PRIVACY POLICY

INTRODUCTION

Arena (also branded as "Gym Deathmatch") is a casual fitness challenge app where friends compete with workouts. This Privacy Policy explains what information we collect, how we use it, and how we protect your privacy when you use our service.

By using Arena, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our service.

INFORMATION WE COLLECT

ACCOUNT DATA

When you sign in using Google OAuth, we collect your email address and basic profile information (name, profile picture) provided by Google through Supabase Authentication.

LOBBY & PROFILE DATA

To participate in lobbies and compete with friends, you may provide:

• Display name
• Avatar URL or image
• Location (optional)
• Quip or personal message
• Lobby membership and participation data

ACTIVITY DATA

We collect workout information in two ways:

• Manual Logs: Date, duration, notes, and optional photos you upload directly in the app.
• Strava Integration: If you connect your Strava account, we sync activity data including activity type, distance, duration, timestamps, and other metadata provided by Strava's API.

TECHNICAL DATA

We automatically collect basic technical information such as IP address, browser type, device information, and usage logs. This data is used for security, debugging, and improving the service.

HOW WE USE YOUR INFORMATION

We use the information we collect to:

• Operate the app, including authentication, lobby management, and feature functionality
• Calculate and display your workout streaks, hearts, statistics, and competition results
• Show in-app history, comments, and competition summaries to lobby members
• Maintain security, prevent abuse, and debug technical issues
• Improve the product and user experience over time

DATA SHARING

We do not sell your personal data.

We share data only in the following circumstances:

• Infrastructure Providers: We use third-party services to operate the app, including Supabase (for authentication and database), Strava API (for activity sync), and Vercel (for hosting). These providers process data only as necessary to provide their services.
• Within Lobbies: When you join a lobby, other players in that lobby can see your display name, avatar, stats, logged activities, and any comments or interactions you make within that lobby.

STRAVA INTEGRATION

If you choose to connect your Strava account, we store access tokens securely in Supabase to sync your activities. We only read the activity data necessary for Arena features, such as workout summaries, streaks, and statistics.

You can disconnect your Strava account at any time through the app settings. Once disconnected, we will stop syncing new activities, but previously synced data may remain in your Arena account history.

DATA RETENTION & DELETION

We retain your data for as long as necessary to operate the service and fulfill the purposes described in this policy. If you wish to delete your account and associated data, please contact us using the information provided below.

Note that some aggregated or anonymized statistics may be retained for analytical purposes and cannot be associated with your personal account.

SECURITY

We implement reasonable technical and organizational measures to protect your data, including HTTPS encryption, secure authentication through Supabase, and access controls. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

CHILDREN'S PRIVACY

Arena is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately so we can delete that information.

CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. When we make changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically to stay informed about how we protect your information.

CONTACT

If you have questions about this Privacy Policy or wish to request deletion of your account and data, please contact us at:

support@gymdeathmatch.com