FitRival privacy policy
FitRival ("the app") is published by Sage Arbor (the "Developer"). This policy describes what data the app collects, where it goes, and how to delete it.
Data collected
The app collects the following data only when you actively enter it:
| Type | Examples | Stored where |
|---|---|---|
| Body measurements | weight (kg), body-fat %, date, notes | On your device (Hive) + the developer's Google Sheet only if you enable cloud sync for a group |
| Goals | target weight, target body-fat %, target date | Same as above |
| Friend records | names + optional email + optional phone | On your device only — friend records are not uploaded |
| Workouts | exercise names, set reps/weights, durations, notes | On your device only |
| Apple Health / Health Connect imports | weight + body-fat % imported with explicit OS permission | Same path as manual entries above |
| Challenge posts | a number (e.g. miles, reps), optional caption, optional small photo thumbnail, optional photo/video link, optional location (see below) | On your device + the developer's Google Sheet for the group running the challenge |
| Profile photo (optional) | a small avatar you take or pick when you tap "Set my photo" | On your device + the developer's Google Sheet for groups you sync with |
The app does not collect: IP addresses, device identifiers, advertising IDs, contacts in bulk, or any analytics events. Photos and location are collected only for the specific post or avatar you attach them to — never scanned from your library, never tracked in the background.
Location on challenge posts (opt-in, per post)
When you log a challenge update you can tap "Add location" to put the post on the group's map. This is entirely optional, decided per post:
- Nothing is attached unless you open the location picker and tap Use.
- By default the shared coordinate is approximate — rounded to roughly 1 km, so the post shows the neighborhood, not an address.
- A precise spot is shared only if you switch on "Exact pin" in the picker.
- The app never reads your location in the background, and never attaches it to a post automatically.
A post's location is visible to the members of that group (it syncs through the same Google Sheet as the rest of the challenge feed). Deleting the post in the app deletes its location from the Sheet as well.
Cloud sync (opt-in, per-group)
When you press "Enable cloud sync" on a group (or paste a friend's join code), that group's body measurements, goals, and challenge activity (posts, scores, reactions, avatars — including any photo thumbnails and opt-in locations on posts) are written to a Google Sheet owned by the Developer. Rows for different groups are isolated by per-group capability tokens — a secret paired with each group's ID. The Sheet's contents are not visible to anyone who does not possess a given group's join code.
You can disable cloud sync for a group at any time via the "Unlink" action. Disabling stops further pushes/pulls but does not delete the rows already in the Sheet — see Deletion below.
Sharing
The Developer does not sell or share your data with third parties. The Google Sheet that holds cloud-synced data is hosted on Google Drive under the Developer's Google account; access is restricted to the Developer and to anyone who holds your group's join code.
Deletion
- On-device data: uninstall the app from your phone or desktop. All Hive data is removed with the app.
- Cloud-synced data: email sophie.arborbot@gmail.com with the join code(s) of the group(s) you want to remove. The Developer will delete the matching rows within 14 days.
Children
FitRival is not intended for children under 13. Do not use it if you are under 13.
Changes
Material changes to this policy will be reflected in the "Last updated" date above and noted in the App Store / Play Store changelog.
Contact
Questions: sophie.arborbot@gmail.com