Privacy Policy

WODXP is developed and operated by Pontus Melin, based in Sweden. If you have questions about this policy or your data, you can contact us at:

Email: pontus.melin@gmail.com

2.1 Account Information

• Email address (used for login and account recovery)
• Username
• Password (stored securely as a hashed value by our authentication provider — we never see or store your plain-text password)
• A record that you confirmed you meet the minimum age (16) and accepted our Terms of Service, including the date and version. The year of birth you enter at registration is used only for this check and is not stored.

2.2 Fitness & Activity Data

• Workouts you log (exercises, weight, reps, sets)
• Personal bests and training history
• Experience points (XP), levels, and streaks
• Boss challenge attempts and results (if applicable)

2.3 Social Data (if you use social features)

• Friends/connections you add within the App
• Challenges sent or received between users
• Leaderboard rankings

2.4 Information We Do Not Currently Collect

• We do not use third-party advertising trackers.
• We do not collect precise location data.
• We do not access your device's camera, microphone, or contacts.
• We do not currently process payments (this section will be updated if paid features are introduced).
• The App's BMI calculator (age, gender, height, weight) runs entirely on your device. Those values are never sent to our servers. To save you re-typing them, the App remembers them in your device's local browser storage until you change them or tap "Clear saved" (or clear your browser data).

We use the information described above to:

• Create and manage your account
• Save and display your workout history, progression, and stats
• Calculate XP, levels, and streaks
• Power social features such as leaderboards and friend challenges (if enabled)
• Maintain the security and functionality of the App
• Communicate with you about your account (e.g., password resets)

We do not sell your personal data, and we do not share it with third parties for advertising or marketing purposes.

Your data is stored using Supabase, a third-party database and authentication provider, hosted in the European Union. Supabase acts as our data processor and maintains its own security and privacy practices, available at supabase.com/privacy.

We take reasonable technical measures (such as access controls and encryption in transit) to protect your data, but no system can guarantee complete security.

Depending on where you live, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Delete your account and associated data
• Export your data in a portable format
• Object to or restrict certain processing of your data

If you are located in the European Economic Area (EEA), these rights are provided under the General Data Protection Regulation (GDPR). To exercise any of these rights, contact us at pontus.melin@gmail.com. We will respond within a reasonable timeframe, and no later than required by applicable law.

You can delete your account directly in the App under Profile → Delete account. This permanently removes your account and all data linked to it, including your workout history, progress, and friend connections. You can also email us at pontus.melin@gmail.com to request deletion.

We retain your account and fitness data for as long as your account is active. If you delete your account, we will delete or anonymize your personal data within 90 days, except where we are required to retain it for legal or security purposes.

The App is not intended for children under the age of 16. When you register we ask for your year of birth and do not create an account if you are under 16. We use the year only for this check and do not store it; we keep only the confirmation that you meet the age limit. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, please contact us so we can remove it.

If WODXP is sold, merged, reorganized, or transferred, in whole or in part, your personal data may be transferred to the new owner as part of that transaction. This is limited to the data needed to keep running the App for you, and the new owner may only use it for the purposes described in this policy.

The new owner becomes responsible for your personal data (the data controller) and must follow this policy, or tell you about any changes before they apply to you, as described in section 9.

We will inform you in advance through the App or by email, before the transfer takes effect. You can delete your account before the transfer, and your data will then not be transferred (see section 5).

Our Terms of Service also apply when you use the App.

We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the App or by email before the changes take effect. The "Last updated" date at the top of this document will always reflect the most recent version.

Pontus Melin

Email: pontus.melin@gmail.com