Legal
Privacy policy
Last updated [date — TODO]. This policy explains what we collect, why, how long we keep it and what you can ask us to do with it.
Who we are
Not Bad. is operated by [Legal entity name — TODO], registered in [country — TODO] at [registered address — TODO]. For anything to do with your data, write to [privacy email — TODO].
What we collect
Account details you give us: [list — TODO]. Activity you record in the app: challenge progress, commitments completed, workouts, wellbeing entries. Device and diagnostic information: [list — TODO].
Body measurements, body-fat estimates and progress photos are private to your account. There is no sharing path for them, by design.
Why we use it
To run your account, show your progress back to you, award XP, operate the community, handle reports, and keep the service working. Legal bases: [contract / legitimate interests / consent mapping — TODO].
Processors we use
[Processor list and purpose — TODO: hosting, database, authentication, email, payments, analytics, crash reporting, push notifications.]
How long we keep it
[Retention schedule per data category — TODO.]
Your rights
You can ask for a copy of your data, ask us to correct it, ask us to delete your account, object to certain processing, or withdraw consent. Write to [privacy email — TODO] and we'll respond within [timeframe — TODO].
Children
Not Bad. is for people aged [minimum age — TODO] and over.
Changes
If this policy changes in a way that matters, we'll tell you in the app before the change takes effect.