Privacy Policy

Last updated: March 16, 2026

Hotboy Summer ("we", "our", "the app") is a fitness-tracking app that lets you log workouts, build streaks, complete challenges, and compete with friends. This policy explains what data we collect, how we use it, and your rights.

1. Data We Collect

Account information

• Email address and password (used for authentication)
• Username (chosen by you, visible to friends)

Workout and activity data

• Activity type, duration, and date
• Body weight (if you choose to log it)
• Workout photos (if you choose to attach one)
• Streak history, challenge progress, and XP points

Social data

• Friend connections and friend codes

Device and technical data

• Push notification token (to send you notifications)
• Device platform (iOS or Android)

Purchase data

• In-app purchase records are processed by Apple (App Store) or Google (Play Store) and RevenueCat. We do not collect or store your payment details.

2. How We Use Your Data

• To provide the app's core features: workout logging, streaks, leaderboards, challenges, and friend interactions
• To send push notifications (friend requests, streak reminders)
• To process in-app purchases and deliver purchased items
• To improve the app experience

3. Data Storage and Security

Your data is stored securely in Supabase, which uses PostgreSQL databases hosted on AWS with encryption at rest and in transit. Workout photos are stored in Supabase Storage. Authentication is handled by Supabase Auth with bcrypt-hashed passwords.

4. Third-Party Services

We use the following third-party services:

• Supabase — Database, authentication, and file storage
• Expo — Push notification delivery
• RevenueCat — In-app purchase management and receipt validation
• Apple App Store / Google Play Store — Payment processing for in-app purchases

Each service has its own privacy policy. We do not sell your data to any third party.

5. Data Sharing

Your username, workout activity, streak status, and XP are visible to your friends within the app. We do not share your personal data with third parties for advertising or marketing purposes.

6. Data Retention

Your data is retained for as long as your account is active. If you delete your account, all associated data (workouts, streaks, photos, friend connections, and inventory) will be permanently deleted.

7. Your Rights

You can at any time:

• Access your data through the app (profile, workout history)
• Delete individual workouts from your profile
• Request full account deletion by contacting us at the email below

If you are in the EU/EEA, you have additional rights under the GDPR including the right to data portability and the right to lodge a complaint with a supervisory authority.

8. Children's Privacy

Hotboy Summer is not intended for children under the age of 13. We do not knowingly collect data from children under 13.

9. Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated date. Continued use of the app after changes constitutes acceptance.

10. Contact

For questions about this privacy policy or to request data deletion, contact us at: allanaurelius@gmail.com