Privacy Policy

1. Information We Collect or Generate

Depending on the features you use, the App collects or generates the following categories of information:

• Alarm, repeat-day, skip, volume, notification, speech, and departure-timer settings
• Squat counts, completion times, streaks, history, rewards, and selected display items
• Sign-in, profile, ranking, friend, and friend-request information
• RiseRep Adventure progress, battles, level, inventory, currencies, shops, and crafting data
• Product type, purchase token, purchase state, and verification results for Pro and Gem purchases
• Identifiers such as advertising IDs, IP address, ad interactions, diagnostic information, and consent status
• App Check or Play Integrity attestation data, request records, and fraud-prevention information

We receive this information from your input, from use of the App, or from third-party services such as Google Play, Firebase, and advertising SDKs.

2. Information Processed and Stored on Your Device

Alarm schedules, repeat days, one-time skips, selected sounds, volume, vibration and notification settings, squat history, departure-timer settings, display settings, and temporary ad or Pro state may be stored in local databases, files, or preferences. The App uses this information to provide features, restore alarms after reboot, and retry operations after failures.

If Android backup or device transfer is enabled, eligible data may be encrypted, transferred, and stored by the operating system or Google. Certain information that must be verified again, including the local Pro entitlement cache, is excluded from backup.

3. Accounts and Authentication

Google sign-in or email-and-password sign-in may be used for rankings, friends, cloud sync, and RiseRep Adventure. Through Firebase Authentication, we process a user ID (UID), display name, email address, authentication provider, and account status.

Passwords are managed by Firebase Authentication. We do not view or store passwords in plaintext. Your profile name, profile image or initial, selected reward, and related settings may be stored in the cloud.

4. Fitness Records, Rankings, and Friends

When signed in, total, daily, and weekly squat counts, personal bests, streaks, ranking position, reward unlocks, first-share completion, and related information may be stored in Firebase. We use this data for cross-device sync, ranking calculations, rewards, and prevention of duplicate submissions.

Friend features process friend lists, incoming and outgoing requests, public profiles, friend counts, and read or quota-management information. We may also store processing timestamps, event identifiers, and completion ledgers needed for reliable aggregation and duplicate prevention.

5. RiseRep Adventure Data

RiseRep Adventure processes the following cloud game data for each account:

• Stages, laps, bosses, remaining boss HP, attack counts, and clear status
• Shared level, EXP, Coins, Gems, materials, treasure chests, and rewards
• Characters, weapons, talismans, treasures, blueprints, equipment, and party loadouts
• Shop purchases, crafting, ad rewards, login rewards, and Pro benefits
• Friend support, support loadouts, requests, results, rate limits, and operational audit records

When you complete an alarm mission or free-squat session, the App may send a completion event ID, required and completed reps, completion time, and difficulty-related values to grant Adventure attacks or rewards and update rankings. Raw accelerometer streams are not uploaded to the cloud.

6. Pro, Gems, and Google Play Purchases

The one-time Pro purchase and the 100, 500, and 1,000 Gem products use Google Play Billing. We process the product ID, purchase token, order or acknowledgment status, purchase time, verification result, and associated user ID. Google Play handles payment credentials such as card numbers; we do not receive them.

We retain purchase-verification history to restore entitlements and prevent duplicate grants or fraud. When an account is deleted, direct links to the UID are removed, but hashed purchase-token data and an irreversible hash of a previous owner identifier may be retained where necessary for legal compliance, purchase restoration, fraud prevention, and dispute handling.

Gems, Coins, equipment, blueprints, and other virtual items have no cash, cryptocurrency, or property redemption feature.

7. Advertising, Rewarded Ads, and Consent

The free version displays banner, interstitial, and rewarded ads using Google AdMob, with InMobi used as a mediation partner for some ad delivery. Completion of a rewarded ad may be used to grant Gems or other in-app benefits.

Advertising SDKs may collect or share an IP address (which may estimate general location), Android advertising ID, App Set ID or other identifiers, app launches, taps, video views, device and app information, ad results, diagnostics, performance data, and fraud-prevention signals. We use Google User Messaging Platform (UMP) to request advertising consent and provide privacy choices where required.

Ads are generally disabled for Pro users. Limited network activity may still occur before purchase status is confirmed, during restoration, or for SDK initialization and legally required consent management.

8. Sensors, Audio, Speech, and Sharing

• Motion sensors: The App uses accelerometer or similar sensor readings on the device to estimate squat movements. Raw sensor readings are not normally stored in the cloud.
• Sounds and speech: The App can use a sound selected on the device, included app sounds, and the device text-to-speech engine for alarms and timers. It does not record audio or use microphone input.
• Sharing: Progress images may be generated locally and sent through Android sharing to an app you select. The App does not post automatically on your behalf.

The App does not request permissions for the purpose of accessing your camera, microphone recordings, contacts, SMS, call history, or precise location.

9. App Check, Play Integrity, and Security Data

We use Firebase App Check and Google Play Integrity to verify requests from legitimate app environments and to help prevent tampering, automation, fraudulent purchases, duplicate rewards, and server abuse. Google and our systems may process integrity or attestation tokens, app identifiers, request time and result, IP address, failure counts, and rate-limit information for these purposes.

10. Purposes of Processing

• Providing alarms, squat detection, departure timers, notifications, and speech
• Authenticating accounts and operating sync, rankings, friends, and Adventure
• Verifying, granting, and restoring Pro, Gem purchases, ad rewards, and game items
• Providing support and improving reliability, performance, and usability
• Detecting and preventing abuse, duplicate submissions, cheating, attacks, and purchase fraud
• Complying with law, Google Play policies, and valid requests from authorities

11. Information Visible to Other Users or Shared by You

Rankings, friends, and support features may display your display name, profile image or initial, selected reward, squat totals, rank, Pro badge, and Adventure support information to other users. Your email address and authentication credentials are not displayed on rankings.

If you use sharing, information is sent to the service you select under that service’s terms and privacy policy. Do not place confidential information or content that infringes another person’s rights in a public profile.

12. Third-Party Services and Disclosures

We do not sell personal information. The following providers process information under their own terms and policies as needed to provide the App:

• Google Play, Google Play Billing, and Google Play services: distribution, updates, purchases, reviews, authentication, and device services.
  Google Privacy Policy
• Firebase (Authentication, Cloud Firestore, Cloud Functions, and App Check): authentication, storage, synchronization, server processing, and abuse prevention.
  Privacy and Security in Firebase
• Google AdMob and User Messaging Platform: ad delivery, measurement, consent management, and fraud prevention.
  Google Advertising Policies
• InMobi: ad mediation, delivery, measurement, and fraud prevention.
  InMobi Privacy Policy

We may disclose information where required by law, to protect life, safety, or property, or where reasonably necessary to establish rights, investigate abuse, or respond to lawful requests from courts or authorities.

13. International Processing

Google, Firebase, AdMob, InMobi, and their affiliates may process information on servers in various countries. Such processing is subject to the safeguards and applicable laws described by those providers.

14. Retention

On-device data may remain until you delete it, clear the App’s storage, or uninstall the App. Cloud data is retained while needed to provide your account or features and for periods reasonably necessary to handle failures, abuse, disputes, or legal obligations. Expired requests, duplicate-prevention ledgers, and rate-limit records may be deleted or refreshed on operational schedules.

Purchase-verification history, security records, and legally required records may remain after account deletion for as long as needed for their stated purpose, with direct identifiability reduced where appropriate.

15. Account and Data Deletion; Backups

While signed in, you can delete your account from the App’s account settings. The process targets the Firebase Authentication account, profile, friend relationships and requests, ranking-related data, and Adventure progress, inventory, and support data. Related friend or request links held under other users are also removed where practicable.

If you cannot use the App, see the data deletion page. To delete only local data, use Android’s App info screen to clear storage.

After deletion, limited records may remain temporarily in rotating backups or continue where required for law, security, purchase restoration, fraud prevention, or dispute handling, as described above.

16. Your Choices and Rights

• You can change notification, exact alarm, full-screen intent, and overlay permissions in Android settings.
• Where advertising choices are required, the App’s privacy settings can open the UMP choices screen. You can reset or delete the advertising ID in Android settings.
• You can change profile and public information in the App and request account deletion in the App or through the deletion page.
• To exercise access, correction, deletion, restriction, or other rights available under applicable law, contact us below. We may need to verify your identity.

17. Minors

Minors should use the App with parental consent and supervision where appropriate. The App is not intended to knowingly obtain personal information from a child without legally required consent. A parent or guardian who believes information was collected improperly should contact us.

18. Security

We use reasonable safeguards such as encryption in transit, Firebase access controls, authentication, App Check, Play Integrity, rate limits, and purchase verification. No internet transmission or storage system can be guaranteed completely secure.

19. Changes to This Policy

We may revise this Policy to reflect changes in features, SDKs, law, or operations. Material changes will be announced on this page, in the App, or by another reasonable method. The effective date is shown at the top of this page.

20. Contact