Privacy Policy

Last updated: October 15, 2026

1. Information We Collect

RepBoss collects the following data when you use the App:

2. How We Use Your Data

We use your data to:

We process this data on the basis of your consent and our legitimate interest in operating the service (GDPR Art. 6(1)(a) and 6(1)(f)).

3. Camera & Pose Tracking

RepBoss uses your device camera to track exercise movements in real time. The camera feed is processed entirely on your device using on-device machine learning (Google MediaPipe). No video or image data is sent to or stored on our servers.

4. Advertising & AdMob

RepBoss uses Google AdMob for advertising and Google's User Messaging Platform (UMP) for privacy choices. These SDKs may process IP addresses that indicate approximate location, device or advertising identifiers, ad interactions, and diagnostic or performance data as described in Google's Privacy & Terms. Server-verified rewarded videos also send an account identifier and a reward reference to Google so the reward can be confirmed. Camera footage and pose landmarks are not sent to Google or our servers. Advertising requests are made only when UMP's current consent status permits them. On iOS, if you decline tracking permission, we request non-personalized ads. You can review your advertising privacy choices through "Privacy Options" in the App's Privacy Policy screen.

5. Data Sharing

We do not sell your personal data. Data is shared only with the service providers listed in this policy (Supabase for account and gameplay data storage, Google AdMob for advertising) and as required by law. Aggregated and anonymized data may be used for analytics and product improvement.

6. Data Retention

Your exercise and progression data is retained for as long as your account is active. You may delete your account at any time from the Locker in the App. Deletion removes your account and its associated personal gameplay data. Anonymous Tower conquest records retain only their position, cycle and completion date, without your name, portrait or account identifier. Reports are removed by a daily cleanup after 30 days; your blocks remain until you remove them or delete your account. Deleting a reported account or clan also removes reports targeting it. Your account data export includes your own reports and blocks, without other people’s reports or private review notes.

7. Your GDPR Rights

If you are in the EEA, UK, or Switzerland, you have the right to access, rectify, export, and erase your personal data, to restrict or object to its processing, and to withdraw consent at any time. You can exercise these rights by deleting your account in the App or contacting us at repbossrpg@proton.me. You also have the right to lodge a complaint with your national data protection authority (in Italy: Garante per la protezione dei dati personali).

8. Children's Privacy

RepBoss is not intended for children under 13. We do not knowingly collect data from children under 13.

9. Changes to This Policy

We may update this policy periodically. Continued use of the App after changes constitutes acceptance of the updated policy.

10. Contact

For privacy questions or requests, contact us at repbossrpg@proton.me.