Privacy Policy

Effective September 17, 2026

ProofRep ("we", "the app") is a habit and fitness-challenge tracker. This policy explains what we collect, why, and what control you have.

What we collect

• Account: when you sign in with Apple, Google, or email, we store a user ID, your display name if you share it, and your email address for magic-link sign-in.
• Challenge data: the exercises, targets, durations, daily check-ins, counts, and notes you enter.
• Photos: before, after, and progress photos you take in the app. They are stored privately and are visible only to you unless you explicitly publish a proof card.
• Proof cards: when you tap "Create public link", the rendered card image and its stats become viewable by anyone with the link. Contact us to request removal of a public card. Abandoning a challenge does not automatically remove its public card.
• Partner and group data: if you accept an invite or join a group, the people in that pairing or group can see your display name, daily check-in status, streak, and days completed for that challenge. They never see your photos.
• Device token: if you enable notifications, we store your Apple push token to deliver partner check-in alerts.
• Subscription status: whether you have an active ProofRep Plus subscription, received from Apple. We never see your payment details.
• Usage analytics: privacy-preserving usage events collected with TelemetryDeck (for example "challenge created", "card shared") without your name, email, photos, notes, or challenge text, used to understand which features work.

What we don't do

• We don't sell your data.
• We don't use your photos for anything other than showing them to you and rendering cards you ask for.
• We don't run ads or share data with ad networks.

Where data lives

Data is stored with Supabase (Postgres and object storage) in Frankfurt, Germany, protected by row-level security so each user can only access their own records and what partners or group members are permitted to see.

Your rights

To request deletion of a challenge, its photos, or your entire account and data, email privacy@proofrep.com from your account email; we complete deletion within 30 days. You may also request an export of your data.

Children

ProofRep is not directed at children under 13 and we do not knowingly collect data from them.

Changes

We'll update this page and the effective date when the policy changes. Material changes will be announced in the app.

Questions: privacy@proofrep.com