Privacy Policy & Terms

1. Introduction

Welcome to Clash of Gyms ("App", "we", "our", or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application.

By downloading, installing, or using the App, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy and our Terms of Use. If you do not agree with any part of this policy, you must immediately discontinue use of the App.

2. Information We Collect

We collect information that you provide directly to us, including:

• Account Information: When you register, we collect your name, email address, age, gender, and profile photo (if provided via Google Sign-In or uploaded manually).
• Profile Data: Username, fitness rank, XP points, body statistics (height, weight — optional), clan membership, gym affiliation, and fitness goals you choose to set.
• Location Data: With your explicit permission, we access your GPS location solely to verify gym check-ins and display nearby gyms on the map. Location is used only at the moment of check-in and is never persistently stored or shared.
• Activity Data: Gym check-in records, running sessions (distance, duration, pace, route), challenge completions, contest participations, and clan battle results.
• Device Information: Device type, operating system version, and unique device identifiers for app functionality and crash diagnostics.

3. How We Use Your Information

We use the collected information to:

• Provide, operate, and maintain the App and all its features.
• Enable gym check-ins, clan membership, leaderboards, contests, and 1v1 battles.
• Send in-app notifications about clan activity, battle results, contest announcements, and challenges.
• Calculate and display fitness rankings and XP scores.
• Verify that contest participants and check-ins are genuine and location-accurate.
• Detect and prevent fraudulent activity, cheating, and abuse.
• Improve, personalise, and expand our App based on aggregate usage data.
• Comply with applicable legal obligations.

We do not use your personal data for advertising profiling or sell it to advertisers.

4. Data Security

We take the security of your data seriously. Your data is stored on Supabase — an enterprise-grade, SOC 2 Type II certified database platform.

• All data in transit is encrypted using industry-standard TLS 1.2/1.3.
• All data at rest is encrypted using AES-256.
• Row-level security policies ensure users can only access their own private data.
• Other users can only see your public profile (username, rank, clan, XP score).
• Passwords are never stored — authentication is handled exclusively via Google OAuth 2.0 or Supabase's secure auth system.

While we implement strong safeguards, no method of internet transmission is 100% secure. We strive to use commercially acceptable means to protect your personal data but cannot guarantee absolute security.

5. Sharing of Information

We do not sell, trade, rent, or lease your personal information to any third party. Information may be shared only in these limited circumstances:

• Service Providers: Supabase (database), Google (authentication), and OpenStreetMap (map tiles). Each is bound by their own privacy policies.
• Legal Requirements: If compelled by law, court order, or lawful governmental authority.
• Safety & Protection: To protect the rights, property, or safety of our users, the public, or ourselves.
• Business Transfer: In the event of a merger, acquisition, or asset sale, user data may be transferred with prior notice.

Public leaderboard data (username, rank, clan name, XP score, gym name) is visible to all App users.

6. Location Data

The App requests access to your device's location exclusively to:

• Verify physical presence at a registered gym during check-in.
• Display nearby gyms on the in-app map.
• Validate contest check-ins.

Location data is used only at the moment of check-in to verify proximity (within 150 metres of the gym), never stored persistently on our servers, never shared with third parties, and only collected when you actively initiate a check-in or open the map.

You may deny location permissions at any time in your device settings, though this will prevent gym check-in and map functionality.

7. Health, Safety & Substance Policy

IMPORTANT NOTICE — PLEASE READ CAREFULLY

Clash of Gyms is a fitness gamification platform designed to encourage healthy, legal, and natural athletic competition. We have a strict zero-tolerance policy regarding the promotion, encouragement, or glorification of any harmful or prohibited substances.

WE EXPRESSLY DO NOT PROMOTE, ENDORSE, OR ENCOURAGE:

• Anabolic steroids, human growth hormone (HGH), or any other performance-enhancing drugs (PEDs).
• Any substance prohibited by the World Anti-Doping Agency (WADA), national sports bodies, or applicable law.
• Diuretics, stimulants, or other pharmaceutical substances used to gain unfair competitive advantage.
• Dangerous supplementation protocols, excessive caloric restriction, or any practice that may cause medical harm.
• Eating disorders, body dysmorphia, or any unhealthy relationship with food or exercise.

All in-app contests and competitions are recreational fitness events. Contest results are based solely on physical attendance and activity tracking. Any user found promoting, soliciting, or distributing information about prohibited substances will be permanently banned without notice.

8. Community Conduct & Safety

The following conduct is strictly prohibited and may result in immediate account termination:

• Physical violence, threats, or encouragement of violence.
• Harassment, bullying, stalking, or intimidation.
• Using location features to track or confront users in the real world.
• Sharing personal information of others without consent (doxxing).
• Content promoting self-harm, eating disorders, or substance abuse.
• Impersonation of another user, gym, or official entity.
• Cheating, manipulation of check-in data, or falsifying XP or contest results.

All battles and challenges are virtual, XP-based competitions only. No monetary wagers are involved.

9. Gym Listing & Removal Policy

Gyms listed on Clash of Gyms are added by gym owners/management or by our platform administrators based on publicly available information.

GYM REMOVAL REQUESTS:

If you are the owner, manager, or authorised representative of a gym and wish to have your gym removed, you may submit a removal request by emailing us at admin@clashofgyms.com.

Upon receipt and verification, we will remove the gym listing within 7 business days.

10. Children's Privacy

The App is not directed to children under the age of 13 (or under 16 in the EU/UK). We do not knowingly collect personal information from minors. If you believe a child has provided us with personal information, contact us at admin@clashofgyms.com and we will promptly delete such information.

11. Your Rights & Choices

Depending on your jurisdiction, you may have the following rights:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request permanent deletion of your account and all associated data.
• Portability: Request your data in a structured, machine-readable format.
• Opt-Out: Disable in-app notifications at any time via Profile → Settings.

To exercise any of these rights, contact us at admin@clashofgyms.com. We will respond within 30 days.

12. Data Retention

We retain your account data for as long as your account is active. Upon account deletion, your profile, XP, clan data, and activity history are permanently deleted within 30 days. Anonymised aggregate statistics may be retained for platform analytics.

13. Third-Party Services

The App integrates with:

• Google Sign-In — authentication
• Supabase — database and backend
• OpenStreetMap — map tiles (no personal data transmitted)

We are not responsible for the privacy practices of third-party services.

14. Limitation of Liability

Clash of Gyms provides the platform on an "as is" and "as available" basis. We are not liable for any injury, health consequence, or physical harm arising from participation in contests, check-ins, or any fitness activity facilitated through the App. Users participate entirely at their own risk.

15. Governing Law

This Privacy Policy shall be governed by the laws of India. Any legal disputes shall be subject to the exclusive jurisdiction of the competent courts in India. For EU/UK residents, we comply with GDPR and UK GDPR respectively.

16. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes by displaying a prominent in-app notice at least 7 days before changes take effect. Your continued use of the App constitutes acceptance of the updated terms.

17. Contact Us

For any questions, data requests, gym removal requests, or reports of policy violations:

Email: admin@clashofgyms.com

Response Time: We aim to acknowledge all inquiries within 72 hours and resolve them within 30 days.