Last updated: July 2026
Your email address and username (to create your account); workout entries you log (type and activity details); a profile photo if you choose to upload one; a bio and links you add to your profile; friend and squad relationships you create; the text of squad chat messages and direct messages you send; a push notification token if you enable notifications on a device; and, if you report a user or squad, the reason and any details you provide, or if you block a user, that block.
To run the core features: calculating your XP and level for each workout type, showing you and your friends/squadmates leaderboards, and sending notifications about friend requests and squad activity. We also show ads through Google AdMob to help support the app. AdMob can use your device's advertising ID and other device data to show and personalize the ads you see. If you're in the EEA, UK, or certain US states, you'll get a consent prompt the first time you open the app asking whether to allow that; you can review or change your answer anytime from Account Settings → Ad privacy. We don't sell your personal data for money, but sharing data with an ad network like AdMob to personalize ads counts as a "sale" or "share" under some US state privacy laws even though nothing is paid for it — declining personalized ads in the consent prompt opts you out of that too.
Your username, photo, bio, and links are visible to other users you interact with (friends, squadmates) and can be viewed by any user who taps your profile from a leaderboard, squad roster, or activity feed. Your workout history contributes to leaderboards visible to friends and squadmates but isn't shown to strangers. Squad chat messages are visible to members of that squad; direct messages are visible only to you and the person you're messaging, though a short preview can appear in a push notification on the recipient's device if they have notifications enabled. Reports you submit are visible only to us for review, and we don't tell the person or squad you reported who reported them. If you block someone, they're not notified that a block exists.
We use Supabase to store data and run authentication, Resend to send account emails like signup confirmation and password reset, Expo/Google's push notification services to deliver notifications, and Sentry for crash and error reporting. These providers process data on our behalf and don't use it for their own purposes.
You can edit your username and photo, or delete your account and associated data entirely, from the Profile screen at any time.
Questions about your data? Reach out at privacy@swoleosophy.com.