🔒 SweatLock Privacy Policy

Effective Date: December 26, 2024 | Last Updated: March 2025

            Summary: SweatLock processes camera data locally on your device for exercise detection. We do not store, record, or transmit your camera footage. Basic profile and exercise stats are synced to Firebase to preserve your progress across devices. You can delete your account and all data at any time.
        

1. Introduction

Welcome to SweatLock ("we," "our," or "us"). SweatLock is a fitness discipline application that requires users to complete physical exercises before accessing social media apps. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application.

By using SweatLock, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Camera Data (Required Permission)

            Important: Camera access is used ONLY for real-time pose detection during exercises. All processing happens locally on your device using Google ML Kit. No images or videos are ever recorded or transmitted.
        

2.2 Account & Profile Data (Firebase)

When you use SweatLock, the following data is synced to Firebase to preserve your progress across devices:

Data	Purpose	Storage
Total reps completed	Progress tracking & badge tiers	Firebase Firestore
Current & max streak	Streak badges & leaderboard	Firebase Firestore
Total unlocks	Statistics	Firebase Firestore
Willpower sessions	Badge system	Firebase Firestore
Sweat Score	Ranking & leaderboard	Firebase Firestore
Username & avatar	Profile display	Firebase Firestore
Email & name (Google only)	Account identification	Firebase Firestore
Firebase Anonymous UID	Account linkage	Firebase Auth

2.3 Local-Only Data (Never Transmitted)

Data	Purpose	Storage
Hidden badge progress	Secret achievements	Device only
Blocked app list	App blocking functionality	Device only
Hard mode / settings	App preferences	Device only
Daily session count	Usage limits	Device only

2.4 Anonymous Analytics Data

We collect anonymous, aggregated data to improve our application:

App crashes and errors (via Firebase Crashlytics)
Feature usage patterns (via Firebase Analytics)
Device type and OS version

2.5 Advertising Data

We display advertisements through Google AdMob. AdMob may collect advertising ID and general region for ad personalization. You can opt out via device Google settings.

3. Authentication Methods

SweatLock supports two authentication methods:

Anonymous Auth: Automatically created on first launch. No email required. Data is tied to the device and UID.
Google Sign-In: Optional. Links your Google account for cross-device sync and data recovery. Email and display name are stored.

4. How We Use Your Information

Core Functionality: Detect exercises and count repetitions
Progress Tracking: Show exercise history, streaks, and badges
Leaderboard: Display your Sweat Score ranking against other users
Badge System: Award tier upgrades and hidden badges based on activity
Cross-Device Sync: Restore progress if you reinstall the app
App Improvement: Fix bugs and improve performance
Advertising: Display relevant ads to support free app access

5. Data Sharing and Disclosure

We do NOT sell your personal data.

We share data only with:

Firebase / Google: For authentication, database, analytics, and crash reporting
Google AdMob: For advertising purposes
Leaderboard: Your username, avatar, and Sweat Score are visible to other SweatLock users on the leaderboard
Legal Requirements: If required by law

6. Data Retention

Firebase data: Retained until account deletion is requested
Local data: Stored until app uninstall or "Clear Data" in device settings
Analytics data: Retained by Firebase per their policies (typically 14 months)
Camera data: Never stored — real-time only

7. Account & Data Deletion

You have the right to permanently delete your account and all associated data.

Option 1 — In-App Deletion (Recommended)

Open SweatLock
Go to Settings tab
Scroll to bottom → tap "Delete Account"
Confirm deletion

This permanently deletes your Firebase Auth account, all Firestore data (profile, stats, badges, leaderboard entry), and clears local SharedPreferences.

Option 2 — Web Request

If you cannot access the app, submit a deletion request here:

Request Account Deletion

We will process your request within 30 days and confirm via email.

Option 3 — Clear Local Data Only

Device Settings → Apps → SweatLock
Tap "Clear Data" or "Clear Storage"

Note: This clears local data only. Firebase data persists until full account deletion.

8. Your Rights

Access: View your data within the app
Deletion: Delete account via in-app or web request
Correction: Edit username and avatar in Profile settings
Opt-out of ads: Via Google Settings on device
Revoke permissions: Via device settings (app functionality may be limited)

9. Data Security

Firebase Firestore security rules prevent users from reading or modifying other users' data
Users cannot decrease their own stats (anti-cheat protection in Firestore rules)
HTTPS for all network communication
Camera processing is 100% on-device

10. Third-Party Services

Service	Purpose	Privacy Policy
Google ML Kit	On-device pose detection	ML Kit Terms
Firebase Auth	Anonymous & Google authentication	Firebase Privacy
Firebase Firestore	User data storage	Firebase Privacy
Firebase Analytics	Anonymous analytics	Firebase Privacy
Firebase Crashlytics	Crash reporting	Firebase Privacy
Google AdMob	Advertising	Google Privacy

11. Children's Privacy (COPPA)

Age Restriction: SweatLock is intended for users aged 13 and older.

We do not knowingly collect personal information from children under 13. If you believe your child has used SweatLock, contact us immediately at tungaeddystudio@gmail.com and we will delete all associated data.

12. GDPR (European Users)

If you are in the EEA, you have rights under GDPR including access, rectification, erasure, restriction, portability, and objection. To exercise these rights, contact us or use the account deletion feature.

13. CCPA (California Users)

California residents have rights to know, delete, and opt-out of sale of personal information. We do not sell personal data. Contact us to exercise your rights.

14. Changes to This Policy

We may update this Privacy Policy. Changes take effect immediately upon posting. Significant changes will be communicated via in-app notification.

15. Contact Us

Email: tungaeddystudio@gmail.com
Developer: TungaEddyStudio
Data Deletion: delete-account.html
Response Time: Within 30 days