SweatYet? Privacy Policy
Effective date: October 18, 2026
SweatYet? is a fitness accountability application operated by Bridgebranders LLC. This policy describes how we process information when you use the app and related support services. Feature availability varies by app version. Apple Health and Gym Buddy messaging apply when those features are available in your installed version and you choose to use them.
1. Information We Collect
We process your phone number for phone authentication, or email address when you use email login; account identifiers; display name; username; and any optional nickname, bio or profile photo you provide. We process Sweat photos, Clips and recorded microphone audio, posters, captions, capture metadata, Crew membership and roles, invitation and Gym Buddy connection records, reactions, Challenges, Calendar plans, activity history, timezone and Sweat preferences. We process Founding Crew eligibility, allocation records and temporary benefit expiration. Safety records include reports, optional explanations, blocks, suspensions and restricted moderation actions.
If you enable notifications, we process installation identifiers, push tokens, platform, preferences, delivery and notification-opening records. Information emailed to support is received through our support mailbox.
Crew members can add text comments to PHOTO/CLIP posts and shared Health activity cards. We store comment text, its author/account, its Crew and post association, and timestamps to provide comments and enforce safety rules. Reports may include a reason, an optional explanation and a restricted snapshot of the specifically reported content.
When you explicitly share daily activity, we store only your selected available totals and the card’s activity label, day, timezone and as-of timestamp, linked to your account and the chosen Crew or private conversation. Crew activity reactions include the reacting account, selected emoji and card association.
2. How We Use Information
We use data for authentication, profiles, private Crew and Buddy features, workout proof and explicitly shared Health activity, invitations, Challenges, planning/history, enabled notifications, Founding Crew allocation, safety, account deletion and service operation. We do not have an active third-party analytics or advertising-tracking SDK integration. Notification-opening records support routing and operation. Health data and message text are not used for advertising or tracking.
Optional Apple Health
Apple Health is optional and is not required for signup or participation. With your permission, we read workouts, active energy, steps and walking/running distance. The previous 30 days of recorded workouts are available for private viewing.
Today’s Activity displays available steps, walking/running distance and active calories for the iPhone’s current local day. Missing or unreadable values are shown as unavailable. SweatYet? cannot determine which Health read permissions were denied.
Daily totals and unshared workout details remain in device memory unless you explicitly save eligible workout credit or confirm sharing selected statistics. The private screen clears its displayed data when backgrounded. SweatYet? does not write to Apple Health, read heart rate or routes, or perform background Health synchronization.
You may explicitly save an eligible recorded workout as a completed daily Sweat. We store your initial Health connection time, a per-account hash of the stable workout identifier, a retry fingerprint and completion-day/timestamp/timezone metadata to apply eligibility and prevent duplicate credit. Workouts must be at least 10 minutes, not manually entered, and completed after the initial connection time. Imported Health records are recorded activity, not independent verification of exertion. Multiple workouts and PHOTO/CLIP proof do not create additional daily completion or streak credit for the same local day. Existing proof records are preserved.
You can share selected statistics from a recorded workout or from Today’s Activity, even when no recorded workout is available. Daily activity choices are available steps, walking/running distance and active calories. Recorded-workout choices are available duration, distance and active energy. Missing values are not invented.
Choose the available statistics you want to share, choose a Crew or an accepted Gym Buddy, preview the card and explicitly confirm sharing. Only the activity label, date and selected statistics are published. Daily activity cards also include the timezone and an as-of timestamp.
Daily totals are snapshots of the iPhone-local day through the displayed timestamp. Shared cards do not continuously update and are not independent verification of exertion. Sharing an updated card requires another explicit confirmation.
Crew activity cards are available to authorized Crew members and support emoji reactions, comments, reporting and removal. Buddy cards appear in the private, access-controlled conversation and follow its 90-day visibility and retention rules. Conversations are not end-to-end encrypted.
Health information is never automatically published or used for advertising or tracking. Shared cards do not contain routes, heart rate, medical details, raw Health samples or workout identifiers. Identifier hashes and eligibility metadata used for personal workout credit are not included in shared cards.
Sharing daily totals or a recorded-workout card does not independently create completed Sweat, streak or Challenge credit. Existing eligible-workout credit rules remain separate.
Change access in the iPhone Health app's app-access settings. Revoking access or clearing the private screen does not delete previously saved completion records or shared cards. Remove Health daily credit from Apple Health in SweatYet?, remove your shared card from its Crew, or delete your account. Removing Health credit does not delete separate PHOTO/CLIP proof. Removing a shared card does not remove your private daily credit. Challenge credit follows its Crew, dates and membership eligibility rules.
Gym Buddy Messages
Accepted Gym Buddies can exchange free private text messages and explicitly selected Apple Health activity cards. We store message text or the selected activity summary, participant and conversation identifiers, timestamps, read cursors and retry metadata to deliver conversations, show history and unread status, prevent duplicates and enforce safety rules.
Messages and activity cards are access-controlled, are not end-to-end encrypted, and are stored and processed by Supabase for app functionality. Activity cards contain only the workout activity type, date and statistics chosen by the sender. They do not contain raw Health samples or workout identifiers. General photo, video and file attachments are not supported.
Blocking or removing a Buddy closes conversation access. Unblocking or reconnecting permits a fresh conversation rather than restoring closed history. Blocking cannot erase screenshots, downloaded copies or content previously saved by another person.
Message notifications are off by default. When enabled, they use generic copy without message text or Health statistics and respect notification preferences and 9 PM–8 AM account-local quiet hours.
3. Who Can See Your Content
There is no public Sweat feed. Sweat proof and Crew Health activity cards are available to their author and authorized members of the selected Crews. Content shared to multiple Crews is available to each selected Crew. Challenge kickoff media follows its Crew’s membership rules. Invitations expose limited inviter, Crew or Buddy identity information before authenticated acceptance.
Private Buddy messages and activity cards are available through server-authorized participant access, subject to blocking and suspension. Crew comments require authorized access to the relevant Crew and post. Comments on the same Sweat shared to different Crews are separate. Authors can remove their own comments. Authorized moderators can review specifically reported comments and remove violating content. Reporter identity is not shared with the reported person.There is no public Sweat feed. Sweat and selected Health cards are visible to their author and authorized members of the Crews selected for sharing. Content shared to multiple Crews is available to each selected Crew. Challenge kickoff media follows its Crew's membership rules. Invitations expose limited inviter/Crew or Buddy identity information before authenticated acceptance. Private messages are available only through server-authorized participant access, subject to blocking and suspension.
Authorized moderators can review specifically reported content and necessary safety records; they do not receive general access to browse all private conversations. Reporter identity is restricted. Leaving a Crew prevents new membership-authorized access but does not automatically erase your personal workout history. Media uses private storage and expiring signed links. Previously issued links can remain valid until expiry. Screenshots, downloaded copies and externally shared content cannot be recalled.
Daily activity cards follow the same recipient access rules as other supported Health activity cards. Crew cards, reactions and comments require authorized Crew access. Private Buddy cards require an accepted, authorized Gym Buddy conversation. Membership, blocking, suspension and moderation restrictions apply.
4. Service Providers
We use Supabase for authentication, database services and private media storage, Twilio Verify for phone authentication, and Expo Push Service and Apple Push Notification service for notifications. Apple HealthKit supplies authorized device Health data through a native integration. These providers process information needed for their services and may retain operational logs/backups under their policies. Apple TestFlight distributes the beta. Native iOS services handle camera, microphone, profile-photo selection and sharing. Content shared through the iOS Share Sheet is received by the services/recipients you select. Website hosting/cookies/forms remain governed by the website's applicable disclosures; this app policy does not assert that the separate website has been audited for all tracking.
5. Device Permissions
Camera access supports live PHOTO/CLIP capture and QR scanning. CLIP requires microphone access; PHOTO and QR scanning do not require it. Optional profile-photo selection uses photo-library access. Health requests only read access for workouts, active energy, steps and walking/running distance. Notifications require an intentional permission flow. There is no GPS/route or Contacts permission request, advertising-identifier integration or Health write permission. Manage permissions using iOS/Health settings. Apple does not reveal individual Health read-denial status to the app; an empty result can mean limited access or no data.
If you choose Save Photo, SweatYet? requests add-only Photos permission to save the branded workout photo to your Photos library. This permission is optional and is not required for capture, Crew posting or external sharing. Optional profile-photo selection uses separate photo-library access.
Saving and Sharing Photos
If you choose Save Photo, SweatYet? saves a branded copy of your captured workout photo to your Photos library. Your original workout proof is unchanged.
If you choose Share Externally, iOS sends the exported image to the service or recipient you select. The exported image contains your photo and SweatYet? branding, not private Crew names, membership information or camera controls.
Temporary generated export files are cleaned up after saving, cancellation, sharing or failure. Copies saved to Photos or received elsewhere remain under your control or the recipient’s control and cannot be recalled by SweatYet?.
Camera Roll Photos and Videos
You may select existing photos or videos from your Camera Roll to create a Crew Share. SweatYet? processes the selected file on your device to preview it and create a branded version.
If you choose to post it, we store the branded photo or video, its retained audio, your optional caption, your account identifier, the selected Crew, posting time, and necessary media information such as file type, size, dimensions and video duration. We also process associated comments, reactions, reports and moderation records.
We do not upload your entire photo library or automatically publish media you select.
Sharing With Your Crew
Camera Roll imports are labelled Crew Shares. Access is restricted to authorized members of the selected Crew and authorized safety and moderation processes.
You choose the Crew and explicitly confirm publication. Imported media does not independently earn a completed Sweat, extend a streak or increase Challenge progress. Existing live PHOTO/CLIP capture and eligible Apple Health activity follow their separate completion rules.
Photo Library and Microphone Permissions
SweatYet? uses the native photo picker so you can select specific photos or videos without granting general access to browse your entire photo library. Profile-photo selection remains optional.
If you choose to save a branded photo or video, SweatYet? requests permission to add that file to your photo library. Saving permission is not required to post to a Crew or share through the iOS Share Sheet.
Importing an existing video does not request microphone access. Recording a live CLIP with sound requires microphone permission.
Saving and Sharing Branded Media
You may preview and export supported photos and videos with SweatYet? branding. Photo exports offer 4:5 and 9:16 layouts with fit or crop options. Videos are re-encoded with branding embedded in their frames, retaining available original audio and duration when supported.
SweatYet? does not modify or delete your original photo-library asset. Smaller sources may produce smaller exports.
We minimize sensitive metadata by creating new image and video exports without intentionally copying original location or device metadata. Format and platform limitations may apply; we cannot guarantee removal of every metadata field from every supported format.
When you choose to share externally, iOS provides the branded file to the app or recipient you select. Exported branding does not include private Crew names, membership information or camera controls.
Files saved to your device or shared externally are outside SweatYet?’s control. Removing content from SweatYet? does not remove independently saved or shared copies.
Storage and Service Providers
SweatYet? uses Supabase to store posted Crew Share media in private Storage and to process authorization, publication, comments, reactions, reporting and moderation.
Before publication, server processing reads the uploaded file to validate its supported type, size and media structure. This validation does not verify that the media depicts exercise or independently confirm physical exertion.
Crew Share Retention and Deletion
Posted Crew Shares remain until removed through applicable author, Crew, account-deletion or moderation processes.
Removing a Crew Share removes its associated comments and reactions from normal access and queues its private media for cleanup. Storage deletion is asynchronous and may require retries. Restricted report records, moderation audit records and retained safety evidence follow the safety-retention practices described elsewhere in this policy.
Local draft and export files are temporary. SweatYet? cleans them up when the relevant flow completes or closes, or through later abandoned-file housekeeping.
Uncommitted uploads become eligible for server cleanup after 24 hours. Actual removal depends on cleanup processing and retries. Limited validation and retry records support file integrity and help prevent removed content from reappearing. Account deletion removes account-bound validation records; cleanup processing removes stale validation records for files that no longer exist.
Deletion does not recall copies saved by other users or shared with external services. Provider backups and logs remain subject to the retention limitations described elsewhere in this policy.
6. Security
We use authenticated server operations, Row Level Security, private Storage and expiring media links. Safety and access checks are enforced server-side. These measures do not guarantee complete security or prevent authorized recipients from saving content. Private messaging is not end-to-end encrypted. Do not provide unnecessary sensitive information.
7. Retention & Deletion
Ordinary account, Crew, proof, shared Health and history records remain until removed through applicable content, account, Crew or moderation processes. Health connection/credit receipts are retained to enforce eligibility and retry/deletion protections until account deletion. Shared cards can be removed independently of private daily credit. Deletion and Storage cleanup may require processing/retries.
Message text and private Buddy activity cards are readable for up to 90 elapsed days. A trusted hourly purge removes expired message content and expired reported-content snapshots. Physical removal can occur after the visibility deadline, normally within the next scheduled hour when the job is healthy. Authors may remove their messages earlier. Deleting either participant’s account removes the associated conversations and messages. Blocking alone closes access but does not immediately purge all stored content.
Specifically reported message text, activity cards or comments may be retained in restricted safety records for up to 90 days after reporting, including after removal of the original content. Report explanations and moderation audit records follow a separate restricted safety-retention process and may contain identifying information. Do not include unnecessary sensitive information in reports. Non-content message and activity retry metadata remains for duplicate prevention until account deletion. Crew comment bodies remain until removed through author, post, Crew, account or moderation processes. Removing a shared Crew Health activity card clears its comments. Restricted retry metadata may remain to prevent removed content from reappearing. Blocking restricts access but cannot erase screenshots or previously downloaded copies.
Provider logs/backups and operational deletion records have separate retention. We do not promise immediate erasure of every historical copy or content retained independently by another person. Contact support with data-retention or deletion questions.
Crew daily activity cards remain until removed through applicable card, Crew, account or moderation processes. Removing a Crew activity card removes its reactions and clears its comments. Restricted safety and retry records follow the retention practices described above.
Private Buddy daily activity cards follow the existing 90-day message-content policy. Removing a shared daily card does not change separate personal workout credit. Screenshots and copies saved independently by recipients cannot be recalled.
8. Account Deletion
Use Profile → Settings → Delete account and complete the displayed confirmation. If cleanup is pending, retry to finish. Deletion removes your account/profile and applicable personal content, connection and message records; Crew ownership and shared-history effects are explained on the Delete Account page. You can edit your profile, manage notification/Health permissions and preferences, use reporting/blocking and role-appropriate Crew controls. If you cannot access your account or wish to exercise applicable privacy rights, contact Braxton.barker@bridgebranders.com. Identity verification may be required.
9. Beta Testing
TestFlight beta features may change or become unavailable. Founding Crew temporary benefits are granted only after server-confirmed eligibility and allocation; an invitation alone does not guarantee a grant. The first-100 program closes when all eligible spots are awarded. Individual grants expire 90 days after award. There is no lifetime benefit promise. Purchases and subscriptions remain disabled in Beta 1.
10. Children, International Processing and Policy Changes
SweatYet? is not intended for children under 13. Contact us if you believe a child under 13 has provided information. Providers may process data in the United States and other locations where they operate. Applicable rights/protections vary by location. We will update the effective date and provide notice where appropriate or legally required as practices change. Counsel should review age eligibility, international-transfer terms and statutory-rights wording for the intended markets.
11. User Choices and Rights
The current app provides profile editing, notification preferences, Crew-management controls appropriate to your role, and account deletion. Depending on applicable law, you may have rights concerning your personal information. Contact us to request assistance; identity verification may be needed.
Apple Health and Fitness Data
SweatYet?, operated by Bridgebranders LLC, offers optional integration with Apple Health through Apple's HealthKit framework.
With your permission, SweatYet? may access fitness information such as recorded workouts, workout types, duration, step counts, walking or running distance, and active energy burned.
We use this information to display your personal fitness activity, determine eligibility for SweatYet? workout check-ins, prevent duplicate workout credit, and support applicable Crew challenges.
Connecting Apple Health is optional. You can continue using SweatYet? without granting Apple Health access.
Sharing Your Fitness Activity
Your Apple Health activity is not automatically published. You may choose a recorded workout or Today’s Activity, select available statistics, choose a Crew or an accepted Gym Buddy, preview the card and explicitly confirm sharing.
Daily activity cards can include selected steps, walking/running distance and active calories without requiring a recorded workout. Recorded-workout cards can include selected duration, distance and active energy.
Only the activity label, date and selected statistics are shared. Daily snapshots also include timezone and as-of information. Crew cards are visible to authorized Crew members; Buddy cards appear in the private conversation.
Routes, heart rate, medical details, raw Health samples and workout identifiers are not included. Shared totals do not continuously update. Sharing alone does not create additional completion, streak or Challenge credit.
Data Storage and Privacy
SweatYet? aims to minimize the amount of Apple Health information stored on its servers. Limited workout information may be processed or stored when necessary to support check-in credit, challenge progress, duplicate prevention, or activity that you explicitly choose to share.
We do not sell Apple Health information or use information obtained through HealthKit for advertising, targeted marketing, or cross-app tracking.
You can manage or revoke SweatYet?'s access to Apple Health through your iPhone's privacy and Health settings. Revoking permission prevents further access but does not automatically remove information previously shared or stored within SweatYet?.
Gym Buddy Connections and Private Messaging
SweatYet? supports Gym Buddy connections, including QR-code invitations. Limited profile information may be displayed when someone previews, sends or accepts a connection request. Scanning an invitation does not automatically establish a connection.
Accepted Gym Buddies can exchange private text messages and explicitly selected Apple Health activity cards. Supabase stores and processes this content to provide conversations, history, unread indicators, duplicate prevention and safety features. Conversations are access-controlled but are not end-to-end encrypted.
Authorized moderators can review specifically reported content and necessary safety records; they do not receive general access to browse all private conversations. Blocking and reporting are available.
Message Retention
Private Buddy message text and activity cards are readable for up to 90 elapsed days and are then subject to scheduled cleanup. Specifically reported content may remain in restricted safety records for up to 90 days after reporting. Report explanations, moderation audit records, non-content retry metadata and provider backups follow the separate retention practices described above.
Notifications
If you enable notifications, SweatYet? may send generic notifications about new Gym Buddy messages. Private message content is not intended to appear in notification previews.
Your Privacy Choices
You choose whether to connect Apple Health, which available daily or recorded-workout statistics to share with a Crew or accepted Gym Buddy, whether to save or externally share a branded photo, and whether to enable notifications.
You can manage Gym Buddy connections, remove your own supported content, block or report users, and use account deletion and privacy-request options. Removing shared content cannot erase copies saved independently by recipients.
For assistance, contact Braxton.barker@bridgebranders.com.
12. International Processing
Our service providers may process data in the United States or other locations where they operate. Applicable protections and legal requirements may vary by location.
13. Policy Updates
This policy may change as the service develops. We will update the effective date and provide notice where appropriate or required by law.
14. Contact
Bridgebranders LLC. Email: Braxton.barker@bridgebranders.com. Website: https://bridgebranders.com.