RivalRings — Privacy Policy

Last updated: July 1, 2026

RivalRings is a fitness-competition app where you and people you invite compete on health metrics inside private groups. This policy explains what we collect, why, and how it’s used. We keep it minimal on purpose.

Information we collect

Account info — the name and email address you provide when you create an account, and an optional profile photo you choose.
Health & fitness data — with your permission, we read the following from Apple Health: steps, walking/running distance, active energy (calories), exercise minutes, stand hours, your Move/Exercise/Stand goals, and recent workouts (type, duration, calories, and distance). We only ever read this data; we never write to Apple Health.
App data — the groups and competitions you create or join and the resulting standings.

How we use it

Your activity data is used solely to power the app’s features: showing your own stats, ranking members on leaderboards, and scoring competitions. Health and fitness data is shared only with the members of the private groups you choose to join, the participants of competitions you choose to enter, and with friends you add — so they can compete with you. You can turn off sharing your stats with friends at any time in the app’s settings; group and competition sharing ends when you leave the group or competition.

What we do NOT do

We do not use your health or fitness data for advertising or marketing.
We do not sell your data or share it with data brokers.
We do not use your data for any form of tracking across other apps or websites.

Where it’s stored & who processes it

Account, app, and synced activity data are stored on our backend provider, Supabase (hosted PostgreSQL and file storage), and protected by per-user access rules so you can only see your own data and that of the people you compete with. Data is transmitted over encrypted HTTPS connections.

We use a small number of service providers (sub-processors) to run RivalRings, and they may process your data only on our instructions:

Supabase — database, authentication, and file storage for everything described above.
Apple — Apple Push Notification service delivers the notifications you've enabled (it receives your device's push token and the notification text), and Sign in with Apple handles that sign-in option.

We use no analytics, advertising, or crash-reporting SDKs.

How long we keep it

We keep your account, activity, and app data for as long as your account exists, so your stats, standings, and competition history keep working. When you delete your account, all of it is deleted immediately (see “Your choices”). We don't keep separate long-term backups of deleted accounts, and we don't retain your health data for any purpose after deletion.

Your rights

Depending on where you live (for example under the GDPR in Europe or the CCPA/CPRA in California), you may have the right to access, correct, export, or delete your personal data, to object to or restrict certain processing, and to not be discriminated against for exercising those rights. RivalRings gives everyone these controls regardless of location: the app shows you your data, deletion is self-serve (Account → Delete Account), and you can email us to request a copy of your data or help with any other request. We do not sell or share your personal data for advertising, so there is nothing to opt out of under the CCPA's “do not sell or share” provisions. If you believe we haven't resolved a concern, you may also contact your local data-protection authority.

Your choices

You can revoke RivalRings’ access to Apple Health at any time in iOS Settings → Privacy & Security → Health.
You can leave any group, which stops sharing your data with it.
You can block or report another user from their profile in the app.
You can permanently delete your account and all associated data directly in the app (Account → Delete Account), or by emailing us (below). When an account is deleted, its profile, memberships, friendships, synced stats, and workouts are removed.

Children

RivalRings is not directed to children under 13, and we do not knowingly collect data from them.

Changes

We may update this policy as the app evolves; material changes will be reflected by the “Last updated” date above.

Contact

Questions, data requests, or deletion requests: team@rivalringsapp.com