PRIVACY POLICY
Effective date: 2026-03-08
App name: SkyGain
1. WHO WE ARE (DATA CONTROLLER)
This Privacy Policy explains how SkyGain, operated by Dzmitry Rybak (“we”, “us”, “our”), processes personal data when you use the SkyGain mobile application (“App”).
Data Controller: Dzmitry Rybak
Contact (privacy & support): skygainapp@outlook.com
Country: Poland
2. SCOPE
This Privacy Policy applies to personal data processed in connection with your use of the App, including account registration, authentication, workout tracking, social features, notifications, diagnostics, account deletion, and optional sharing features.
3. DATA WE COLLECT
We collect only the personal data reasonably necessary to provide, secure, maintain, and improve the App.
3.1 Account and profile data
We may collect:
- email address;
- nickname;
- password (stored only in hashed form);
- avatar, character, or other profile customization choices available in the App.
3.2 Authentication and account recovery data
We may collect and process:
- login identifier used to sign in, such as email address or nickname;
- password reset requests;
- verification codes, reset tokens, and related security metadata, such as request time, expiration time, and status.
3.3 Fitness and activity data
We may collect and process data you create in the App, including:
- workout logs, such as exercises, sets, repetitions, weights, and workout completion history;
- cardio activity data, such as distance, duration, calories, and pace;
- progress statistics and records generated from your activity data, such as max weight, max reps, estimated 1RM, max distance, XP, level, streaks, and weekly goals.
3.4 Social feature data
If you use social features, we may collect and process:
- friends, friend requests, friend connections, and blocked-user relationships;
- group membership;
- group names and group descriptions;
- activity data necessary to display social features, such as weekly workout count within groups.
3.5 Notification data
If notifications are enabled, we may collect and process:
- push notification token or device messaging identifier;
- notification preferences and settings;
- basic technical data needed to send, manage, or stop notifications.
3.6 Free-text content you submit
You may choose to submit limited free-text content, such as:
- motivation notes;
- group names;
- group descriptions;
- nickname text.
Please do not submit sensitive personal data, including medical or health information, in free-text fields unless it is clearly necessary and you choose to do so.
3.7 Technical, diagnostic, and security data
We may collect and process:
- device and app information necessary for troubleshooting, stability, and security, such as app version, device model, operating system version, and language;
- server and security logs, which may include IP address, timestamps, and request metadata;
- crash reports, error logs, diagnostics, session-related technical data, and performance data needed to detect, investigate, and fix errors.
3.8 Shareable workout summary content
The App may allow you to generate a shareable workout summary image based on your activity data, such as workout statistics, records, or similar training results.
If you choose to use this feature, the shareable image is generated locally on your device and shared only when you actively initiate sharing through your device’s available sharing options.
The App does not receive the destination of your share action through this feature and does not use it for share analytics.
Before the shareable image is generated or displayed, the App may request relevant first-party data from our services, such as workout history, exercise information, or related visual assets needed to render the shareable content.
You are not required to use this feature.
4. HOW WE USE YOUR DATA
We use personal data to:
- create and manage your account;
- authenticate you and allow login using your email address or nickname;
- send password reset codes and other account-security messages;
- store and display your workout history, progress, records, streaks, XP, and goals;
- enable social features, including friends, blocked-user relationships, and groups;
- display your nickname, avatar, character, level, XP, streak, and certain activity-related stats to other users where relevant to the App’s social features;
- send push notifications you enable, such as friend requests, group invites, daily goal reminders, and streak reminders;
- generate optional shareable workout summary images at your request;
- maintain security, prevent abuse, detect unauthorized access, and troubleshoot issues;
- monitor app stability, investigate crashes, and improve reliability;
- comply with legal obligations and enforce our Terms of Service.
We do not use your email address for marketing emails unless you separately opt in, where required by applicable law.
5. LEGAL BASES (EEA/UK, WHERE APPLICABLE)
Where applicable, we process personal data under one or more of the following legal bases:
- Contract necessity: to create and manage your account, authenticate you, provide workout tracking, social features, password recovery, notifications you request, optional sharing features you choose to use, and other App functionality you use.
- Legitimate interests: to maintain security, prevent fraud or abuse, protect the App and other users, investigate misuse, monitor errors, debug issues, and keep the service reliable.
- Consent: where required, for example for optional push notifications or other optional device-permission-based features.
- Legal obligation: where processing is necessary to comply with applicable law.
Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
6. REQUIRED DATA
Certain data, such as your email address, nickname, and password, are necessary to create and use an account.
If you do not provide the required data, some or all App features may not be available to you.
7. SHARING YOUR DATA
We do not sell your personal data.
We share data only where reasonably necessary to operate, secure, and support the App, including with service providers such as:
- MongoDB Atlas, for database hosting;
- Resend, for account-related email delivery, such as password reset codes;
- Expo services, including push notification services;
- Sentry, for crash reporting, diagnostics, and error monitoring.
We may also share personal data with:
- infrastructure, hosting, and storage providers;
- service providers helping us maintain, secure, or support the App;
- authorities or other parties where required by law or where necessary to protect rights, safety, users, or the integrity of the App.
These providers may process personal data on our behalf and under their own applicable privacy and data-processing terms, and we take reasonable steps to use providers that offer appropriate security and data protection measures.
We do not use third-party advertising SDKs at this time.
We do not use third-party analytics SDKs for product analytics or advertising profiling at this time, although we do use diagnostic and error-monitoring tools described in this Policy.
8. SOCIAL FEATURES
If you use social features such as friends or groups:
- your nickname, avatar, character, level, XP, streak, and certain activity-related information may be visible to other users where relevant to those features;
- your group membership may be visible within the relevant group;
- your weekly workout count may be visible within groups;
- certain social actions may trigger notifications to other users or to you, for example when someone sends a friend request or adds you to a group.
Your email address is not displayed to other users through the App’s social features.
Some social-feature data may be created as a result of actions taken by other users, such as sending you a friend request or adding you to a group.
9. PUSH NOTIFICATIONS
If you enable push notifications, the App may send notifications such as:
- account- or security-related messages;
- friend request notifications;
- group invite or group-addition notifications;
- daily goal reminders;
- streak reminders.
Push notifications may be managed in the App and/or through your device settings.
If you disable push notifications, we may still keep limited data necessary to remember your preferences or to ensure notifications are no longer sent to your device, where technically applicable.
10. DATA STORAGE AND INTERNATIONAL TRANSFERS
Your personal data is processed using service providers selected by us, including database, email delivery, notification, and diagnostic providers.
Some of these providers may process personal data in the European Economic Area (“EEA”), the United States, or other countries, depending on their infrastructure and services used.
Where personal data is transferred outside the EEA, we will rely on an appropriate legal mechanism where required, such as:
- an adequacy decision; or
- appropriate safeguards, such as the European Commission’s Standard Contractual Clauses.
You may contact us if you would like more information about the safeguards used for international transfers.
11. DATA RETENTION
We keep personal data only for as long as necessary for the purposes described in this Privacy Policy.
In general:
- account and profile data are kept while your account is active;
- workout, progress, streak, goal, friend, blocked-user, and group-related data are kept while needed to provide the App and until account deletion, unless a longer retention period is required by law or justified for security or dispute resolution;
- password reset codes, reset tokens, and similar security credentials are kept only for a limited period necessary to complete or secure the password recovery process;
- push notification tokens and notification preference data are kept while notifications are enabled, while the account is active, or until the token becomes invalid or is removed;
- technical logs, crash data, diagnostics, and security logs are retained only for as long as reasonably necessary for security, fraud prevention, troubleshooting, and service reliability, including under the retention settings of our service providers.
When you delete your account, we delete your personal data from active systems without undue delay after your deletion request is completed, except where limited retention is necessary for legal obligations, security, fraud prevention, dispute resolution, or temporary backup systems maintained by infrastructure or service providers.
Residual copies may remain for a limited period in backups or provider systems before being deleted or overwritten in the normal course.
12. ACCOUNT DELETION
You can request account deletion:
- in the App: Settings → Delete account; or
- outside the App: by emailing skygainapp@outlook.com with enough information for us to verify your request.
For security reasons, we may require password confirmation or other reasonable verification before completing deletion.
When your account is deleted, we will remove your user account and associated personal data from active systems, including relevant friendship and group membership links, except where limited retention is required as described in this Privacy Policy.
13. YOUR RIGHTS
Depending on your location and applicable law, you may have the right to:
- access your personal data;
- correct inaccurate personal data;
- delete your personal data;
- restrict certain processing;
- object to certain processing;
- receive your data in a portable format;
- withdraw consent where processing is based on consent;
- lodge a complaint with a supervisory authority.
To exercise your rights, contact: skygainapp@outlook.com
We may need to verify your identity before acting on your request.
We generally respond to privacy requests without undue delay and, where applicable, within one month, subject to extensions permitted by law.
14. AUTOMATED DECISION-MAKING
We do not use solely automated decision-making or profiling that produces legal or similarly significant effects on you within the meaning of applicable data protection law.
15. SECURITY
We use reasonable technical and organizational measures to protect personal data, including encrypted transport (HTTPS), password hashing, access controls, and measures designed to reduce unauthorized access, disclosure, alteration, or destruction of data.
However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
16. CHILDREN
The App is not designed specifically for children.
If you are a parent or guardian and believe that a child has provided personal data in a way that raises a concern, please contact us and we will take appropriate steps to review the issue and, where appropriate, delete the data.
We may limit or remove accounts or content where necessary to protect users, comply with law, or maintain the integrity of the App.
17. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time.
If we make material changes, we will post the updated version in the App and/or at the policy URL with a new effective date.
Your continued use of the App after the updated effective date means that the updated Privacy Policy applies to your use of the App.
18. CONTACT
If you have questions about this Privacy Policy or want to exercise your privacy rights, contact:
skygainapp@outlook.com