- To store the horses, activities, photos, videos and notes you save.
- To show shared content to the people inside the same private circle.
- To process Premium subscriptions and unlock features.
- To respond to support requests and feedback.
- To keep the app secure, prevent abuse, and fix bugs.
- To comply with legal obligations.
4. Legal basis (GDPR)
We process your personal data on the following legal bases (Art. 6 GDPR):
- Performance of a contract — to provide the HorseJournal service you signed up for.
- Legitimate interest — to keep the service stable and secure.
- Consent — for any optional feature that requires it (for example access to your photo library or camera). You can withdraw consent at any time in iOS Settings.
- Legal obligation — where we are required to retain or disclose data by law.
5. Who we share data with
We share data only with a small number of trusted processors that help us run the service:
- Apple Inc. — for Sign in with Apple, App Store payments, and basic crash diagnostics provided through iOS and TestFlight.
- Supabase — our backend database and authentication provider. Your account data, the horses you add, the activities you log, and your circle memberships are stored here. Hosted in the EU region.
- Cloudflare (R2) — our object-storage provider for the photos and videos you upload. Hosted in the EU region.
People you share with through a private circle can see the content you share with them. We never share your content publicly and we never share it outside your circles without your action.
6. Where data is stored
Your account information and journal data live in the EU region of Supabase. Your photos and videos live in the EU region of Cloudflare R2. Apple data (Sign in with Apple, App Store transactions and crash diagnostics) is processed by Apple under its own privacy policy.
Apple Inc., Supabase Inc. and Cloudflare, Inc. are companies headquartered in the United States. Where personal data is transferred outside the European Union, the EU-approved Standard Contractual Clauses apply.
7. Young riders & families
HorseJournal is designed for young riders and families. For our first launch this means specifically:
- In Belgium, users can give independent consent for the use of online services where consent is required from the age of 13.
- In the Netherlands, this age is 16.
- Younger users may only use HorseJournal with consent and guidance from a parent or legal guardian.
- Rules may differ in other countries, and a higher minimum age may apply.
We do not show advertising to anyone, and we do not knowingly collect data from children below the applicable minimum age without valid consent. Parents or guardians can contact us with any question, or to request access to, correction of, or deletion of their child's data. Write to us and we will delete the account or answer your question.
8. How long we keep data
We keep your account data and content for as long as your account is active. When you delete your account, your personal data and content are deleted within 30 days, except for limited records we are legally required to keep (for example invoicing data).
9. Your rights
Under GDPR you have the right to:
- Access the personal data we hold about you.
- Have inaccurate data corrected.
- Have your data erased (the right to be forgotten).
- Restrict or object to certain processing.
- Receive your data in a portable format.
- Withdraw consent at any time.
- Lodge a complaint with your local data protection authority. In Belgium this is the Gegevensbeschermingsautoriteit / Autorité de protection des données.
To exercise these rights:
- Access, correction and portability: write to us. We will respond within 30 days and provide your data in a machine-readable format where applicable.
- Erasure: you can delete your account at any time via Settings → Account → Delete account in the app. You can also request erasure by email.
We may ask you to verify your identity by replying from the email address associated with your account.
10. Security
We use industry-standard measures to protect your data, including encryption in transit (HTTPS/TLS), encrypted storage, access controls, and regular security reviews. No system is perfectly secure, so please choose a unique password and keep your iPhone updated.
11. Changes to this policy
If we make material changes to this policy, we will let you know inside the app and update the "last updated" date above. Continued use of HorseJournal after changes take effect means you accept the updated policy.