This Privacy Policy describes how RPGFitness (“we”) collects, uses, shares, and protects your personal data when you use the RPGFitness application (the “Service”). We act as the data controller for your data within the meaning of the General Data Protection Regulation (GDPR).
For any questions regarding this policy or your personal data, you can contact us at: willgaonarch@hotmail.fr.
1. Data Collected
When using the application, we may collect the following data:
- Email address (when creating an account);
- Username;
- In-game progression data (RPG statistics, levels, inventory, achievements…);
- Physical activity data (step count), if you authorize their synchronization;
- Technical error logs, to improve the stability of the application.
2. Purpose of the Collection
This data is used for the following purposes:
- Create and manage your user account;
- Save your in-game progression via our hosting provider Supabase;
- Synchronize your step data (if authorized) to unlock content in the game;
- Send you notifications (workouts, reminders, progress), only if you consent to it;
- Analyze and improve the user experience;
- Fix bugs and improve the stability of the application.
3. Legal Basis for Processing
We process your personal data on the following legal bases, in accordance with Article 6 of the GDPR:
- The performance of the contract between us and you, for the creation and management of your account and the provision of the Service;
- Your consent, for sending notifications and synchronizing your step data — consent that you can withdraw at any time;
- Our legitimate interest, for improving the Service, fixing bugs, and ensuring the security of the application.
4. Data Sharing
We do not sell, rent, or share any personal data with third parties for commercial purposes. However, your data may be transmitted to our technical subprocessors, notably Supabase, which hosts our databases and ensures the backup of your progression, strictly to the extent necessary for the provision of the Service.
Should a data transfer take place outside the European Union, it would be governed by appropriate safeguards, such as the European Commission’s standard contractual clauses.
5. Hosting and Security
Your data is stored securely via Supabase, a service compliant with current security standards. All synchronized data is encrypted in transit. We implement reasonable technical and organizational measures to protect your data against any unauthorized access, loss, or alteration.
6. Data Retention Period
Your personal data is retained for as long as you use your account. If your account is deleted, your data is deleted or anonymized within a maximum period of 30 days, unless a legal obligation requires us to retain it for a longer period.
7. Application Permissions
The application may request the following permissions:
- Physical activity (steps): to measure your fitness progress;
- Notifications: to send you reminders or important alerts;
- Internet connection: to synchronize your data with Supabase.
No permission is activated without your explicit consent, and you can revoke them at any time from your device settings.
8. Locally Stored Data
Some data (such as step count) may be stored solely on your device if you choose not to create an account. This data remains 100% private and is never transmitted to our servers.
9. Minor Users
The Service is not intended for individuals under the age of 16 without the consent of their legal representative. If you are a parent or guardian and believe that your child has provided us with personal data without your consent, please contact us so that we can proceed with its deletion.
10. Your Rights
In accordance with the GDPR and, where applicable, the regulations applicable in your country of residence, you have the following rights over your personal data:
- Right of access;
- Right of rectification;
- Right to erasure (“right to be forgotten”);
- Right to restriction of processing;
- Right to data portability;
- Right to object;
- Right to withdraw your consent at any time, without affecting the lawfulness of processing carried out before such withdrawal.
To exercise these rights, contact us at: willgaonarch@hotmail.fr. You also have the right to lodge a complaint with the competent data protection authority (in France, the CNIL (the French data protection authority) — www.cnil.fr —, or the equivalent authority in your country of residence).
11. Deleting Your Account
You can request the complete deletion of your account and all of your data by writing to us at: willgaonarch@hotmail.fr. This deletion is carried out within a maximum period of 30 days.
12. Changes to This Policy
This Privacy Policy may be updated at any time, particularly to reflect legal or functional changes. In the event of a substantial change, you will be notified directly within the application.
Last updated: 01/12/2025.