SweatHearts Privacy Policy

Information We Collect

• Account information: you sign in with Apple or Google. We receive the email address and, where you allow it, the name associated with that sign-in, and store an account record for you. We never receive or store your Apple or Google password.
• Profile information: the display name and optional profile photo you choose.
• Workout photos: each logged workout includes two photos taken in the App, a selfie and a photo of your surroundings, together with the capture timestamp and an optional caption. Photos must be captured in the App; there is no gallery import.
• Pact data: your weekly target, the stake you agreed on, your invite code, the workouts you log, your weekly results and streak, and the hearts and comments you and your partner leave on each other's workouts.
• Notification tokens: if you allow notifications, we store a push token for your device so we can tell you when your partner logs a workout, reacts, or comments, and when a week is settled.
• Feedback you send: if you submit a bug report or feature request from inside the App, we receive your message along with basic diagnostic context such as app version, device model, and locale.

We do not collect your location, your contacts, your health or fitness data from Apple Health or Google Fit, or any wearable data. Proof in SweatHearts is photographic only.

What Your Partner Can See

SweatHearts is a shared app by design. Once you are paired, your partner can see your display name and profile photo, every workout photo and caption you log, when you logged it, your progress against the weekly target, your streak, and the result of each settled week. Assume that anything you log is visible to your partner. Nothing is shown to anyone else: there is no public feed, no followers, no discovery, and no sharing beyond the two people in a pact.

Workouts cannot be backdated, and their timestamps are set at capture and are not editable.

How We Use Information

We use your information solely to operate the App: to sign you in, to pair you with your partner, to display your workouts and theirs, to calculate weekly progress, streaks, and who owes the stake, to deliver notifications you have enabled, and to respond to feedback you send us. We do not sell or rent your information, we do not use it for advertising, and we do not build advertising profiles.

Where Your Data Is Stored

Account and pact data is stored in our database, hosted with Supabase. Photos are uploaded from your device directly to object storage hosted with Cloudflare R2, and our API runs on Vercel. Push notifications are delivered through Firebase Cloud Messaging, which in turn uses Apple and Google notification services. These providers process data on our behalf in order to run the service.

Photos are stored at unguessable addresses that are never listed, linked, or indexed publicly. They are not searchable and are not shown to anyone but you and your partner inside the App, but anyone given the exact photo link would be able to open it, so treat those links as private.

Purchases

SweatHearts offers paid subscriptions. Purchases are handled by the App Store or Google Play and processed through RevenueCat, which tells us whether your subscription is active. We never receive or store your card number or payment details.

Your Choices

• You can turn notifications off at any time, in the App or in your device settings.
• You can change your display name and profile photo at any time.
• You can delete your account from the App's Settings screen. Deleting your account removes your account record, your workouts and their photos, and the comments you have written.
• You can ask us what we hold about you, or ask us to correct or delete it, by writing to the address below.

Note that a workout photo your partner has already seen may remain in their device's cache or in a screenshot they took, which is outside our control. Records needed to keep a shared pact coherent, such as the fact that a week was settled, may be retained in de-identified form after an account is deleted.

Children's Privacy

SweatHearts is not directed to children. The App is intended for users aged 13 and over, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us and we will delete it.

Security

Data is transmitted over encrypted connections and stored with providers that encrypt data at rest. No system is perfectly secure, but access to production data is limited to what is needed to operate and support the App.

Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date.

Contact Us

If you have any questions about this Privacy Policy, please contact us at contact@releasegrid.com.