Privacy Policy

Atomic Challenge (“we”, “us”) is a social challenge app. This policy explains what we collect, why we collect it, and the choices you have. The short version: we collect what the product needs to work, your challenge activity is visible to the people in your challenges by design, and we don’t sell your data.

The website

This website collects the email address you leave in a “notify me” form (used only to email you about the launch, removed on request), and standard analytics about how pages are used (Google Analytics and Vercel Analytics). Invite and challenge pages you open from a link are never sent to analytics.

What we collect

• Account details. Your email address, display name and optional avatar, used to create and secure your account.
• Challenge activity. Challenges you create or join, check-ins and their timestamps, proof you submit (photos or text), results such as completed or missed windows, streaks, XP and leaderboard positions.
• Device and usage data. Basic logs such as app version, device type and crash reports, used to keep the service reliable.

We do not collect your precise location, your contacts, or health data, and the app never reads your device clock to decide results. Timing is determined by our servers.

How we use it

• To run challenges: scheduling windows, validating check-ins, resolving results.
• To show leaderboards, streaks and XP to you and other participants.
• To send notifications you ask for, such as reminders before a window closes.
• To keep the service secure, debug problems and prevent cheating.
• To email you when the app launches, only if you joined the waitlist on this website.

What other people can see

Challenges are social. Participants in a challenge can see your display name, avatar, check-ins, proof submissions, results, streaks, XP and rank within that challenge. Public challenges, including their title and participant count, are visible to anyone browsing the app. Private challenges are visible only to people who have the link.

Where your data lives

Your data is stored with our hosting and authentication provider, Supabase, in their managed infrastructure. Photos you submit as proof are stored in private storage buckets and served only to participants of the relevant challenge.

Sharing

We don’t sell your personal data, and we don’t share it with advertisers. We share data only with the service providers that run the product (hosting, authentication, push notifications), and when the law requires it.

Retention and deletion

We keep your data while your account is active. If you delete your account, we delete your personal data within 30 days, except minimal records we must keep for legal or security reasons. Challenge results may remain visible to other participants in an anonymised form, so their leaderboards still add up. Step-by-step instructions are on the delete your account page.

Your rights

You can ask us to access, correct, export or delete your personal data, and we’ll respond within 30 days. Depending on where you live, you may also have rights under the GDPR, the Australian Privacy Act or the CCPA, and we honour them. See Contact below for how to reach us.

Children

Atomic Challenge is not directed at children under 13, and we don’t knowingly collect their data. If you believe a child is using the service, contact us and we’ll remove the account.

Changes

If we change this policy in a meaningful way, we’ll notify you in the app before the change takes effect. The latest version always lives at this page.

Who processes your data

We use a small number of providers to run the Service, each acting on our instructions: Supabase (accounts, database and photo storage), Amazon Web Services (our API server), Vercel (this website), Expo (push notifications), Resend (invite and support emails), PostHog (in-app product analytics, tied to a random identifier), and Sentry (crash and error reports from the app and the API). New sign-ups and new challenges also trigger an internal alert to our team chat that includes your email address; we don’t share it further.

Contact

Privacy questions and requests: atomicchallenge.dev@gmail.com. The data controller is Atomic Challenge.