Privacy Policy for Sapiens Rank

1. Information We Collect

• Email address: Used for authentication and account management.
• Display name: The name or username you choose during onboarding, shown on the leaderboard.
• Age and country: Collected during onboarding to personalise your ranking experience.
• Health & fitness data: With your explicit permission, we read the following metrics from Apple Health (HealthKit) on iOS or Android Health Connect on Android: heart rate variability (HRV), resting heart rate, sleep duration, daily steps, active calories burned, stand hours, and exercise minutes. We also read your recorded workouts (activity type, start time, duration, distance, and calories burned). Your daily score (an integer from 0 to 100) is computed on your device from these metrics. The underlying daily metric values and workout entries are then stored on our servers (Supabase, hosted in the EU) to power the leaderboard, guild territory battles, and future recalculation of your score. They are held under row-level security, so that only you can access them in full, and other players can only see the limited, aggregated form described in Sections 2 and 3.
• Profile photo: If you choose to upload an avatar, it is stored in our storage (Supabase) and shown publicly next to your name on the leaderboard and on your profile. Providing a photo is optional.
• Guild membership: If you join or create a guild, your guild affiliation, role, and the territories your guild holds are stored to run the team and territory-battle features.
• Guild chat messages: If you join a guild, the messages you send in your guild's chat are stored on our servers (Supabase, hosted in the EU) and delivered to the other members of your guild. They are visible only to members of your guild, and are automatically deleted after 90 days. Please do not share sensitive personal information in chat.
• Moderation data: If you block another user or report a message, we store that action (who blocked or reported which message, and any reason you provide) to keep the community safe and to review reported content. Blocking a user hides their messages from you and stops their push notifications reaching you.
• Device token: A Firebase Cloud Messaging (FCM) token, stored to send you push notifications if you grant permission.
• User identifier: A pseudonymous UUID assigned by our authentication provider (Supabase) to link your profile and scores.
• Sign-in provider data: You can create your account with an email address, or with Sign in with Apple (iOS) or Google Sign-In (Android). When you use Apple or Google to sign in, that provider confirms your identity to us and we receive the email address associated with your account (Apple may relay a private, anonymised address).
• Usage & analytics data: To understand how the app is used and to improve it, we collect product-analytics events via PostHog (for example onboarding progress, a sync event that includes your daily score, and guild/territory actions), linked to your pseudonymous user identifier. Analytics are hosted in the EU and are never used for advertising.

2. How We Use Your Data

• Authentication: To create and secure your account.
• Score calculation: To compute your daily wellness score from your HealthKit data on your device, and to store your daily metric values so scores can be recalculated if the scoring formula changes.
• Leaderboard: To display your rank alongside other users (by display name and country).
• Metric comparison: When another player views your profile, we show a 7-day average of your steps, active calories, stand hours, and exercise minutes next to their own. Your sleep and HRV averages remain visible only to you and are never shown to other players.
• Guilds & territory battles: If you belong to a guild, your raw values for the metric chosen in a battle (steps, sleep, calories, or stand hours) are summed with your teammates' over the 24-hour battle window to decide which guild wins a territory. Individual values are not shown to opposing players; only the team total is used.
• Guild chat: To deliver the messages you send to the other members of your guild, and to notify them via push notification if they have opted in.
• Moderation & safety: To operate blocking and reporting, review reported messages, and remove content or users that violate our Terms. We act on reports of objectionable content within 24 hours.
• Push notifications: To send you daily reminders or rank updates, if you opt in.
• Product analytics: To measure feature usage and improve the app, using pseudonymous event data via PostHog (hosted in the EU).

We do not use your data for advertising, and we never sell it. Beyond operating the app's core features, the only additional use is the limited, pseudonymous product analytics described above, which we use solely to understand usage and improve the app.

3. Health Data

Your daily wellness score is calculated from Apple Health (HealthKit) or Android Health Connect data on your device. The underlying daily metric values (HRV, resting heart rate, sleep, steps, active calories, stand hours, exercise minutes) and your recorded workouts (type, duration, distance, calories) are then stored on our servers (Supabase, hosted in the EU), protected by row-level security so that, by default, only you can read your own data.

We use this data only to operate the app's features (scoring, leaderboard, guild territory battles) and to recalculate scores if our formula changes. We never sell it, never share it with third parties for advertising, and never use it for profiling. The only way another user sees any of it is in the limited, aggregated form described in Section 2: a 7-day average of your steps, calories, stand hours and exercise minutes, plus a team total during a guild battle. Your sleep and HRV are never exposed to other users.

You can revoke health access at any time: on iOS in Settings → Privacy & Security → Health → Sapiens Rank, and on Android in the Health Connect app under app permissions. You can also request deletion of all stored metric data at any time (see Sections 6 and 8).

4. Third-Party Services

We use the following trusted processors to deliver our service:

• Supabase: Our backend and authentication provider. Stores your profile (name, age, country, and profile photo if you upload one), daily scores, daily health metric values, workout entries, guild membership, and device token. Data is hosted in the EU. See Supabase's Privacy Policy.
• PostHog: Our product-analytics provider. Receives pseudonymous usage events (linked to your user identifier) to help us understand how the app is used and improve it. Data is hosted in the EU. See PostHog's Privacy Policy.
• Firebase Cloud Messaging (Google): Used exclusively to deliver push notifications. Only your FCM device token is shared with Firebase; no personal data or health data is involved. See Firebase's Privacy Policy.
• Apple & Google (sign-in): If you choose Sign in with Apple (iOS) or Google Sign-In (Android), that provider authenticates you and confirms your identity to us. No health data is shared with them. See Apple's Privacy Policy and Google's Privacy Policy.

These providers act as processors on our behalf and do not use your data for advertising or profiling.

5. Legal Basis for Processing

• Contract: To provide core services (account, leaderboard, guilds, guild chat, score calculation).
• Explicit consent: Health & fitness data is a special category of personal data under Article 9 GDPR. We process it, store it, and display it to other players in aggregated form only on the basis of your explicit consent, given when you grant HealthKit access. You may withdraw this consent at any time by revoking HealthKit access, which stops further collection.
• Consent: For push notifications. You may withdraw consent at any time.
• Legitimate interests: To maintain the security and integrity of our platform, to moderate guild chat (operate blocking and reporting, review reported content, and remove objectionable content and abusive users), and to run pseudonymous product analytics to understand usage and improve the app. You may object to this processing at any time (see Section 8).

6. Data Retention

Account, score, and daily health metric data is retained while your account is active.
Guild chat messages are automatically deleted 90 days after they are sent.
Moderation records (blocks and reports) are retained while your account is active to keep the community safe.
Device tokens are refreshed automatically and deleted when you uninstall the app or revoke notification permissions.
You may request deletion of your account and all associated data, including your stored health metrics, at any time.

7. International Data Transfers

Our core data (Supabase) and analytics (PostHog) are hosted in the EU. However, some providers, such as Firebase and Google Sign-In (Google) or Sign in with Apple (Apple), may process certain data (such as your device token or authentication identity) outside the European Economic Area (EEA). Where this occurs, we ensure appropriate safeguards such as the European Commission's Standard Contractual Clauses are in place to protect your data.

8. Your Rights

Under GDPR, you have the following rights:

• Access – to know what data we hold about you.
• Rectification – to correct inaccurate information.
• Erasure – to request deletion of your data.
• Restriction – to limit certain processing.
• Data Portability – to receive a copy of your data in a machine-readable format.
• Objection – to object to processing based on legitimate interests.
• Withdrawal of Consent – at any time, for consent-based processing (HealthKit, notifications).

To exercise your rights, contact us at contact@pommef.com. You also have the right to lodge a complaint with your local Data Protection Authority.

9. Security

We implement technical and organisational measures to protect your personal data, including encryption in transit (TLS), row-level security on our database, and secure authentication via Supabase Auth.

10. Children's Privacy

Our app is not intended for children under 13. We do not knowingly collect data from children. If you believe we have collected data from a child, please contact us and we will delete it promptly.

11. Push Notifications

With your consent, we may send push notifications (e.g. daily score reminders, rank changes). You can manage or disable these at any time in your device settings.

12. Changes to This Policy

We may update this Privacy Policy when necessary. Any updates will be posted here with a revised "Last Updated" date. Where required by law, we will notify you of significant changes in-app.

13. Contact Us

If you have any questions about this Privacy Policy or your data rights, please contact us:

Email: contact@pommef.com