Privacy Policy

We collect the following categories of information:

a) Account & Profile Data

• Name or display name
• Email address (for account creation and login)
• Profile photo (optional)
• Gym affiliation and clan membership
• Rank, XP, and in-app progress data

b) Location & GPS Data

• Precise GPS location during gym check-ins to verify physical presence
• Live GPS route data during outdoor run tracking sessions
• Approximate location for gym discovery on the map

c) Fitness & Activity Data

• Gym check-in records (time, location, duration)
• Run metrics (distance, pace, duration, route polyline)
• Challenge submissions, including photo-proof images
• XP earned, rank history, and battle participation records

d) Social & Clan Data

• Clan name, membership, and role
• Clan Bank contribution history
• Battle outcomes and opponent clan data

e) Device & Technical Data

• Device model, operating system version
• App version and crash/error reports
• Anonymous usage analytics (screens visited, feature interactions)

• Authenticate your account and maintain session security
• Verify gym check-ins using GPS to award XP legitimately
• Record and display run routes, metrics, and shareable run cards
• Power clan battles, leaderboards, and the global ranking system
• Deliver daily, weekly, and monthly challenges and verify completions
• Show nearby gyms on the in-app map (OpenStreetMap)
• Generate rank cards and shareable content (Instagram, social media)
• Send in-app notifications about battles, challenges, and clan activity
• Diagnose crashes, fix bugs, and improve app performance
• Comply with legal obligations

We do not sell your personal data. We share data only in these limited circumstances:

• Other users: Your display name, rank, clan name, and public XP are visible to other users on leaderboards and the gym map.
• Clan members: Members of your clan can see your contribution history and battle activity.
• Service providers: We use trusted third-party services (cloud hosting, authentication, analytics) that process data on our behalf under strict data processing agreements.
• Legal requirements: We may disclose data if required by law, court order, or to protect the rights and safety of users.
• Business transfer: In the event of a merger or acquisition, user data may be transferred as a business asset with prior notice.

Location is central to how Clash of Gyms works. Here is how we handle it carefully:

• GPS is accessed only while the App is in use (foreground) for check-ins and active run sessions. We do not track your location in the background.
• Precise location is used only to verify gym proximity (check-ins) and to draw run routes. It is never used for advertising.
• Run route data is stored securely and is only visible to you and, optionally, shared on social media by your explicit action.
• You can revoke location permission at any time in your device settings. Doing so will disable check-in and run tracking features.

The App requests the following Android permissions:

• ACCESS_FINE_LOCATION — GPS for check-ins and run tracking
• ACCESS_COARSE_LOCATION — Approximate location for gym map discovery
• CAMERA — Photo capture for challenge proof submissions
• READ_MEDIA_IMAGES — Selecting photos for challenge submissions and profile photo
• INTERNET — Required for all online features
• POST_NOTIFICATIONS — In-app alerts for battles, challenges, and clan activity

All sensitive permissions are requested at the point of use and can be denied or revoked without losing your account.

• Account data is retained for as long as your account is active.
• Run routes and check-in records are retained for up to 24 months to power leaderboards and rank history.
• Photo-proof images uploaded for challenges are retained for 90 days after challenge completion.
• Upon account deletion, all personal data is removed within 30 days, except where retention is required by law.
• Anonymised, aggregated analytics data (no personal identifiers) may be retained indefinitely for product improvement.

Depending on your jurisdiction, you have the right to:

• Access — Request a copy of the personal data we hold about you.
• Correction — Request correction of inaccurate or incomplete data.
• Deletion — Request deletion of your account and associated personal data.
• Portability — Request an export of your data in a machine-readable format.
• Opt-out of notifications — Disable push notifications at any time in device settings or the App.

To exercise any of these rights, contact us at sagarmandal931@gmail.com.

We implement industry-standard security measures including encrypted data transmission (TLS), secure authentication, and access controls. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security. We promptly notify affected users in the event of a data breach as required by applicable law.

Clash of Gyms is not directed at children under the age of 13. We do not knowingly collect personal data from children under 13. If we discover that a child under 13 has provided us with personal information, we will delete it immediately. If you believe a child has provided us with their data, please contact us at sagarmandal931@gmail.com.

The App integrates with the following third-party services, each governed by their own privacy policies:

• OpenStreetMap — Powers the gym discovery map. No personal data is shared.
• Firebase / Supabase — Backend services for authentication, data storage, and real-time features.
• Instagram (optional) — Used only when you explicitly choose to share a run card or rank card. Governed by Meta's privacy policy.

We may update this Privacy Policy from time to time. When we do, we will revise the effective date at the top of this page. For significant changes, we will notify you via an in-app notice or email. Your continued use of the App after changes take effect constitutes acceptance of the revised policy.

If you have any questions, concerns, or requests about this Privacy Policy or your personal data, please contact us: