Privacy Policy
<h1>XFitNest Privacy Policy</h1>
<p class="draft">Version 1 (draft) — placeholder copy pending final legal review (D-033). This page describes how XFitNest handles your data and will be updated before public launch.</p>
<h2>Who we are</h2>
<p>XFitNest is a GPS-based fitness game: you walk, run, or cycle in the real world, and your route claims territory on a shared map. This policy explains what we collect, why, and the control you have over it.</p>
<h2 id="location-data">Location Data</h2>
<p>Recording an activity is the core of XFitNest, so location is the most sensitive data we handle, and we are explicit about it:</p>
<ul>
<li><strong>What we collect:</strong> your device's precise GPS location — latitude, longitude, timestamp, accuracy, speed, and altitude — while an activity is recording, together with motion-sensor samples used to verify the activity method.</li>
<li><strong>Background collection:</strong> so a run or ride is never lost when your screen locks or you switch apps, XFitNest continues to record your location <strong>in the background</strong> while an activity is in progress. Android shows a persistent notification and iOS the standard indicator the entire time; recording only ever runs between the moment you tap <em>Start</em> and the moment you tap <em>Finish</em>. XFitNest never tracks your location when you are not recording.</li>
<li><strong>Why:</strong> to draw your route, compute your stats, award territory, and verify — server-side — that an activity is a genuine walk, run, or ride and not a spoof.</li>
<li><strong>What others can see:</strong> the hexagonal territory cells you claim are public — that is the game. Your actual <strong>route lines are not</strong>: you control their visibility (everyone, followers, or only you), and any route passing through a privacy zone you set around home or work is hidden from everyone but you.</li>
<li><strong>Privacy zones cover your territory too.</strong> A zone around home or work does more than hide the line through it: <strong>you never claim a territory cell inside your own zone</strong>, and creating a zone gives up any cells you already held there. Nothing inside it is published with your name on it.</li>
<li><strong>Retention:</strong> we keep a raw archive of an activity's points so a verification decision can be re-checked or appealed. You can export or permanently delete your activities and your account from inside the app at any time.</li>
</ul>
<h2 id="health-data">Health & fitness data</h2>
<p>XFitNest computes fitness data from your activities, and — only if you connect it — reads some from your phone's health store (<strong>Health Connect</strong> on Android, <strong>Apple Health</strong> on iOS):</p>
<ul>
<li><strong>What we compute:</strong> distance, duration, pace, elevation and an estimated calorie burn, worked out on our servers from the route you recorded. Your height, weight, gender and date of birth feed the calorie estimate and nothing else.</li>
<li><strong>What we read from your health store, and only with your permission:</strong> <strong>heart rate</strong> (average and maximum), <strong>step count</strong>, <strong>total calories burned</strong> and the <strong>exercise route</strong> attached to a workout you choose to import. Nothing is read until you grant the permission, and nothing is read in the background — an import happens when you ask for one.</li>
<li><strong>Why:</strong> to show you your own activity as completely as your phone recorded it. Heart rate and steps are <strong>never</strong> used to award territory, rank a leaderboard, verify an activity, or target anything at you. Territory comes from the route and the route alone.</li>
<li><strong>What others can see:</strong> <strong>nothing.</strong> Heart rate and step counts are returned only to the account that owns the activity — they are not on public profiles, the feed, leaderboards, or any other player's view of your activity. An imported activity arrives set to <em>only me</em> and stays there until you change it yourself.</li>
<li><strong>We do not sell it, share it, or use it for advertising</strong>, and we do not pass it to any third party. Health data we read from Health Connect or Apple Health is used only for the purposes named on this page.</li>
<li><strong>Export and deletion:</strong> heart rate, steps and the source of every imported activity are included in your data export. Deleting an activity deletes them with it; deleting your account erases them permanently — we keep no separate store of health data.</li>
</ul>
<h2>Account & profile data</h2>
<p>We store your email, handle, and profile details. Optional fields such as height, weight, gender, and date of birth are private by default, used only for your own calorie and stats estimates, and never shown on public profiles, the feed, or leaderboards.</p>
<h2>How we use your data</h2>
<p>To run the game (territory, leaderboards, the feed), to keep it fair (anti-cheat verification), to send the notifications you opt into, and to support your account. We do not sell your data, and there are no ads in XFitNest.</p>
<h2>Your rights</h2>
<p>You can export your data (activities as GPX plus an account file) and delete your account from Settings. Deletion runs a grace window and then permanently erases your personal data, releasing your territory back to neutral.</p>
<h2>Contact</h2>
<p>Questions about this policy or your data: support@fitnest.app.</p>