Privacy Policy
Fit Royale is an app for running fitness competitions with friends: weight loss, steps or active calories, with verified check-ins and a shared leaderboard. This policy explains what data the app collects, why, who can see it, and how to get rid of it. It is written to be read, not skimmed. If anything in it is unclear, write to hello@fit-royale.com.
1. Who we are
Fit Royale is operated by [OPERATOR LEGAL NAME], [legal form], [registered address], [country], [registration number] (“we”, “us”). We are the data controller for the personal data described here.
Contact for anything about your data: hello@fit-royale.com.
2. What we collect
We collect only what the app needs to run a competition. There is no advertising SDK, no analytics SDK and no crash-reporting SDK in the app.
| Category | What exactly | Where it comes from |
|---|---|---|
| Account | Email address, username, display name, optional bio, optional profile photo, avatar frame, sign-in provider identifiers (email and password, Sign in with Apple, or Google Sign-In), account creation date, email verification status. | You, when you sign up and edit your profile. |
| Goals | Primary and secondary fitness goals, experience level, goal weight. | You, during onboarding or in your profile. |
| Health data | Body weight, body fat percentage, step count, active energy burned. | Entered by you, or read from Apple Health (HealthKit) or Health Connect on Android with your explicit permission. See section 4. |
| Weigh-in photos | A photo you take when you submit a weigh-in, used to verify the reading. | Your camera or photo library, only when you choose to submit one. See section 5. |
| Competition data | Competitions you create or join, your participant record, your check-ins and submissions, daily check-in streak, points, rank, badges and achievements, activity feed events and reactions, competition history and wins. | Generated as you use the app. |
| Subscription | Whether you have Fit Royale Pro, the product purchased, which store it was bought from, expiry date, and a pseudonymous subscriber identifier. We never receive your card number or billing address; Apple or Google handle payment. | Apple App Store or Google Play, via our subscription provider RevenueCat. |
| Device and notifications | A push notification token and your platform (iOS or Android), so we can send reminders and competition updates. | Your device, when you allow notifications. |
| Technical | App integrity attestation (Firebase App Check) and the standard server logs that come with any internet service, including IP address and timestamps. Fonts are loaded from Google Fonts, which receives your IP address when they load. | Your device, automatically. |
3. Why we use it, and the legal basis
| Purpose | Data used | Legal basis (GDPR) |
|---|---|---|
| Creating and running your account and competitions, calculating leaderboards, points and badges | Account, goals, competition data | Performance of a contract (Art. 6(1)(b)) |
| Recording your progress in weight, steps or calories battles | Health data | Your explicit consent (Art. 9(2)(a)), given separately in the app and withdrawable at any time |
| Verifying weigh-ins so results are fair for everyone | Weigh-in photos | Your explicit consent (Art. 9(2)(a)), given when you submit each photo |
| Providing Fit Royale Pro and honouring your subscription | Subscription | Performance of a contract (Art. 6(1)(b)) |
| Sending reminders and competition notifications | Device and notifications | Your consent (Art. 6(1)(a)), managed through your device settings and in-app notification settings |
| Keeping the service secure and preventing abuse or cheating | Technical, competition data | Legitimate interest (Art. 6(1)(f)) in running a fair and secure service |
| Answering your support requests | Whatever you send us | Legitimate interest (Art. 6(1)(f)) and, where relevant, contract |
| Keeping records we are legally required to keep, for example for tax | Subscription | Legal obligation (Art. 6(1)(c)) |
4. Health data
Weight, body fat percentage, steps and active energy are health data. Under EU law they are a special category of personal data, so we treat them differently from everything else.
- We ask first, separately. Before the app reads anything from Apple Health or Health Connect, it shows you a consent screen that explains what will be read and why. You can say no and still use the app for weight battles by entering readings manually, or skip health features entirely.
- Only what the battle needs. A steps battle reads steps. A calories battle reads active energy. A weight battle uses the weight (and, if you choose, body fat percentage) you submit. We do not read anything else from your health apps.
- Never for advertising, never sold. Health data is used to run your competitions and show your own progress. It is not used for advertising or marketing, not sold, and not shared with data brokers or anyone else outside section 7 of this policy.
- Withdraw any time. Revoke the app's access in the Apple Health app or in Health Connect, turn off health sync in the app's settings, or delete your account. Withdrawing consent does not affect processing that already happened.
- Apple Health data stays on Apple's terms. Data obtained through HealthKit is not written to iCloud by us and is used only as described here, as Apple's rules require.
5. Weigh-in photos
To keep weight battles honest, a weigh-in can include a photo, typically of the scale reading. Some people include themselves in the frame. Treat these as sensitive.
- Photos are stored in our cloud storage and are visible to the other members of that competition and its creator, so they can trust the leaderboard. They are not public and do not appear anywhere else.
- You can delete a submission, and its photo, yourself from the competition.
- Weigh-in photos are deleted automatically [30] days after the competition ends. Your weight readings stay in your history; the photos do not.
- Deleting your account deletes all of your photos.
6. What other players see
Fit Royale is a game between people who know each other. Inside a competition you have joined, the other members and the creator can see:
- your username, display name and profile photo;
- your rank, points, streak and badges in that competition;
- your check-ins and submissions for that competition, including the weight, steps or calories you submitted and any weigh-in photo;
- activity feed events about you, for example “Alex checked in”, and reactions.
People who are not in a competition with you see none of this. There is no public leaderboard and no public profile. Someone you invite by link sees the competition name, type and who invited them before they join.
Share cards you create in the app (invite cards, victory cards) contain whatever the card shows. Once you share one, where it goes is up to you.
7. Service providers
We use a small number of companies to run the app. Each acts on our instructions as a processor, under a data processing agreement, and none may use your data for their own purposes.
| Provider | What for | Where |
|---|---|---|
| Google (Firebase and Google Cloud) | Sign-in (Firebase Authentication), database (Cloud Firestore), file storage for photos (Cloud Storage), server functions, push notifications (Firebase Cloud Messaging), app integrity (App Check) | Google Cloud data centres in [REGION, e.g. europe-west / United States]. Google is certified under the EU-US Data Privacy Framework and offers Standard Contractual Clauses. |
| RevenueCat, Inc. | Subscription management and receipt validation for Fit Royale Pro | United States. Standard Contractual Clauses. |
| Apple Inc. and Google LLC (app stores) | Distributing the app and processing subscription payments. They are independent controllers for the payment itself, under their own privacy policies. | Per their policies. |
| Google Fonts | Loading the Inter typeface in the app | Google receives your IP address on font requests. |
We do not sell personal data and we do not share it with advertisers. We will disclose data if the law requires it, or to protect the rights or safety of players.
8. How long we keep data
- Account, goals, competition data, health readings: for as long as your account exists. Deleted when you delete your account.
- Weigh-in photos: [30] days after the competition ends, or earlier if you delete the submission or your account.
- Push tokens: replaced when your device issues a new one; deleted with your account.
- Subscription records: for as long as your subscription is active, then as long as tax and accounting law requires (typically up to 10 years in Romania for accounting records). These records do not include health data.
- Support emails: up to 2 years after the last message, so we can follow up on unresolved issues.
9. Deleting your account
You can delete your account in the app under Settings → Delete account. This removes your profile, your health readings, your photos, your participant records, submissions and check-ins in every competition, your feed events, your push tokens and your subscriber record. Competitions you created remain for the other members, with your entries removed. Aggregated statistics that no longer identify you may remain.
If you can no longer sign in, email hello@fit-royale.com from the address on the account and we will delete it for you within 7 days. Full details: fit-royale.com/delete-account.
Deleting your account does not cancel a subscription. Cancel it in your Apple ID or Google Play subscription settings; otherwise the store keeps billing you.
10. Your rights
Under the GDPR and equivalent laws you can ask us to:
- tell you what data we hold about you and give you a copy (access and portability);
- correct data that is wrong (rectification);
- delete your data (erasure), which you can also do yourself in the app;
- restrict or object to certain processing;
- withdraw consent at any time, including for health data and notifications.
Write to hello@fit-royale.com. We answer within one month. We may ask you to confirm you own the account.
If you think we have handled your data badly, you can complain to a data protection authority. In Romania that is the Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP), dataprotection.ro. You can also complain to the authority where you live.
11. Age
Fit Royale is for adults. You must be at least 18 to create an account. We do not knowingly collect data from anyone under 18; if we learn we have, we delete the account. If you believe a minor is using the app, tell us at hello@fit-royale.com.
12. Security
Data is encrypted in transit and at rest on Google Cloud. Access to your data inside the app is enforced by server-side security rules, so only you, the members of your competitions and their creators can read what section 6 describes. Firebase App Check helps ensure requests come from the genuine app. No system is perfectly secure; if a breach affects you, we will tell you and the authority as the law requires.
13. Changes
When this policy changes in a way that matters, we will tell you in the app before the change takes effect and update the date at the top. Continued use after that date means you accept the new version. Old versions are available on request.
14. Contact
[OPERATOR LEGAL NAME]
[registered address]
hello@fit-royale.com