🔐 Privacy Policy

1. Data We Collect

We may collect the following types of data:

• Health and Fitness Data: step count, walking distance, active time, workout sessions, estimated calories burned, and (if you connect a heart-rate sensor) heart rate. On iOS this data is read from and written to Apple HealthKit; on Android it is read from and written to Health Connect. Health data is only accessed with your explicit permission, which you can withdraw at any time in HealthKit / Health Connect settings.
• Account Data: your email address and a display name, used to create and sign in to your account (authentication is provided by Google Firebase).
• Social Features: your streak progress, friend connections, and cheers you send or receive are stored in our backend so these features work across devices.
• Purchase History: your subscription status (see section 3)
• Usage Data: App interactions, crash logs, feature engagement
• Device Information: Device model, operating system version

Daily step history and workout details are primarily stored locally on your device. We do not sell your data, and we do not use your data for advertising.

2. How We Use Your Data

• To provide core app functionality (e.g., track your steps, visualize streaks)
• To improve the app and user experience (e.g., detect bugs, optimize performance)
• To enable future features (e.g., personalized recommendations, paid features)
• To comply with legal obligations

3. In-App Purchases & Paid Features

If you choose to upgrade to premium features, purchases are handled through Apple (App Store) or Google (Google Play). We never store or access your payment details. Our subscription provider (RevenueCat) processes only your subscription status and anonymized purchase identifiers so your purchase works across reinstalls and devices.

4. Third-Party Services

We use third-party services to run the app: Google Firebase (authentication, database, and analytics), and RevenueCat (subscription management). These providers process data on our behalf in a way that respects your privacy and are contractually bound to follow GDPR requirements.

5. Your Rights (Under GDPR)

You have the right to:

• Access, correct, or delete your data
• Withdraw consent at any time
• Request a copy of your personal data
• Lodge a complaint with a supervisory authority

You can delete your account and its data directly in the app (Profile → Delete account) — see our account deletion page for details. You can also exercise any of these rights by contacting: 📩 hello@vimdigital.fi

6. Data Security & Retention

We take data security seriously. Data is encrypted where applicable and stored securely. We retain anonymized analytics data only for as long as necessary to fulfill the stated purposes.

7. International Transfers

Your data is stored within the European Economic Area (EEA) where possible. If transferred outside the EEA, we ensure appropriate safeguards are in place.

8. Updates

We may update this policy to reflect changes in our practices. Material changes will be communicated via app updates or email (if applicable).

📬 Contact

Vim Digital Oy

Y-tunnus: 3186318-3

Runeberginkatu 25 A 25, 00100 Helsinki, Finland

📧 hello@vimdigital.fi