PRIVACY POLICY
Pursue ("we," "us," "our") operates a fitness training and accountability application (the "App"). This Privacy Policy explains how we collect, use, share, and protect information when you use the App. By creating an account or using the App, you agree to this Policy.
1. INFORMATION WE COLLECT
Account information: email address and password (stored as a hash). Required to create and authenticate your account.
Identity information: name, date of birth, body weight, gender, profile photo, biography, and social media handles you choose to provide. You enter this during onboarding and can edit it later. Your date of birth is used to derive your age; we do not display or share your birth date publicly.
Activity information: calibration responses, challenge verifications (challenge identifier, completion date, reward outcomes, optional notes, and photos or videos uploaded as verification evidence), skipped challenges, daily check-ins, streak counts, and friendships you form.
Contacts (optional): if you grant contacts permission to find friends, the App reads the phone numbers in your device contacts, hashes them on your device, and uploads only the irreversible hashes to match against other members who have done the same. We never receive or store your contacts' names, phone numbers, or any plaintext contact details, and the hashes are used solely for friend-matching.
Technical information: device type and operating-system version, application version, language and time zone, transient IP address used only at authentication time and not stored, push-notification tokens when notifications are enabled, and error and crash logs used to diagnose problems.
Communications: any messages you send to us via in-app feedback or email.
We do not collect: precise location, your contacts' names or plaintext phone numbers (only on-device hashes, as described above), payment card details (in-app purchases are processed by Apple — we never see your card number), web browsing history, or biometric identifiers.
2. HOW WE USE INFORMATION
We use the information we collect to:
- Provide, maintain, and improve the App's features, including challenge verification, leaderboard rankings, rewards, calibration, and notifications.
- Authenticate users and prevent fraud, abuse, or manipulation of leaderboards or rewards.
- Diagnose technical problems and improve performance and reliability.
- Communicate with you about your account, App updates, and support requests.
- Comply with legal obligations and enforce our Terms of Service.
- Develop new features and aggregate-level analytics, using anonymized or de-identified data where feasible.
3. LEGAL BASES FOR PROCESSING (EEA / UK / SWITZERLAND)
If you are located in the European Economic Area, United Kingdom, or Switzerland, we process your personal information under the following lawful bases (GDPR Article 6):
- Contract (Art. 6(1)(b)): processing of account and activity information necessary to provide the App.
- Consent (Art. 6(1)(a)): push notifications, public-facing profile content (leaderboard appearance, profile photo), and other optional features. You may withdraw consent at any time through in-app settings.
- Legitimate interests (Art. 6(1)(f)): fraud prevention, error diagnostics, abuse detection, and product improvement, where these interests are not overridden by your rights.
- Legal obligation (Art. 6(1)(c)): compliance with applicable law.
4. SHARING
We share your information only as follows.
Service providers acting as processors: Supabase (authentication, database hosting, file storage), and Expo / Apple / Google (app distribution and push-notification delivery). These providers are contractually obligated to protect your data and use it only to perform services for us.
Other users: your display name, profile photo, biography, member identifier, level, and verified missions are visible on the leaderboard and on your public profile, unless you enable Anonymous Mode. Anonymous Mode hides your name and photo but does not hide your level or aggregated public stats.
Legal process and safety: we may disclose information if required by valid legal process or to protect our rights or the rights or safety of others.
Business transfers: if we sell, merge, or otherwise transfer the business, your information may be transferred to the successor under a substantially similar privacy policy.
We do not sell your personal information. We do not share it for cross-context behavioral advertising. We do not engage in advertising.
5. INTERNATIONAL TRANSFERS
The App is hosted in the United States. If you access the App from outside the United States, your information will be transferred to and processed in the United States. We use Standard Contractual Clauses or equivalent transfer mechanisms with our processors where required for transfers from the EEA, UK, or Switzerland.
6. DATA RETENTION
We retain your information for as long as you maintain an account. When you delete your account through the App (Me → Delete Account):
- Account, identity, activity, and friendship records are deleted within thirty (30) days.
- System backups expire within ninety (90) days.
- Limited information may be retained longer where required by law, including for fraud prevention or legal claims.
You may request earlier or more specific deletion via the contact below.
7. SECURITY
We use industry-standard technical and organizational measures including TLS encryption in transit, encryption at rest for sensitive fields, and access controls that restrict each user's data to their own records. No system is perfectly secure; we will notify you of a security incident affecting your personal information as required by applicable law.
8. YOUR RIGHTS
Subject to applicable law, you have the following rights regarding your personal information.
All users: access information we hold about you (most is visible in-app on the Me and Mission History screens); correct or update inaccurate information via Edit Profile; delete your account and associated data via Me → Delete Account; withdraw consent for optional processing at any time.
EEA / UK / Swiss users (GDPR / UK GDPR): right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and objection (Art. 21). You may also lodge a complaint with your local supervisory authority.
California users (CCPA / CPRA): right to know, delete, correct, and limit use of sensitive personal information; right to non-discrimination for exercising your rights.
Japanese users (APPI): right to disclosure, correction, deletion, and to suspend use of your personal information.
To exercise any right, contact us at the address below. We respond within thirty (30) days where required by law.
9. CHILDREN
The App is not directed to children under thirteen (13) — or under the minimum age of digital consent in your jurisdiction, which is sixteen (16) in some EEA member states. We do not knowingly collect information from such children. If you believe a child has provided us information, contact us and we will delete it.
10. CHANGES TO THIS POLICY
We may update this Policy from time to time. Material changes will be brought to your attention in the App or by email. Continued use of the App after the effective date constitutes acceptance. If a change requires renewed consent, we will request it.
11. CONTACT
Questions, requests, or complaints regarding this Policy may be directed to support@pursue-app.com. EEA users may also lodge a complaint with their local data-protection authority.