POLICIES

Account data: email address, password (stored only as a hash), username, country and flag, profile photo or generated avatar, the timestamp of your 18+ confirmation, and — if you sign in with Google — the name, email and profile picture Google shares with us.

Gameplay data: per-exercise and overall PWR (your skill rating), wins, losses, best scores, daily streaks, and the results of your duels.

Social data: your friendships and pending friend requests, the gym you belong to or own and your membership status, duel invitations you send and receive, and the tournaments you create or enter.

Live-duel session data: while a duel is running we hold the room code you are in, your current score, which phase of the match you are on, and a timestamp of when you were last seen, so the two sides of a match stay in step and a stalled room can be recovered.

Connection data: to set up the peer-to-peer video link we relay a WebRTC handshake between you and your opponent. Those handshake messages contain candidate network addresses for your device — typically your local and public IP addresses. They pass through our servers and are shared with your opponent's device, because that is how the connection is established.

Commerce data: your Plates balance, items owned and how many copies of each, equipped loadout, Pro status, the date you last claimed the daily bonus, the packs you have opened and what came out of them, and your market listings, sales and purchases. Real-money payments are not live yet; we hold no card details, and when payments launch we will never see or store your full card number.

Arena data: your personal best, how many solo sets you have run, and their total, per exercise. Held for your eyes only — see the public/private split below.

Moderation data: reports you file and reports filed about you — the room code, the reason chosen, any free-text description (up to 500 characters), the review status, and the accounts involved.

Camera and pose data: see the dedicated Camera & Biometrics tab — that processing is described and consented to separately.

Duel clips: a recording of a match, held by us only when both players agreed to promotional use. It shows both players, and carries the usernames, scores and the date. Deletable by either player at any time from their profile.

Technical data: IP address, browser and device type, and error logs, used for security, abuse prevention and reliability.

Some of your data is visible to other players by design: your username, avatar, country and flag, tier, overall and per-exercise PWR, wins and losses, best duel scores, equipped cosmetics, and your gym. These appear on leaderboards, in duels, in friend and gym lists, and on your profile page, which is viewable by anyone who knows your username — including people who are not signed in.

Selling makes a little more visible, and only that much: an item you list on the market is shown publicly with your username and your asking price until it sells or you take it down. Your locker as a whole, your Plates balance, and your purchase history stay private.

Your Arena records are private. Personal bests set in the solo Arena are stored so that only your own account can read them, and they appear on no leaderboard, no profile page, and to no other player — including your friends and your gym.

Your email address, password, Plates balance, purchase history, pack-opening history, Arena records, age-confirmation record, and any report you file are never shown to other players.

Your opponent sees your live video for the duration of a duel, and their device learns the network addresses needed to connect to yours.

Clips and screenshots of your duels are published by us as marketing only if you specifically agreed to it and your opponent did too — see 'Promotional use of your matches' in the Terms. The setting lives in your profile and can be switched off at any time.

To provide the service — creating your account, matching duels, connecting you to your opponent, counting reps, ranking you, running gyms and tournaments, and delivering items you bought. Legal basis: performance of a contract with you.

To keep the service safe — handling reports, anti-cheat, abuse and fraud prevention, enforcing our rules and bans, and confirming you have declared yourself to be 18 or over. Legal basis: our legitimate interest in a fair, safe, adults-only game, balanced against your rights.

To process camera and pose data. Legal basis: your explicit consent, which you can withdraw at any time (see Camera & Biometrics).

To promote Gymoggle — publishing clips, screenshots and match results as marketing. Legal basis: your explicit, separate consent, which is optional, off unless you give it, and withdrawable at any time from your profile without affecting anything else you can do here.

To comply with law — tax records for purchases, responding to lawful requests. Legal basis: legal obligation.

We do not use your data for advertising, we do not sell or share it for cross-context behavioural advertising, and we do not build advertising profiles.

Your opponent — during a duel, your live video and the network addresses your devices need to connect. Other players — the public profile data listed under 'What is public'.

Supabase — our database, authentication and file storage provider. Hosts your account, gameplay, social, moderation and avatar data, and carries the real-time channel that delivers invites, notifications and the duel handshake.

Cloudflare — serves the app and processes IP addresses in server logs.

STUN and TURN servers — used to establish the duel video connection. We use Google's public STUN servers, which learn your public IP address. Where a direct connection is not possible, the duel is routed through Cloudflare's TURN relay, which carries the encrypted video stream and sees both players' IP addresses. The credential your browser uses for that relay is issued by us, is short-lived, and is not tied to your account.

Google — if you choose Google sign-in. We also load Google Fonts, which discloses your IP address to Google. Google's model files for on-device pose detection are fetched from Google-hosted storage.

Duel clips are kept with Supabase too, in a private storage area only Gymoggle's operator can read. This only ever applies to clips both players agreed could be used for promotion; a clip nobody agreed to is never uploaded anywhere. Turning off clip promotion in your profile deletes the video itself, not merely our record of it.

Lovable — the development platform this app is built on receives client-side error reports (the error, the route it happened on, and technical context) so we can fix crashes.

DiceBear (api.dicebear.com) — generates a default avatar from your username when you have not uploaded a photo. Your username is sent to them for this.

jsDelivr (cdn.jsdelivr.net) — serves the pose-detection runtime files; discloses your IP address.

Payment processors and app stores, once real payments are enabled. We are told that a payment succeeded, not your card details.

We may also disclose data where legally required, or to protect the rights and safety of our users. We do not sell your personal data.

Our providers may process your data outside your country, including in the United States. Where data leaves the EEA or UK, we rely on the European Commission's Standard Contractual Clauses (and the UK Addendum) or an adequacy decision. Contact teamgymoggle@gmail.com for a copy of the safeguards in place.

Account, gameplay, social and commerce data: for as long as your account exists. When you delete your account we delete or irreversibly anonymise it within 30 days, except records we must keep to comply with tax or other legal obligations (kept only for as long as the law requires) and records needed to enforce a ban.

Pose data: never stored. Duel recordings: not uploaded to us at all unless both players agreed to promotional use — see Camera & Biometrics.

Stored duel clips: kept while they are useful as marketing material. You can delete every clip you appear in at any time from your profile, which takes effect immediately. Material we already published stays published unless you ask us to take it down, which we will do.

Live-duel session data and WebRTC handshake messages: kept only while the room is in use and cleared shortly afterwards. They are never used to build a profile of you.

Duel invitations: expire within minutes of being sent and are cleared once handled.

Reports: kept while under review and afterwards as a moderation record, including if the account they concern is deleted, so that bans and repeat behaviour can be enforced. We keep them no longer than needed for that purpose.

Security and error logs: up to 90 days.

If you are in the EEA or UK you have the right to access, rectify, erase, restrict, and port your personal data, to object to processing based on legitimate interests, and to withdraw consent at any time without affecting prior processing. You may lodge a complaint with the data-protection supervisory authority in your country of residence.

If you are a California resident you have the right to know, delete, and correct your personal information, and to limit the use of sensitive personal information. We do not sell or share personal information as those terms are defined by the CCPA/CPRA, and we do not knowingly collect data from anyone under 16 for such purposes. We will not discriminate against you for exercising these rights.

If you are in the UAE, where Gymoggle is operated from, the Personal Data Protection Law gives you rights to access your data, have it corrected or erased, restrict or object to how it is processed, have it transferred, and withdraw consent. The same email address below handles all of them.

To exercise any right, email teamgymoggle@gmail.com. We will verify your identity and respond within the statutory deadline (one month under GDPR; 45 days under the CCPA). You may use an authorised agent.

Passwords are hashed. Data is encrypted in transit, and duel video is encrypted between you and your opponent. Your gameplay and wallet records are protected by database row-level security and server-side authority: your browser cannot directly write your PWR, Plates balance, or Pro status, and duel room state and handshake messages are not readable by players outside that room.

No system is perfectly secure. If a breach affects your personal data we will notify you and the relevant regulator where the law requires it.

Gymoggle is an 18+ service and is not directed to anyone under 18. We do not knowingly collect personal data from minors. If you believe someone under 18 has created an account or given us data, email teamgymoggle@gmail.com and we will suspend the account and delete the data.

We will post any update here and change the 'last updated' date. Material changes will be announced in-app before they take effect.