1. Introduction
ShowUp ("we," "our," or "us") respects your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application ("App").
By using the App, you consent to the practices described in this Privacy Policy.
2. Information We Collect
2.1 Information You Provide
- Account Information: Username, unique ShowUp code
- Profile Information: Profile picture (optional)
- Fitness Goals: Weekly commitment days, gym locations (name, address, coordinates)
- Challenge Data: Challenge participation, custom challenge settings, penalty information (if applicable)
2.2 Automatically Collected Information
- Location Data: GPS coordinates for check-in verification (only when you check in at a registered gym)
- Device Information: Device tokens for push notifications (FCM tokens)
- Usage Data: Check-in timestamps, gym visit history, streak information
2.3 Authentication Information
- Sign-In Methods: We support Apple Sign-In and Google Sign-In
- Authentication Data: User ID from Firebase Authentication (we do not store your email address or password)
3. How We Use Your Information
We use the collected information to:
- Provide and maintain the App
- Verify gym check-ins using location services
- Enable social features (friend connections, challenges, notifications)
- Send push notifications about friend check-ins and challenge updates
- Process in-app purchases and subscription management
- Improve the App and user experience
- Comply with legal obligations
4. Data Storage and Processing
4.1 Firebase Services
Your data is stored and processed using Google Firebase services:
- Firebase Firestore: User profiles, check-ins, friend relationships, challenges
- Firebase Storage: Profile pictures
- Firebase Authentication: User authentication
- Firebase Cloud Messaging: Push notification delivery
Firebase is operated by Google LLC. Data may be stored on servers located outside your country. By using the App, you consent to this transfer.
4.2 Local Storage
Some data is stored locally on your device using CoreData:
- Detailed check-in history
- Personal analytics
- Local app settings
5. Data Sharing and Disclosure
5.1 With Friends
When you connect with friends in the App, they can see:
- Your username and profile picture
- Your last check-in time and gym name
- Your current streak
- Your weekly check-in overview
- Challenge participation (if you're in a challenge together)
5.2 With Third-Party Services
We share data with the following third-party service providers:
- Google LLC (Firebase): Data storage, authentication, push notifications
- RevenueCat: In-app purchase and subscription management
These providers are bound by their own privacy policies and data processing agreements.
5.3 Legal Requirements
We may disclose your information if required by law or in response to valid requests by public authorities.
6. Your Rights (GDPR and CCPA)
6.1 Access and Portability
You can request:
- Access to your personal data
- A copy of your data in a portable format
6.2 Correction and Deletion
You can:
- Update your profile information in the App
- Request correction of inaccurate data
- Request deletion of your account and data
6.3 Right to Object and Restrict Processing
You can:
- Opt out of push notifications in your device settings
- Request restriction of processing of your data
6.4 California Privacy Rights (CCPA)
If you are a California resident, you have the right to:
- Know what personal information is collected
- Know whether your personal information is sold or disclosed (we do not sell your data)
- Opt out of the sale of personal information (not applicable, as we do not sell data)
- Access your personal information
- Request deletion of your personal information
- Non-discrimination for exercising your privacy rights
7. Account Deletion
You can delete your account at any time through the App settings. When you delete your account:
- Your user profile and account information will be deleted
- Your check-ins will be deleted
- Your friend relationships will be removed
- Your challenges and challenge invitations will be deleted
- Your profile picture will be deleted from storage
Note: Some information may remain in backup systems for a limited time as required by law or for legitimate business purposes.
8. Data Retention
We retain your personal information for as long as your account is active or as needed to provide services. After account deletion, we may retain certain information as required by law or for legitimate business purposes (e.g., fraud prevention).
9. Security
We use technical and organizational measures to protect your data, including:
- Encrypted data transmission
- Secure authentication methods
- Access controls
- Regular security assessments
No method of transmission or storage is 100% secure. Use the App at your own risk.
10. International Data Transfers
Your data may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. By using the App, you consent to such transfers.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of changes by:
- Updating the "Last Updated" date
- Posting a notice in the App
- Sending you an email (if applicable)
Your continued use after changes constitutes acceptance of the updated Privacy Policy.
12. Contact Us
If you have questions about this Privacy Policy or wish to exercise your rights, contact us at:
For EU residents: You also have the right to lodge a complaint with your local data protection authority.