Privacy Policy

We store account details such as your email address, display name, immutable handle, profile image, and discoverability preference. We also store goals, rewards, cheers, Fan requests, manual activity entries, and other content you create in Champs. When a Fan pledges a private media reward, we store the photo, audio recording, or video they choose to attach.

With your permission, Champs reads daily step summaries from Apple Health or Health Connect and run summaries from Strava. Champs stores daily totals and workout summaries needed to update your goals. It does not store raw health samples, heart-rate streams, or GPS routes.

You can revoke Apple Health, Health Connect, or Strava access in the provider's settings. Revoking access stops future syncs; previously synced summaries remain until you delete them or delete your account.

We use your information to authenticate you, operate your private Champion space, calculate goal progress, sync connected activities, deliver notifications, and show approved Fans the information you have chosen to share with them.

Champs does not sell personal information or use health information for advertising. PostHog analytics are used only to understand product reliability and improve Champs; they are not used for advertising or cross-app tracking.

Champs uses PostHog to collect product events, pseudonymous account identifiers, generalized screen or route names, app and device details, interaction events, and error diagnostics such as stack traces. This helps us understand which parts of Champs are used and investigate crashes and other failures.

Session replay is configured to mask text and text inputs, hide images and private media, remove route identifiers and query strings, and exclude console logs and network contents before a recording leaves your device. Champs does not intentionally send goal text, activity or health values, messages, reward media, access tokens, or email addresses to PostHog. Analytics and replay data are retained according to the operational retention settings in our PostHog account.

Accepted Fans can see progress and content within the private circle you share with them. We use Supabase for authentication and data storage, Vercel for the web application, Expo for app delivery and push notifications, Google Cloud Storage for private reward media, PostHog for privacy-limited product analytics and diagnostics, and Apple, Google, and Strava when you choose their sign-in or health integrations. Private reward media is delivered through Champs only to the Fan who pledged it and to the Champion after the linked goal is achieved. These providers process data under their own terms and privacy commitments.

We retain your account information and content while your account is active. You can permanently delete your account in Champs Settings or through the public account-deletion page. Deletion removes your profile, goals, activities, health summaries, social relationships, rewards, notifications, push tokens, and stored integration credentials from Champs. If you used Sign in with Apple, Champs also directs you to revoke the remaining Apple authorization in your Apple Account settings.

Champs uses authenticated access, database row-level security, and encrypted provider credentials to limit access to private data. No internet service can guarantee absolute security, so please contact us promptly if you believe your account has been compromised.

You can change discoverability, disconnect providers, control health permissions, sign out, or delete your account from Settings.

Champs is not directed to children under 13. We may update this policy as the service changes and will update the effective date when we do.

Questions or privacy requests can be sent to dev@redkrypton.com.