RPGym Privacy Policy

Effective date: 4 September 2026

RPGym respects your privacy.

This Privacy Policy explains what information RPGym collects, why we collect it, how we use it and the choices available to you.

RPGym is intended only for people aged 16 and over.

Depending on how you use RPGym, we may collect the following categories of information.

Account information

This may include:

• email address; 
• display name; 
• authentication and account identifiers; 
• account creation and login information; 
• age-eligibility and legal-consent records. 

If we use your date of birth to determine whether you are eligible to use RPGym, we aim to retain only the information reasonably necessary for eligibility and compliance purposes.

Fitness and workout information

This may include:

• exercises and activities; 
• sets, repetitions and weights; 
• workout duration; 
• workout templates; 
• workout history; 
• personal bests; 
• distance, pace and related activity measurements. 

Location information

If you use outdoor GPS tracking and grant location permission, RPGym may process location information required to record an activity, including route points and derived distance or pace information.

Location collection is not required for workouts that do not use location features.

Health-platform information

If you choose to connect RPGym to Apple Health or another supported health platform, RPGym may access permitted workout information according to the permissions you grant.

RPGym currently requests only the health permissions required for supported features.

You can revoke health access through your device settings.

RPG and game information

This may include:

• Hero class and appearance; 
• level and XP; 
• quests and quest progress; 
• equipment; 
• virtual currency; 
• achievements and rewards. 

Social information

If you use social features, we may process:

• friend relationships and requests; 
• blocked-user relationships; 
• limited public Hero information; 
• private friend messages; 
• unread/read state; 
• user reports. 

Private messages are accessible only as necessary to provide, secure and moderate the Service and are not publicly displayed.

Reports and moderation information

If you report another user or message, we may store:

• identities of the reporter and reported user; 
• report reason; 
• optional report notes; 
• relevant reported-message evidence; 
• timestamps; 
• moderation status. 

Users who are reported are not shown the identity of the person who made the report.

Device and technical information

We may process technical information needed to operate and secure RPGym, such as:

• device/platform information; 
• application version; 
• push-notification tokens; 
• error and diagnostic information; 
• security and request metadata. 

We use personal information to:

• create and manage accounts; 
• determine age eligibility; 
• authenticate users; 
• provide workout logging and history; 
• calculate personal bests; 
• provide RPG progression and rewards; 
• provide friends and private messaging; 
• operate push notifications; 
• provide GPS and health-platform integrations; 
• respond to reports and moderate misuse; 
• prevent fraud, abuse and security threats; 
• troubleshoot and improve RPGym; 
• comply with legal obligations; 
• process account-deletion requests. 

We do not use your health or workout information to make medical diagnoses.

RPGym is not designed to make your fitness history public.

Other eligible RPGym users may be able to see limited information through social features, such as:

• display name; 
• Hero appearance; 
• Hero class; 
• Hero level; 
• equipped game items. 

RPGym does not intentionally expose through public profiles:

• email address; 
• date of birth; 
• exact XP; 
• workout history; 
• health data; 
• GPS routes; 
• private messages; 
• reports; 
• private account identifiers. 

Messages sent between friends are stored so they can be delivered and displayed to conversation participants.

Messages may also be accessed by authorised RPGym administrators where reasonably necessary for:

• responding to a user report; 
• investigating abuse or safety issues; 
• protecting users; 
• complying with legal requirements. 

RPGym does not claim that friend messaging is end-to-end encrypted.

Reports are private and are not visible to other users.

When a new report is submitted, RPGym may send an administrative notification containing limited operational information, such as the reported user's display name, report type and reason.

Free-text report notes and reported-message content are not intentionally included in administrative email alerts.

If you enable notifications, RPGym may send notifications relating to features such as:

• friend requests; 
• friend messages; 
• quests; 
• special events; 
• other RPGym activity you choose to receive. 

Notification delivery may use third-party notification infrastructure.

Message notification previews do not need to contain the private message itself.

You can adjust notification preferences within RPGym and through your device settings.

We do not sell your personal information.

We may provide information to service providers that process information on our behalf where necessary to operate RPGym.

These may include providers for:

• database and cloud hosting; 
• authentication; 
• push notifications; 
• email delivery; 
• mapping and GPS functionality; 
• application infrastructure. 

These providers receive only the information reasonably required to perform their services and are subject to their own contractual and legal obligations.

We may also disclose information where reasonably necessary:

• to comply with law or legal process; 
• to protect the safety or rights of users or others; 
• to investigate fraud, abuse or security incidents; 
• in connection with a business sale, merger or restructuring, subject to applicable law. 

If you connect RPGym with services such as Apple Health, information exchanged with those services is also subject to their applicable platform rules and privacy practices.

RPGym does not control the privacy practices of third-party services.

We use reasonable technical and organisational safeguards designed to protect personal information.

These include measures such as:

• authenticated access; 
• database access controls; 
• row-level security; 
• server-authoritative social actions; 
• restricted moderation data; 
• secure transport; 
• controlled administrative access. 

No internet-connected system can guarantee absolute security.

We retain information only for as long as reasonably necessary for the purposes for which it was collected, including providing RPGym, maintaining security, resolving disputes and meeting legal obligations.

Different categories of information may have different retention periods.

When information is no longer reasonably required, we aim to delete or de-identify it.

Deleted information may remain temporarily in secure backups until those backups are rotated or deleted.

You may request deletion of your RPGym account through the account-management functionality provided in the app.

Account deletion may remove or de-identify information associated with your account, subject to information we reasonably need to retain for:

• fraud and abuse prevention; 
• security; 
• legal obligations; 
• dispute resolution; 
• moderation records where continued retention is justified. 

RPGym is not available to users under 16.

We do not offer parental-consent accounts for younger users.

If we reasonably learn that a user is under 16, we will delete or restrict the account and take steps to delete associated personal information.

If you believe an under-16 person is using RPGym, contact us at [rpgym-app@outlook.com].

RPGym and its service providers may process or store information in Australia or other countries.

Where personal information is processed outside your country, applicable privacy protections may differ from those in your location.

We take reasonable steps to use providers and safeguards appropriate to the information being processed.

Depending on where you live, you may have rights concerning your personal information, including rights to:

• request access; 
• request correction; 
• request deletion; 
• object to or restrict certain processing; 
• withdraw certain permissions or consent. 

Australian users may also have rights under applicable Australian privacy law.

To make a privacy request, contact us using the details below.

We may need to verify your identity before acting on a request.

You can manage certain permissions through your device, including:

• notifications; 
• location; 
• health-platform access. 

Revoking a permission may prevent the associated RPGym feature from working but should not prevent unrelated features from being used.

We may update this Privacy Policy as RPGym changes.

If a change materially affects how we handle personal information, we may notify users and, where appropriate, request acknowledgement of the updated policy.

The effective date above identifies the current version.

For privacy questions, requests or complaints:

RPGym
Privacy email: [rpgym-app@outlook.com]
General support: [rpgym-app@outlook.com]
Website: rpgym-app.com

If you make a privacy complaint, we will aim to investigate and respond within a reasonable period.