Privacy Policy

01 Introduction & Overview

Welcome to OUTREP: Compete With Friends ("we", "our", "us", or the "App"), a competitive fitness and workout gamification mobile application. OUTREP allows users to challenge themselves and others in real-time pushup, squat, and workout battles powered by on-device computer vision and live multiplayer networking.

We are committed to safeguarding your privacy and ensuring you understand exactly how your data is collected, processed, and protected. This Privacy Policy applies to all services, features, and mobile applications provided under the OUTREP: Compete With Friends application across Android and iOS platforms.

02 Information We Collect

We collect information strictly necessary to provide the gamified fitness experience, sync your progress, manage leaderboards, and facilitate live friend challenges.

A. Account & Profile Information

• Authentication Credentials: When you register or sign in using Google Sign-In or email, we receive your email address, authentication user ID, and associated token identifiers.
• Public Profile Details: Your chosen athlete username, display name, profile avatar photo URL, country/region (optional for national leaderboards), and onboarding preferences.
• Social & Friend Relations: Friend lists, friend requests, and direct challenge invitations sent or received within the App.

B. Workout & Gamification Metrics

• Performance Statistics: Repetition counts (e.g., pushups, squats, lunges, jumping jacks, planks), workout durations, exercise completion timestamps, and match outcome records (wins, losses, streaks).
• Progression Data: Experience points (XP), athlete levels, achievement badges, and boss raid battle logs.
• Leaderboard Entries: Aggregated rep scores and ranking displayed on global, national, and friend leaderboards.

C. Technical & Diagnostic Information

• Device & Network Data: Internet Protocol (IP) address, operating system version, device model, app version, network connectivity status, and WebRTC Session Description Protocol (SDP) metadata required to establish live peer-to-peer matches.
• App Preferences: Local application settings, cached workout configurations, sound/vibration toggles, and notification preferences.

03 Camera & AI Pose Tracking (Privacy-by-Design)

OUTREP: Compete With Friends utilizes your device's camera to analyze workout form and automatically count repetitions (such as pushup depth, body angles, and form validation).

Only the resulting numerical data (e.g., "15 pushups completed", "Match Time: 60s") is saved to your user profile to award XP and update your stats.

04 Live Multiplayer & WebRTC Video Battles

OUTREP: Compete With Friends features real-time 1-on-1 fitness battles where you can compete head-to-head with friends or other athletes. During a live battle, video and optional audio streams are shared between the two matched participants.

• Peer-to-Peer Transmission: Real-time video and audio feeds are streamed directly between your device and your opponent's device using WebRTC (Web Real-Time Communication) encryption protocols.
• Signaling Only: Our backend (Supabase Realtime & Google STUN servers) only facilitates the initial network handshake (IP/port routing and ICE candidates) to establish the direct connection between participants.
• Zero Video Archiving: We do NOT record, capture, or store your live battle video or audio streams on our servers. The media stream ceases immediately when the match finishes or either player disconnects.

05 Device Permissions & Purpose

OUTREP: Compete With Friends requires certain operating system permissions to deliver its interactive fitness features. You can modify or revoke these permissions at any time through your device's system settings.

06 How We Use Your Information

We process collected data for the following legitimate purposes:

1. Service Delivery: Managing user authentication, maintaining profiles, synchronizing exercise records, calculating XP and levels, and matching players for challenges.
2. Social Features: Enabling friend discovery, friend requests, activity logs, and real-time multiplayer workout sessions.
3. Leaderboards & Fair Play: Aggregating rep counts to display fair, anti-cheat validated rankings across global and regional fitness boards.
4. Customer Support & Reliability: Diagnosing connection bugs, resolving user issues, responding to feedback, and improving app performance.
5. Security & Abuse Prevention: Enforcing our Terms of Service, preventing harassment in live sessions, and protecting athlete accounts.

07 Third-Party Service Providers

We partner with industry-standard, security-compliant service providers to operate the application. These providers only process information strictly necessary to perform their respective services under contractual data protection obligations:

• Supabase (Database, Auth & Realtime): Provides encrypted database hosting, user authentication management, storage for user avatars, and real-time signaling for friend challenges.
  Privacy: supabase.com/privacy
• Google Sign-In / Google Identity Services: Provides secure Single Sign-On (SSO) authentication.
  Privacy: policies.google.com/privacy
• Google ML Kit: On-device machine learning library for pose estimation and exercise detection. Operates locally on your device without transmitting video data to external servers.
• Google STUN Servers: Used strictly for network routing discovery (NAT traversal) to establish WebRTC peer-to-peer audio/video connections during live matches.
• App Store & Google Play In-App Purchases: Handles subscription payments and billing securely. We never collect or store your credit card or bank account details.

08 Data Storage, Retention & Security

We implement robust technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction:

• Transport Layer Encryption: All data transmitted between the App and our backend servers is secured using modern TLS/HTTPS and secure WebSockets (WSS).
• Database Security & Access Control: Our backend employs granular Row Level Security (RLS) policies ensuring users can only read and modify data they are explicitly authorized to access.
• Local Device Storage: App preferences and local authentication tokens are stored securely in device-sandboxed storage (`SharedPreferences`).

09 Your Privacy Rights (GDPR, CCPA & Global Rights)

Depending on your location (including the European Economic Area, United Kingdom, and California), you possess specific statutory rights regarding your personal data:

• Right to Access: You can request a copy of the personal information we hold about you.
• Right to Rectification: You can update or correct your profile details (name, username, avatar) directly inside the App's Profile settings.
• Right to Erasure (Right to Be Forgotten): You can request the permanent deletion of your account and all associated workout histories.
• Right to Data Portability: You can request an export of your fitness and match metrics in a standard format.
• California Privacy Rights (CCPA / CPRA): We do not sell or share your personal information with third parties for monetary or commercial advertising purposes.

10 Account & Data Deletion Procedures

You have full control over your athlete profile. If you wish to delete your OUTREP: Compete With Friends account and associated data:

1. In-App Deletion: Open the App > navigate to Profile > tap Account Settings > select Delete Account.
2. Direct Request via Email: You can send an email to delsigate@gmail.com with the subject line "Account Deletion Request" from your registered email address.

Upon receiving a verified deletion request, all personal identifiers, match logs, XP history, friend links, and uploaded avatars will be permanently removed from our primary active databases within 30 days.

11 Children's Privacy (COPPA Compliance)

OUTREP: Compete With Friends is designed for general audiences interested in fitness gamification and is not directed at children under the age of 13 (or under 16 in certain jurisdictions). We do not knowingly collect or solicit personal data from children under 13. If we discover that a child under 13 has provided us with personal information without verified parental consent, we will promptly delete such information. If you believe a child has provided us data, please contact us immediately.

12 Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect improvements in app functionality, new exercise detectors, or legal requirements. When updates occur, we will revise the "Effective Date" at the top of this policy and notify users via an in-app notice or release notes where appropriate.

13 Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your data, please contact our support team: