Challenge Me — Privacy Policy
Last updated: 16 July 2026
Challenge Me is a group fitness-challenge app. You join a private group, take on challenges, and
record short videos as proof that other members of your group review. This policy explains what the
app collects, why, and what control you have over it.
What we collect
- Account details — your email address, display name, and a securely hashed
password. Your email is used to sign you in, verify your account, and reset your password.
- Videos and photos you record — the proof videos you submit to challenges, and
your profile picture if you set one.
- Camera and microphone — used only while you are actively recording a
proof video in the app. The app does not record in the background, and does not access your
camera or microphone at any other time.
- Activity within your groups — the challenges you create or complete, your
comments, the approvals or rejections you give, and the statistics derived from them
(streaks, badges, exercise totals).
- Notification token — a Firebase Cloud Messaging identifier for your device,
so we can send you push notifications.
- Diagnostic reports — when the app hits an error or crashes, it sends us a
technical report (error message, screen, device model, app version) so we can fix it. These
reports are not used to build a profile of you and are not shared with advertisers.
What we do not do
- We do not sell your personal data.
- We do not share your data with advertisers, and the app contains no ads or third-party
advertising or analytics SDKs.
- We do not track your location.
- We do not access your photo gallery except for images you explicitly pick.
Who can see your videos
Your proof videos and comments are visible to the members of the groups you belong to — that is
the point of the app. They are not public, are not indexed by search engines, and are not shown to
anyone outside your groups.
Service providers
We use a small number of third parties strictly to operate the service:
- DigitalOcean — hosts the server and stores the database and uploaded media.
- Google Firebase Cloud Messaging — delivers push notifications.
- Brevo — sends transactional email (address verification, password reset). Brevo
receives your email address for this purpose only.
How long we keep it
Your account data and videos are kept until you delete them or delete your account. When a group
owner deletes a group, its challenges and media are deleted too. Diagnostic reports are kept only as
long as needed to diagnose the problem.
Your rights and choices
- Delete individual content — you can delete your own proof videos and comments
from within the app at any time.
- Delete your account — see the account deletion
page for exactly what is removed and how to ask. We action requests within 30 days.
- Access or correct your data — email us at the address above.
- Notifications — you can turn push notifications off in the app's settings or
in your device's system settings.
- Camera and microphone — these are permissions you grant, and you can revoke
them at any time in Android's system settings. The app's recording features will stop working,
but the rest of the app will continue to function.
If you are in the EU or UK, the GDPR gives you the right to access, correct, export, or erase your
personal data, and to object to its processing. Contact us at the address above to exercise any of
these rights.
Children
Challenge Me is not directed at children under 13, and we do not knowingly collect data from them.
If you believe a child has given us personal data, contact us and we will delete it.
Security
All traffic between the app and our server is encrypted over HTTPS. Passwords are stored hashed,
never in plain text. No system is perfectly secure, but we take reasonable measures to protect your
data.
Changes to this policy
If this policy changes materially, we will update the date at the top of this page and, where
appropriate, notify you in the app.
Contact
Questions, requests, or complaints: henny.cz@gmail.com