Privacy Policy
1. Data controller
Gorillax is published by Arthur Destribats (« we », « the publisher »). Privacy inquiries: arthur.destribats@gmail.com.
2. Data we collect
We collect only data necessary to operate the app:
- Account: username, email, password (hashed), optional profile photo.
- Fitness activity: workouts, exercises, sets, reps, weights, durations, goals and stats you enter.
- Social: posts, likes, messages, challenges and interactions you create.
- Subscription: Premium status via RevenueCat / Apple (no access to payment card data).
- Technical: device tokens for push notifications, limited technical logs (errors, security).
We do not use Apple Health / HealthKit in the current version of the app.
3. Purposes
- Account creation and management
- Sport, social and messaging features
- Premium subscription management
- Security, fraud prevention and user support
- Service improvement (aggregated analytics, no sale of personal data)
4. Processors
- Render — API hosting
- Supabase — database and file storage
- RevenueCat — in-app subscriptions
- Apple — App Store distribution and IAP
- Resend — transactional email
- Sentry (if enabled) — error monitoring
5. Retention
Account data is kept while your account is active. After deletion, we erase or anonymize data within a reasonable period, except where law requires retention.
6. Your rights (GDPR)
EU residents may request access, rectification, erasure, restriction, objection and portability at arthur.destribats@gmail.com. You may lodge a complaint with your supervisory authority.
7. Security
We use appropriate measures (HTTPS, password hashing, auth tokens, restricted access). No system is 100% secure.
8. Children
The app is not intended for children under 16. Contact us to delete a minor's data.
9. Changes
We may update this policy. The date at the top will be revised. Material changes will be communicated in-app when feasible.