Perseid StudioPoliciesPerseid StudioPoliciesChallenge Tracker
Challenge Tracker is published by Perseid Studio ("we", "us"). For the account and social features we decide why and how personal data is used, so we are the controller of that data (the term used by the GDPR and the UK GDPR).
Google provides the infrastructure behind those features (Firebase) and processes the data for us. For the ads it shows, Google decides for itself how the data is used and is responsible for that (section 9).
Contact for everything in this policy: support@perseidstudio.app.
You do not need an account. Without one, these things stay in the app's private storage on your phone, and we cannot see them:
This data is removed when you uninstall the app, or when you use Settings > Your data > Delete all data. You can also export it yourself (JSON or CSV) from the same place.
If you have turned on Android's device backup for your Google account, Android may include the app's data in that backup, so your challenges, notes and photos can come back on a new phone. That is a setting of your phone and of Google, not something we control. The app's backup rules leave out the sign-in session and device identifiers, and the app clears any it finds after a restore, so after a restore you simply sign in again.
Even without an account, parts of the app talk to Google over the internet: the ads (section 9) and Google Play (purchases, in-app updates, review prompts). The app's Firebase components start together with the app, but your challenges and progress are not sent to Firebase unless you sign in.
You can sign in with Google, with Facebook, or with an email address and a password. Firebase Authentication (Google) runs the sign-in.
After your first sign-in you choose a display name (up to 40 characters) and a unique handle (3 to 20 letters, digits or underscores). We store these together with your language, your time zone name, your privacy choices (who can see your profile, whether badges are shown, which badges are hidden), and the dates the profile was created and updated. In the same step you can switch on "Show me in the global ranking". It is off by default.
While you are signed in, the app keeps a copy of your tracker data in your account, so that it can be restored and used on another phone. The copy contains:
The copy does not contain photos, videos, your avatar file, shop items, app settings or your Health Connect links. When you delete something, a "deleted" marker is synced so your other phones remove it too.
Sync runs automatically while you are signed in. If you sign out, sync stops and your data stays on your phone.
Account data is stored with Google Firebase: Authentication and Cloud Firestore. The Firestore database is located in the Google multi-region eur3 (Europe). See section 12 for transfers.
The social features work only for signed-in users. Nobody else can see your email address, notes, photos, videos, task values or Health Connect values. What others can see depends on what you use and on your visibility setting.
In Profile > Account > Who can see my profile you choose one of three levels. New profiles start as Friends. When you create your profile, the switch "Show me in the global ranking" is off. Turning it on makes your profile Public. The global boards in the app say so when you are not listed and let you turn it on.
A second switch decides whether your badges are shown. Public profiles are visible only to signed-in users of the app, not to the open web or search engines.
Your public profile contains your display name, handle, your avatar (a link to your Google or Facebook account photo, only if you use it as your avatar; photos you choose yourself are never uploaded), level, total XP, current and best streak, number of completed challenges, XP of this week and month, and your badges (unless hidden). It is updated automatically while you are signed in.
When you send or accept a friend request, you and the other person can see each other in the friend list. Friend requests are visible to the two people involved. Friends see your profile when it is set to Public or Friends, and you appear on the friends' leaderboard.
A group challenge has up to 20 members. Anyone who has the invite code can join while the group has room. Members can see the challenge setup (name, tasks and rules), each member's display name and handle, each member's progress in that group (current day, done today, streak, XP) and the emoji cheers members send each other.
While you are signed in and your profile is Public or Friends, the app creates short posts about your progress by itself: a finished challenge, a level up, a new badge (never one you chose to hide), a 7-day streak and every further 7 days of it, and a challenge you start. Each event is posted once and the number of posts per hour is limited. A post is stored in your own feed and in the feeds of your friends, except people you blocked or who blocked you. Set your profile to Private to stop all posts. You can react with an emoji and write comments of up to 280 characters. Reactions and comments are visible to the people who can see that post. You can delete your own comments at any time.
If you publish one of your challenges as a template, all signed-in users can see its name, description, tasks, rules, category, language, your display name and handle as author, how often it was copied and its average star rating. Personal data such as notes, progress and reminder times is not part of a template. Stars you give to other templates and your favourites are visible only to you (the average is public).
You can report a profile, post, comment or template, and block a person. Reports contain your user ID, what you reported, a reason you pick and the time. Only we can read reports. Blocking removes the friendship, stops the blocked person from viewing your public profile and from sending you friend requests, and hides them from your own search results.
Proof photos (and short proof videos, up to 15 seconds) are taken with your phone's camera app or picked with the system picker. The app opens these through Android's own screens, so it does not hold the camera, microphone or storage permissions.
The files are copied into the app's private folder on your phone. They are never uploaded by us and are not part of the synced copy, also when you are signed in. They leave your phone only when you share an image, save a file or export a backup with the system dialogs you choose. Share cards and before and after comparisons are made on your phone.
Health Connect is optional. You can link a measurable task (for example "Walk 8000 steps") to the matching Health Connect data, so the task completes itself when you reach the target.
Read-only access to five types of Health Connect data: steps, distance, exercise sessions, sleep sessions and hydration. The app never writes to Health Connect and does not use background or history access.
Our use of information received from Health Connect adheres to the Health Connect permissions policy of Google Play, including its Limited Use requirements: we use the data only to provide the user-facing feature you asked for, we do not transfer or sell it, we do not use it for advertising, and we do not read it by hand except where you ask us for support, where it is needed for security, or where the law requires it.
Open Profile > Settings > Health Connect in the app to link or unlink tasks and to stop syncing, or open Health Connect on your phone and remove the app's permissions at any time. More about Health Connect: developer.android.com.
An AI coach feature may be added later. We will update this policy before it processes any data.
challenge.perseidstudio.app, hosted by Cloudflare Pages (Cloudflare). The page sets no cookies and uses no analytics or trackers. Cloudflare's servers keep ordinary request logs (such as IP address) for operating and securing the service.The app contains the Google Mobile Ads SDK (Google AdMob) and can show ads. To show, measure and protect ads, Google may collect and use your advertising ID, IP address (which gives an approximate location), device and app information (such as model, Android version and app version), ad interactions and diagnostic data. This happens whether or not you have an account. We do not receive this data and do not put your challenges, profile or Health Connect data into ad requests. See how Google uses information from apps that use its services and the Google Privacy Policy.
Consent. In the European Economic Area, the UK and other regions where the law requires it, the app shows Google's consent form (UMP) when it starts, and does not request ads until you have answered. Where required, you can reopen it any time in Settings > About > Ad privacy choices.
Advertising ID. On Android you can reset it or opt out of ads personalisation in the phone's settings (Settings > Privacy > Ads).
The app can offer purchases (such as removing ads) through Google Play Billing. We never see your payment details. Google Play tells the app only whether a purchase is active.
The app uses Google Play for in-app updates and for the in-app review prompt. Google handles the data of those services under its own terms.
The app asks for notifications (optional), internet access (sync, ads, purchases), restart notice (to re-arm reminders), exact alarms (optional, so the timer and reminders ring on time), and, only if you use Health Connect, the five read permissions in section 6. It also declares the advertising ID permission for AdMob. It does not ask for location, contacts, camera, microphone or storage.
We do not use your data for automated decisions with legal effect, and we do not build advertising profiles ourselves.
We do not sell personal information. In the language of some US state laws, the identifiers that the ad SDK uses for ads may count as "sharing" for cross-context behavioural advertising. You can limit this with the ad choices described in section 9. We do not share health data with anyone.
Your Firestore data is stored in Europe (eur3). Google may process data in other countries, including the United States, for example for sign-in, hosting and ads. Where the GDPR or the UK GDPR applies, such transfers rely on the safeguards in Google's terms, which include Standard Contractual Clauses, or on another transfer mechanism recognised by law.
| Data | Where | Kept until |
|---|---|---|
| Challenges, progress, notes, photos, videos, settings | Your phone | You delete them, use "Delete all data", or uninstall |
| Sign-in record, profile, handle, synced copy, friends, groups, feed posts, comments, reactions, templates, blocks | Google Firebase (eur3 and Google's sign-in systems) | You delete the account (section 14). Items you delete earlier, such as a comment or a template, are removed at that time. Deletion markers used for sync are removed with the account. |
| Reports about content or people | Google Firebase | As long as needed for safety, moderation and legal claims. They are not removed when the reporter or the reported person deletes an account. |
| Emails you send us | Our mailbox | As long as needed to handle your request and to meet legal duties |
| Ad data, Google Play and hosting logs | Under Google's own policies |
After deletion, short-lived technical copies (such as backups and logs) may remain at Google for a limited time under Google's terms.
Deleting the account removes your profile, handle, public profile and the challenge cards on it, synced copy, friend connections and requests, blocks, favourites, feed posts and comments you wrote, your reactions, templates you published, the stars you gave to other templates (their averages are recalculated), groups you own, your membership, progress and cheers in other groups, and the sign-in account itself. The only exception is a moderation report (section 13). Full details are on the account deletion page.
Data on your phone stays until you remove it (Settings > Your data > Delete all data, or uninstall). Data held by Google for ads and by Health Connect is managed in your Google and Health Connect settings.
In the EEA, the UK and similar regions you have the right to access your data, correct it, delete it, restrict or object to its processing, receive it in a portable format, and withdraw consent. You can also complain to your data protection authority (in the UK, the Information Commissioner's Office).
In California and other US states with privacy laws you have the right to know what we collect and how we use it, to access and correct it, to delete it, and to opt out of sale or sharing. We do not sell personal information, and we do not discriminate against you for using these rights. The categories we handle are: identifiers (name, email, handle, user ID, advertising ID), app activity (progress, XP, ad interactions), user content (challenges, notes, templates, comments), approximate location (from the IP address, through ads), and, if you link tasks to Health Connect, fitness-related task values. We use the Health Connect values only to provide the feature.
How to use your rights: many are available in the app: edit your name and visibility under Profile > Account, export your data under Settings > Your data, and delete your account (section 14). For anything else, email support@perseidstudio.app from your sign-in address. We reply within 30 days. We may ask you to confirm who you are before we act, so that nobody can get another person's data.
Data between the app and Google servers is sent over encrypted connections (HTTPS/TLS). Access rules on the database let each person read and change only their own private data, and let others see only the public items described in section 4. Passwords are handled by Firebase Authentication. No system is perfectly secure, so please use a strong password and keep your phone locked.
Challenge Tracker is for people aged 18 and over. It is not directed to children under 13, and not to anyone below the age at which a person can consent to online services without a parent (13 to 16 in the EU, depending on the country). We do not knowingly collect data from them. If you believe a child has an account, email us and we will delete it.
We update this page when the app changes what it does with data. The effective date at the top shows the latest version. For important changes we will also tell you in the app or in the release notes.
Perseid Studio
Email: support@perseidstudio.app