Privacy Policy

1. Data Controller

Patrick Sommer
An Wortmanns Mühle 19, 59457 Werl, Germany
Email: adm.strivex@gmail.com
→ Imprint

2. Data We Collect

When you use the Strivex app, we collect the following data:

• Account data: Username, email address (optional), password (hashed with bcrypt)
• Activity data: Completed challenges, XP points, streaks, workout entries
• Step data: Daily step count (only when you enable health integration)
• Profile picture: If you upload one, it is stored in Supabase Storage
• Posts & comments: Content you share in the social feed
• Device data: Push notification token (when you enable notifications)
• Session data: For authentication (automatically deleted after 1 year)

3. Purpose of Data Processing

• Providing app features (challenges, leaderboard, social feed)
• Progress and streak tracking
• Push notifications (only when enabled)
• Email verification and password reset

4. Data Storage

All data is stored in Supabase PostgreSQL (EU region) and Supabase Storage. The provider is Supabase, Inc. All transfers are encrypted (HTTPS/TLS). Supabase is GDPR-compliant and provides EU Standard Contractual Clauses.

5. Legal Basis

Processing of your data is based on Art. 6(1)(b) GDPR (contract performance) and your consent (Art. 6(1)(a) GDPR) for optional features such as push notifications and health data integration.

6. Your Rights

• Access: You can request information about your stored data at any time
• Deletion: You can delete your account and all associated data directly in the app (Profile → Settings → Delete Account)
• Correction: You can edit your profile at any time
• Objection: You can disable push notifications at any time
• Data portability: Upon request, we will provide your data in machine-readable format

7. Third-Party Services

• Supabase (Database & Storage) — Privacy Policy
• Render (Backend Hosting) — Privacy Policy
• Resend (Email) — Privacy Policy
• Apple / Google (In-app purchases & Push) — their respective privacy policies

8. Cookies & Session Data

Strivex uses technically necessary session cookies for authentication. No tracking or advertising cookies are used.

9. Health Data

If you enable step integration, the app reads step counts from your health app (Apple Health) or Health Connect. This data is used locally only and is not permanently stored server-side — only the daily step count is synced for streak calculation.

10. Data Deletion

You can delete your account at any time in the app. All personal data will then be completely deleted within 48 hours. Session data is cleaned up daily. Inactive push subscriptions are automatically removed after 90 days.

11. Changes to This Privacy Policy

We reserve the right to update this privacy policy. For significant changes, we will notify you through the app or by email.

---