PRIVACY POLICY
Your data.
Plain and simple.
Effective September 24, 2026. This policy explains how Flap Fit handles information when you use the app and website. For privacy questions, contact Flap Fit Support at support@flapfitapp.com.
Information kept on your phone
Flap Fit stores your selected bird, game progress, scores, tracked training time, exercise history, and settings on your device. This local information is not sent to Flap Fit unless an optional online feature described below requires it. You can remove local information by clearing the app's data or deleting the app.
Camera and Record & Play
Camera access is required for all Flap Fit gameplay, including normal Play and Record & Play. The front camera estimates body landmarks and translates movement into bird movement. If you deny or revoke camera access, you cannot start a workout until you enable it in device settings. Pose estimation runs on your device using a model bundled with the app. During normal Play, Flap Fit does not record or upload camera images.
If you select Record & Play, Flap Fit can request microphone permission and create a video containing the camera view, game graphics, your voice, and workout sounds. The video remains in temporary app storage so you can use your device's share sheet. Flap Fit does not upload or receive the video or audio. A destination you choose processes the video under its own privacy terms. The temporary file is scheduled for deletion when you leave the result screen or begin another run. If the app crashes or deletion fails, it can remain locally until cleanup succeeds on a later app launch, foreground return or recording attempt. Your current recording remains available while you use the share screen. This cleanup does not remove copies you chose to send elsewhere.
App updates
In versions that support in-app updates, Flap Fit uses Expo’s EAS Update service to check for and deliver compatible updates. A check starts when you select Check for updates in Info; normal app entry does not automatically check for updates. The app sends Expo technical information such as a randomly generated identifier for this app installation, the operating-system platform, the installed update/runtime version and, if the app previously crashed, the previous crash message. As with other internet services, Expo receives the request’s IP address. This supports update delivery, compatibility and service operation. This integration does not send your camera images, recordings, exercise results, leaderboard name or advertising identifier to Expo, and does not connect the update identifier to your leaderboard or advertising profile. If an update is available, you can choose Update now or Later. Requested checks, downloads and reloads take place in the update screen before returning to gameplay.
Expo explains how it handles operating-system information, randomized update tokens and service logs in its privacy policy. Expo may process information outside Canada under that policy and its applicable service terms. Expo’s retention practices are separate from the competition retention periods below.
Optional online competition
You can play Flap Fit without using Compete. If you accept the Competition Terms and use Compete, Flap Fit creates an anonymous authentication identifier and processes your chosen player name, exercise category, leaderboard score, reports, blocks, and ordinary service or security logs.
We use this information to operate leaderboards, keep your anonymous profile working, enforce community rules, prevent abuse, investigate reports, secure the service, and comply with law. Player names and competition results can be public to other players. Camera images, Record & Play videos, and your complete local training history are not sent to the competition service.
Service providers and transfers
Supabase provides authentication, database hosting, and server functions for Compete. The website host delivers these pages. These providers may process ordinary account, request, security, and connection information where they and their subprocessors operate. We use service providers to operate Flap Fit, not to sell personal information.
We require third parties that receive personal information through Flap Fit, including service providers, advertising networks and SDK providers, to provide the same or equal protection of that information as described in this policy and required by Apple’s App Review Guidelines. We use provider data-protection terms, restrictions on permitted uses, and technical controls to protect the information shared with them. Relevant provider terms include Supabase’s data-processing terms, Google’s advertising data-processing terms, and, for iPhone and iPad only, RevenueCat’s data-processing terms.
Flap Fit includes Google AdMob for advertising. On iPhone and iPad, it also includes RevenueCat for ad-event reporting. The Android app does not include RevenueCat. Health and fitness information, competition profiles, camera frames, videos, and audio are not sent to these advertising integrations. We do not use health or fitness information for advertising, marketing profiles, or data brokerage.
AdMob may process IP addresses and approximate location, app or device identifiers, ad impressions and interactions, and crash and performance signals to deliver ads, measure advertising, prevent abuse, and operate its SDK. Flap Fit requests non-personalized ads and does not request the Android advertising ID or Apple's advertising identifier (IDFA). Non-personalized advertising still involves data processing. Google and participating authorized buyers and their ad-serving vendors may deliver the ads; Flap Fit transmits non-personalized and restricted-processing signals and does not enable cross-app advertising profiles. See Google's Privacy Policy and how Google uses information from partner apps.
On iPhone and iPad, when reporting is permitted, RevenueCat receives a separate anonymous customer identifier and ad-event information, including ad unit, placement, impression identifier, load/display/click events, and reported ad revenue and currency, to measure ad performance. It is not given your competition profile or workout data. Flap Fit's RevenueCat integration on iPhone and iPad is limited to ad reporting and does not retrieve purchase history or receipts. The Android app does not include RevenueCat. Flap Fit 1.0 offers no in-app purchases or subscriptions. See RevenueCat's Privacy Policy.
Open Info > Your setup to review the advertising disclosure and, on iPhone and iPad, separate reporting choices. Eligible users receive non-personalized advertising; Flap Fit does not offer a general ads-off switch. Previously saved advertising-data refusals remain respected and can be explicitly changed to allow advertising when eligible. On iPhone and iPad, you can stop RevenueCat reporting separately while independently permitted Google ads continue. Google supplies any required advertising form. When Google requires a privacy-options entry point, Info > Manage Privacy Choices opens Google's native form so you can review its available choices. Ad availability, reporting preferences and online competition participation are separate from completing setup.
For privacy-rights requests, including applicable access or deletion requests, use the available Google privacy controls or contact support@flapfitapp.com. Changing a privacy choice does not automatically delete information already held by a provider; historical-data requests are handled separately.
Existing advertising refusals remain respected. To report offensive or age-inappropriate advertising, open Info > Report an inappropriate ad, or email support@flapfitapp.com. Include the advertiser or app name, when the ad appeared, and why it is inappropriate. A screenshot of the ad is optional; do not send camera footage or sensitive personal information. Reports are reviewed so the ad can be investigated and blocked where appropriate.
Age, region, and Apple authorization
On Android, and on an iPhone or iPad whose system cannot provide Apple's age-range service, Flap Fit asks for the age band needed by the applicable country rules. The raw answer is saved only on the device. On iPhone and iPad, a locally supplied answer is not an Apple-verified age and cannot replace a required Apple check, a parent or guardian's authority, or a separate privacy choice. Google may receive age-appropriate ad request settings derived from the answer. You can update the answer in Info > Your setup.
Flap Fit uses Apple's age-range service where available and performs required Apple authorization checks. The app uses the returned range to decide which features and privacy rules apply; it does not ask for your birthday or send that range to advertising or competition providers. A network request to our existing website obtains a country signal. The app discards the raw network trace and IP text rather than saving it as a location history. The website host still processes ordinary connection information. A country signal is not proof of your state, province, residence, or age.
When needed, Info > Your setup asks for your province or territory, state or territory, or a regional Yes/No answer. Your selected province/state and regional answers are saved only on this device so they can be displayed again after restarting or returning to the app. You can update them in Info if your situation changes. A saved answer is your declaration, not a live location check. The app does not save precise location. Raw age and location answers stay on the device and are not sent to Google or the competition service, or to RevenueCat on iPhone and iPad. Google may receive age-appropriate ad request settings derived from those answers. A regional answer is not advertising or reporting consent. Closing without answering leaves the question unanswered.
Flap Fit is intended for ages 13 and older. Regional advertising restrictions do not exclude you from gameplay. After an initial completed run, finish any unanswered age or location setup questions and acknowledge the displayed notice before starting another run. You can reopen setup through Info > Your setup. Closing setup leaves unanswered questions and an unread notice incomplete. Required Apple authorization and the app’s minimum-age rule still apply. Camera access is required for all gameplay. Optional online competition has its own eligibility and privacy checks.
For required Apple authorization and withdrawal checks, our authorization service verifies a signed Apple app transaction and relevant Apple notifications. It retains a hashed app-transaction identifier, authorization or withdrawal status, notification identifier and timestamp. If you already have a competition account, an authenticated link may associate that account with the verified identifier. This information is used to enforce Apple authorization and withdrawal, not for advertising or purchase-history analytics. Raw signed transactions are processed for verification rather than stored in the consent records.
Retention and deletion
Local information remains until you clear app data or delete the app. Online profiles and current leaderboard scores remain until you delete the online profile. New leaderboard submissions do not create run-verification records. Legacy run-verification records, including duration information from earlier versions, expire six hours after creation and are removed by the daily cleanup after being expired for seven days. Friend challenge codes are not part of the launch app. Legacy friend-challenge records from earlier testing expire after 30 days and are removed with their attempts by the production cleanup process. Pending reports remain until review. Resolved moderation reports are removed after 180 days. If an associated account is deleted sooner, its user identifier is removed from the report. Provider security logs and backups follow the production provider's configured retention.
In the app, open Info and select Delete online profile to delete the anonymous competition account and its associated profile, scores, any legacy challenge records, and blocks. Local game progress stays on your device. If you no longer have the app, follow the account and data deletion instructions.
If you no longer have the app, email support@flapfitapp.com with your player name and your Online profile support ID. If both match the same profile, we will delete it within 30 days. Player names are public, so we need both.
Deleting the online competition profile does not automatically delete separate AdMob records, RevenueCat records from iPhone and iPad, provider logs, or backups. These providers retain information under their applicable policies and legal obligations. Apple authorization withdrawal and notification records are retained separately to continue enforcing withdrawn authorization; deleting a competition account removes its account link, not the underlying withdrawal record. For a request concerning advertising data, contact support and identify the provider and request type. We will explain available verification and provider request options without asking for workout recordings or identity documents.
Your choices and rights
You control camera permission in device settings, but camera access is required to play; normal Play also uses the camera. You may decline optional microphone permission and record without audio, use normal Play without making a recording, avoid Compete, block another player, report public competition content, revisit available ad privacy choices, or delete your online profile. Depending on where you live, you may also have rights to request access, correction, restriction, objection, or deletion.
For privacy questions or data requests, contact support@flapfitapp.com.
Children, safety, and changes
Flap Fit is intended for people aged 13 and older and is not directed to children under 13. Contact us if you believe a child under 13 provided information through Compete.
Flap Fit is a fitness game, not a medical device. It does not diagnose, treat, cure, or prevent any condition. We may update this policy when the app, service, or law changes. Material changes will be posted here with a new effective date, and renewed consent will be requested when required.
Support