Privacy Policy

Last updated: 2026-05-08

1. What we collect

We collect the minimum needed to run the game: your trainer name, email, gymbiote roster, workout history, and battle stats. Step counts and active-minute data come from Apple HealthKit only after you grant permission.

2. Where it lives

Your account and game state live in Google Firebase (Firestore + Authentication). Backups, transit, and at-rest encryption are handled by Google's standard infrastructure.

3. What we don't sell

We don't sell, rent, or otherwise share your personal data with advertisers or third-party data brokers. Anonymous, aggregated metrics may be used to improve game balance.

4. Health data

Step and activity counts pulled from HealthKit stay on your device or in your private Firestore document. They are never shared with other players, advertisers, or shown publicly without your action.

5. Ads

Free-tier players may see Google AdMob banner and rewarded video ads. AdMob's data practices are governed by Google's privacy policy. Subscribers see no ads.

6. Your rights

You can request a full export or deletion of your account at any time by emailing hello@gymbiote.com. We aim to respond within 5 business days.

7. Changes

We'll post any material changes to this policy on this page and notify active testers in-app. Continued use after changes constitutes acceptance.