Privacy Policy

Overview

Fitness Bingo (“we”, “our”, “the app”) is a multiplayer fitness bingo game. This policy describes what data we collect, why we collect it, and how you can control it. We collect only what is necessary to run the game and never sell or advertise with your data.

Data We Collect

When you sign in with Google and use the app, we collect the following:

• Activity data — your daily step count, distance walked or run (in km), and active minutes. This is fetched from the Google Health API each time you sync. When you create or join a game, we also fetch your last 30 days of activity to calibrate your board difficulty; this history is not stored beyond what is needed to generate the board.
• Google profile data — your display name and profile picture, used to identify you in multiplayer game lobbies.
• Game activity — which games you have created or joined, your bingo board state, tile completions, and game outcomes.

We do not collect your email address, heart rate, sleep data, weight, food logs, or any other health metrics beyond the three listed above.

How We Use Your Data

• To generate your personal bingo board with goals scaled to your activity level.
• To mark bingo tiles as complete when your daily stats meet their thresholds.
• To display your name and avatar to other players in games you join.
• To show your game history on your dashboard.

We do not sell your data, use it for advertising, share it with third parties for their own purposes, or use it for any purpose other than operating the bingo game.

Data Retention

Your data is stored for as long as your account is active. Daily activity syncs are retained to maintain game state accuracy. If you delete your account, all of your data — including your user profile, game history, boards, tiles, and daily syncs — is permanently deleted immediately and cannot be recovered.

Third Parties

We rely on the following third-party services to operate:

• Google Health (Google LLC) — used as our OAuth sign-in provider and as the source of your activity data. Your use of Google Health is governed by Google's Privacy Policy.
• Supabase — our database hosting provider. Your data is stored in a Supabase-managed PostgreSQL database. Supabase's data handling is governed by Supabase's Privacy Policy.
• Vercel — our application hosting provider. All HTTP requests to the app pass through Vercel's infrastructure, which may retain standard server logs (IP addresses, request paths, timestamps) subject to Vercel's Privacy Policy.

We do not use analytics services, advertising networks, or any other third-party data processors beyond the three listed above.

Your Rights

You have the right to access, correct, or delete your data at any time:

• Delete your account — use the “Delete account” option on your dashboard to permanently erase all your data from our systems.
• Revoke access — you can revoke our access to your Google Health data at any time through Google account permissions. Revoking access will prevent future syncs but does not delete data already stored in our system; you must also delete your account for full removal.

Cookies and Sessions

We use a single encrypted session cookie (fitbit_bingo_session) to keep you signed in. This cookie contains only your user ID and expires after 30 days. We do not use tracking cookies, advertising cookies, or third-party cookies.

Contact

If you have questions about this privacy policy or your data, contact us at skybjohnson@gmail.com.