Privacy Policy

Last Updated: September 14, 2026

Introduction

This Privacy Policy describes how RingRivals ("we," "our," or "us") collects, uses, and protects your information when you use our mobile application (the "App"). RingRivals is a fitness competition platform that allows users to create and join global fitness competitions. RingRivals is operated by Eric Hardiman, based in New Jersey, USA, who is the data controller for the personal data described in this policy.

Information We Collect

Personal Information

• Account Information: Email address, display name, and optional full name. Guest accounts have no email; instead we store a device identifier generated on your phone so your guest data can be restored after a reinstall.
• Profile Data: Country and optional profile pictures and group pictures you choose to upload
• Health & Fitness Data: Health and fitness data from HealthKit (iOS) or Health Connect (Android) including workouts, calories burned, exercise minutes, stand hours, and activity ring data — for the date range you choose to import, which may include historical data (for example, the past year) or a custom range you select
• Competition Data: Your participation in competitions, scores, and rankings
• Content You Create: Competition and group chat messages, workout comments, and reactions
• Diagnostics: Crash reports and error logs (see "Crash Reporting and Diagnostics" below)

Authentication Data

• When you sign in with Apple (iOS) or Google (Android/iOS), we receive your email address and name (if you choose to share it)
• JWT tokens for secure authentication

Device Information

• Basic device information necessary for app functionality
• Push notification tokens for delivering app notifications

How We Use Your Information

We use your information solely for providing and improving the RingRivals experience:

• Competition Features: Display your fitness data in competitions and leaderboards
• Account Management: Maintain your profile and preferences
• Notifications: Send competition invitations and sync reminders
• Data Synchronization: Ensure your fitness data stays current across devices
• Privacy Controls: Respect your chosen privacy settings for what other users can see

Data Sharing and Disclosure

• We do not sell your personal information
• We do not share your data for advertising or marketing purposes. We share data only with the service providers listed below, who process it on our behalf to operate the App
• Competition Data: Other users can see your competition scores and rankings based on your privacy settings
• Legal Requirements: We may disclose information if required by law or to protect our rights

Third-Party Services

Authentication Services

• Apple Sign-In (iOS): For secure authentication
• Google Sign-In (Android/iOS): For secure authentication

Health Data Integration

• HealthKit (iOS): To access your fitness data with your permission
• Health Connect (Android): To access your fitness data with your permission

Support Requests

• Email: Support requests you submit (your username, email address, and message) are sent to our support inbox so we can respond. A copy is also delivered to us through an internal alerting tool. Support requests are visible only to us

Crash Reporting and Diagnostics

• Firebase Crashlytics (Google): We use Crashlytics to receive crash reports and error diagnostics so we can find and fix bugs. These reports include your account identifier, device model, operating system and App version, and technical details of errors (such as the API endpoint involved and error messages). This data is processed by Google on our behalf and retained for a limited period. We do not use any advertising, marketing, or product-analytics services

Push Notifications

• Apple Push Notification Service (APNS): For iOS devices
• Firebase Cloud Messaging (FCM): For Android devices

Amazon Web Services (AWS)

• Data Storage: We use AWS EC2 and S3 for secure data storage
• Security: All data is encrypted and protected according to AWS security standards

Data Storage and Security

• Location: Your data is stored securely on AWS servers
• Security Measures: All API calls require verified JWT tokens, and we implement industry-standard security practices
• Encryption: All data is encrypted in transit (HTTPS/TLS), and uploaded media stored in Amazon S3 is encrypted at rest
• Access Control: Strict access controls limit who can view your data based on your privacy settings

Your Rights and Choices

Data Control

• Account Deletion: You can delete your account at any time, which permanently removes all your data. To delete your account: open the app, navigate to the Home screen, tap your profile icon in the top-left corner, select Settings, and scroll to the bottom where you'll find the account deletion option
• Data Export: You can export all your health, fitness, and competition data
• Privacy Settings: Control what information other users can see
• Profile Pictures: Upload, change, or remove your profile picture at any time

Data Retention

• We retain your data only as long as your account is active
• Guest accounts that have not been used for 90 days may be deleted automatically, together with any imported health data. Deletion is deferred while a guest owns a competition that is still running or a group with other members.
• When you delete your account, your data is removed from our active systems immediately
• Residual copies may persist for a limited time in database backups and crash-diagnostic logs, which are purged automatically within approximately 90 days
• We do not retain data for marketing or analytics purposes

International Users and GDPR Compliance

RingRivals is available globally. For users in the European Union:

• Legal Basis: We process your health and fitness data on the basis of your explicit consent (Article 9(2)(a) GDPR), which you give when granting the App access to HealthKit or Health Connect. We process your account and profile data as necessary to provide the service you request (Article 6(1)(b))
• Withdrawing Consent: You can withdraw consent at any time by revoking the App's health-data permissions in your device settings or by deleting your account
• Your Rights: You have the right to access, rectify, port, or erase your personal data, and to lodge a complaint with your local supervisory authority
• Data Transfers: Data may be transferred to the United States (where our servers are located) with appropriate safeguards
• Contact: For GDPR-related requests, contact us at our support page

Children's Privacy

RingRivals is intended for users aged 13 and older. We do not knowingly collect personal information from children under 13. If we discover we have collected information from a child under 13, we will delete it immediately.

Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of any material changes through the app or by email. Your continued use of RingRivals after changes constitutes acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy or your data, please contact us at: