FitCritters (“the app”) is operated by Zoia Group (“we”, “us”, “our”). This policy explains what the app collects, how we collect it, what we use it for, who we share it with, how long we keep it, and how you can revoke consent or delete your data.
Questions about this policy or your data? Email hello@zoia.group.
1. What we collect
Account information
- Email address: used to create your account, sign you in, and send account-related mail such as password resets. Supabase handles authentication on our behalf.
- Password: only if you sign up with email. Supabase stores it as a salted hash. It is never visible to us.
- Sign in with Apple or Google identifiers: if you choose social sign-in, we receive an account identifier and an email address from that provider. We do not receive your password.
Profile information you create
- Display name and bio
- A six-character friend code we generate for you
- Your critter’s appearance, pose, and cosmetic items
- A “hide stats” preference that controls whether other players see your activity numbers
Health and fitness data
With your explicit permission, FitCritters reads step count, walking and running distance, active energy burned, and workouts from Apple Health. Workout details can include type, start and end time, duration, distance, and energy burned.
FitCritters requests read-only access. The app never writes data back into Apple Health.
This data is sent to and stored on our Supabase backend so your progress persists across devices and we can calculate XP, coins, daily streaks, achievements, and leaderboard standings. We store daily totals and individual workout records associated with your account.
If you do not grant Health permission, the app still works, but activity-driven progress will not accrue.
Social information
- Friend relationships, friend requests, and blocks
- Direct messages exchanged with accepted friends
- Your position and score on weekly and monthly leaderboards
Device and notification information
- A push notification token issued by the Expo push service, if you enable notifications
- Your notification preferences
Purchase information
If you buy in-app coins, Apple processes the transaction and RevenueCat validates it. We store a record of the purchase and the coins credited to your account. Your FitCritters account identifier is shared with RevenueCat so the purchase can be matched to your account. Payment card details go to Apple and are never seen by or transmitted to us.
Technical information
Our hosting provider, Supabase, keeps standard server logs that can include IP address and request timestamps for security, debugging, and abuse prevention.
What we do not collect
- Location or GPS data
- Contacts, photos, camera, or microphone access
- Third-party analytics or advertising data
FitCritters does not track you across other apps or websites and does not present an App Tracking Transparency prompt because it has nothing to track you with.
2. How we use your data
| Purpose | Data used |
|---|---|
| Create and secure your account | Email, password hash, social identifiers, server logs |
| Show your critter and profile | Display name, bio, critter appearance, level |
| Calculate progress, XP, coins, streaks, and achievements | Health and fitness data |
| Run leaderboards and friend comparisons | Fitness totals, display name, friend graph |
| Deliver messages and friend requests | Social data, push token |
| Send notifications you opted into | Push token, notification preferences |
| Credit purchased coins | Purchase records, account identifier |
| Prevent abuse and debug failures | Server logs |
We do not use your data for advertising, profiling, or automated decisions that produce legal effects.
3. Apple Health commitments
Health and fitness data is especially sensitive. We:
- Never use Apple Health data for advertising, marketing, or use-based data mining
- Never sell Apple Health data or share it with data brokers
- Never store Apple Health data in iCloud
- Never write data back into Apple Health
- Share it with no third party except our hosting provider, which stores it on our behalf under our instructions
5. Data retention and deletion
We keep your data for as long as your account is active.
You can export your data at any time from Settings → Manage account.
Residual copies may persist briefly in encrypted backups and server logs before being overwritten during normal operations. Apple and RevenueCat may retain purchase records under their own policies. We may retain records where required for tax and accounting purposes.
6. Your choices and rights
- Health data: grant or revoke access in iOS Settings
- Notifications: change them in the app’s Settings screen or iOS Settings
- Visibility: enable “hide stats” to keep activity numbers private
- Blocking: block another player to stop contact and requests
- Correction: edit your display name and bio
- Access and portability: export your data from Manage account
- Erasure: delete your account from Manage account
Depending on where you live, you may have additional rights to access, correct, delete, port, restrict, or object to our processing of your data and to withdraw consent. Email hello@zoia.group to exercise these rights. We will respond within applicable time limits.
7. Children
FitCritters is not directed at children under 13, and we do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, email hello@zoia.group and we will delete it.
8. Security
Data is encrypted in transit using HTTPS/TLS. Access to your records is enforced at the database level by row-level security policies, so one account cannot read another’s private data. Our authentication provider salts and hashes passwords.
No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
9. International transfers
Your data is stored on Supabase infrastructure and may be processed in a country other than the one where you live. Where required, we rely on appropriate safeguards for those transfers.
10. Changes to this policy
If we change this policy, we will update the date at the top. If a change is material, we will tell you in the app or by email before it takes effect.
11. Contact
Contact us with privacy questions, data requests, or concerns.