Privacy Policy
Last updated: January 2025
GymRivals (“we”, “us”, or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, share, and safeguard your information when you use the GymRivals mobile application and related services (collectively, the “Service”). By using the Service you agree to the practices described in this policy.
01Data We Collect
Account Information
When you register, we collect your email address, display name, username, and profile photo. If you sign in with Apple or Google we receive the information those services provide (typically an email address and name).
Workout & Activity Data
We collect the workout check-ins you create, including activity type, title, description, check-in date, and any optional wearable data you choose to sync (e.g., steps, active minutes, heart rate) from connected health platforms such as Apple Health or Google Fit.
Photos
When you submit a check-in with photo proof, the image is uploaded to and stored in Google Cloud Storage. You control whether to include a photo; it is visible to members of the challenges you belong to.
Device & Technical Information
We automatically collect device identifiers, operating system version, app version, push notification token, IP address, and crash/diagnostic data to operate and improve the Service.
Usage & Analytics Data
We log how you interact with the app — screens visited, buttons tapped, features used — to understand product usage and improve the experience. This data is aggregated and not sold to third parties.
Payment Information
If you participate in money-stakes challenges or purchase FuelCoins, payment transactions are processed by Stripe or your platform’s in-app purchase system. We do not store full card numbers or bank details on our servers.
02How We Use Your Data
- •Provide and operate the Service, including creating your account, running challenges, calculating leaderboards, and awarding streaks and achievements.
- •Send push notifications about challenge activity, streak reminders, and social interactions (follows, reactions, comments). You can disable these in Settings at any time.
- •Process financial transactions for stakes-based challenges and in-app purchases, and distribute winnings to eligible participants.
- •Monitor for and enforce compliance with our Terms of Service, prevent fraud, and maintain platform safety.
- •Analyse aggregate, anonymised usage patterns to improve features, fix bugs, and optimise performance.
- •Comply with applicable legal obligations and respond to lawful requests from public authorities.
03Data Sharing
We do not sell your personal data. We share information only in the following limited circumstances:
Other GymRivals Users
Your username, profile photo, check-ins, streak count, and leaderboard position are visible to other members of the challenges you join. Your profile is publicly searchable by username within the app.
Service Providers
We use the following sub-processors who access data solely to provide services on our behalf: Google Firebase (database, authentication, storage, crash reporting, analytics), Stripe (payment processing), Expo (push notification delivery), and RevenueCat (subscription management).
Third-Party Services — Wearables & Fitness Platforms
Strava— If you connect your Strava account, we receive workout data (activity type, distance, duration, calories) to automatically log check-ins. Your Strava credentials are never stored on our servers; authentication is handled directly by Strava. Strava’s Privacy Policy: strava.com/legal/privacy
Fitbit (Google)— If you connect your Fitbit device, we receive workout and health data to automatically log check-ins. Authentication is handled directly by Fitbit/Google and your credentials are never stored on our servers. Fitbit/Google’s Privacy Policy: fitbit.com/legal/privacy-policy
Crash Reporting & Diagnostics
Firebase Crashlytics— We use Crashlytics to automatically collect crash reports and diagnostics to improve app stability. Crash reports may include device model, OS version, app version, and stack traces. This data is processed by Google and governed by the Google Firebase Terms of Service. You can review Google’s privacy practices at firebase.google.com/support/privacy
Legal Requirements
We may disclose your information if required to do so by law or in response to valid legal process, or to protect the rights, property, or safety of GymRivals, our users, or the public.
04Data Retention
We retain your account data for as long as your account is active or as needed to provide the Service. If you delete your account, we will permanently delete your personal data within 30 days, except where we are required to retain it for legal or financial compliance purposes (e.g., payment records for up to 7 years as required by applicable tax law).
Aggregated, anonymised analytics data that cannot be used to identify you may be retained indefinitely to improve the Service.
05Your Rights
Depending on your jurisdiction you may have rights including:
- •Access & Portability — request a copy of the personal data we hold about you. Go to Settings → Account → Export My Data.
- •Correction — update or correct your information at any time via Settings → Edit Profile.
- •Deletion — request deletion of your account and associated data via Settings → Account → Delete Account. All data is permanently removed within 30 days.
- •Objection & Restriction — object to certain processing of your data or request that we restrict processing while a complaint is investigated.
- •Push Notifications— disable at any time via Settings → Notifications, or through your device’s system settings.
To exercise any of these rights, contact us at support@gymrivals.app. We will respond within 30 days.
06Contact Us
If you have questions or concerns about this Privacy Policy or how we handle your data, please reach out:
Email: support@gymrivals.app
We take all privacy enquiries seriously and aim to respond within 30 days. If you are located in the European Economic Area and are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority.
07California Residents (CCPA)
If you are a California resident, the California Consumer Privacy Act (CCPA) gives you specific rights regarding your personal information:
- Right to Know — request details about the personal information we have collected about you.
- Right to Delete — request deletion of your personal information, subject to certain exceptions.
- Right to Opt-Out — we do not sell your personal information to third parties.
- Right to Non-Discrimination — we will not discriminate against you for exercising these rights.
To exercise these rights, contact us at support@gymrivals.app.
08Usuários no Brasil (LGPD)
Se você está no Brasil, a Lei Geral de Proteção de Dados (LGPD — Lei nº 13.709/2018) garante os seguintes direitos sobre seus dados pessoais:
- Confirmação e acesso — confirmar se tratamos seus dados e acessá-los.
- Correção — corrigir dados incompletos, inexatos ou desatualizados.
- Exclusão — excluir dados desnecessários ou tratados em desconformidade.
- Portabilidade — solicitar a portabilidade dos seus dados para outro fornecedor.
- Revogação do consentimento — revogar o consentimento a qualquer momento.
A base legal para o tratamento dos seus dados é: (i) execução de contrato — para fornecer nossos serviços; (ii) legítimo interesse — para melhorar a segurança e o app; e (iii) consentimento — para comunicações de marketing.
Para exercer seus direitos, contate-nos pelo e-mail support@gymrivals.app. Respondemos em até 30 dias.
09Children's Privacy (COPPA)
GymRivals is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at support@gymrivals.app and we will delete such information promptly.
Stakes / Money Challenges: Real-money stakes features are restricted to users who are 18 years of age or older. Users are required to confirm their age before participating in any money challenge.