This policy explains what the LEVL iPhone app collects, why, who can see it, how long it is kept, and what you can do about it.
The short version
- As a guest, your training and progress stay on your iPhone. Only diagnostics, and any bug report you choose to send, leave it.
- With an account, your training, progress and the physical details you enter are stored with your account, so they sync and so friends and duels work.
- What LEVL reads from Apple Health stays on your iPhone.
- There is no advertising or tracking, and we don't sell data.
- You can delete your account in the app at any time.
Who we are
LEVL is made by Matteo Shidrawi and Seb Michel, in the United Kingdom. We are responsible for your data (the "controller"). For any privacy question, or to use any of the rights below, email Levlup18@gmail.com.
Using LEVL as a guest
If you choose "Continue as guest", your save stays on this iPhone: your training log, physical details, progress and cosmetics. Two things still leave your iPhone:
- Diagnostics (see below). These are sent without an account ID, tagged only with a random ID that changes every time the app starts.
- A bug report, if you send one.
Guests can't post Check Ins, add friends, duel friends or see the boards.
What we collect when you have an account
| Data | Why | Who can see it | Kept until |
|---|---|---|---|
| Email address (from you, or from Apple if you use Sign in with Apple; this may be a private relay address) | Signing in, password reset | Only us. Never shown to other players | You delete your account |
| Password | Signing in | No one. It is stored in hashed form by our sign-in provider | You delete your account |
| Display name (you choose it; if you share your name through Sign in with Apple, it starts as that name) | Shown with your posts, on the boards and to friends | Other signed-in LEVL players | You change it or delete your account |
| Username | So friends can find you | Other signed-in LEVL players | You change it or delete your account |
| Profile summary: your character's look, title and border, level, XP, coins, rank, streak, when you were last active, and figures worked out from your log (weekly XP, best lift, consistency) | Boards, friends, duels, "online" status | Other signed-in LEVL players | You delete your account |
| Training log: exercises, weights, reps, effort, cardio time and distance, dates, XP, personal records | Syncing, your stats, friend duels, boards | You, your friends, and the friend you are duelling while the duel is active | You delete the set or your account |
| Physical details you enter: bodyweight, height, age, sex, activity level, training experience | Checking that lifts are realistic, and giving your stats context | Only you. They are stored inside your private save | You change them or delete your account |
| Your game save: everything above plus progress, cosmetics, packs, the Pass, practice duels and Workout Days | Keeping your progress across devices and reinstalls | Only you | You delete your account |
| Check In photos (two per Check In) | The Check In feed | The audience you choose for each Check In: friends, or public. Public discovery (Profile › Check In) controls whether people who aren't your friends can see Check Ins you mark Public. It is off unless you switch it on | You delete the Check In or your account |
| Check In details: date, time zone, time posted, caption, photo description, audience, and the summary of any workout you attach (sets, volume, XP, personal records, cardio minutes, exercise names) | The feed, streaks, Verified Sessions | The same audience as the photos | You delete the Check In or your account |
| Reactions and comments | Social features | People who can see the Check In | You delete them or your account. The owner of a Check In can also remove comments on it |
| Friends, friend requests and blocks | Friends and blocking | Friends: you and them. Blocks: only you | You remove them or delete your account |
| Friend duels and duel invite codes | Friend duels, which our server scores | You and your opponent | You delete your account |
| Activity notices (friend requests, duel challenges) | The bell in the app | You | You delete your account |
| Check In and notification settings: reminder window, default audience, public discovery, notification switches, your iPhone's time zone, and your iPhone's push token if you allow notifications | Reminders at the right local time, notifications | Only us | You delete your account |
| Reports you make about posts or comments | Moderation | The LEVL team. The person you report is not told who reported them | You delete your account |
| When you accepted the Terms, and which version | A record of your agreement | Only us | You delete your account |
Apple Health
LEVL connects to Apple Health only if you tap Connect. It then reads steps, active energy, exercise minutes, resting heart rate, VO₂ max, sleep and workouts, and shows them beside your training. It reads workouts only to avoid saving the same session twice.
These Health readings stay on your iPhone. They are not uploaded to our servers, never attached to a Check In, and never used for XP, stats, rank or duels.
LEVL can also save your finished LEVL workouts to Health: the type of workout, when it started and when it ended. You can change or remove LEVL's access at any time in the Health app, or turn it off in LEVL under Profile › Apple Health.
Separate from Health: the physical details you type into LEVL yourself (bodyweight, height, age, sex, activity level, experience) and your training log are part of your save. If you are signed in, they are stored with your account as described above.
Camera and Check In photos
LEVL uses the camera only while you take a Check In. The live camera image stays on your iPhone; only the two photos you post are uploaded. Before upload, LEVL resizes and re-encodes each photo, which removes embedded metadata such as location. Photos are kept in private storage and shown to the people allowed to see them through links that expire after an hour.
Diagnostics (guests and accounts)
- Usage events. We record when the app is opened (and whether you are signed in), when an account is created, when your first and third sets are logged, when a Workout Day is created, and when our server refuses a logged set as implausible (how many, and why). Each event includes the app version, build, platform, a random ID for that launch, and, when you are signed in, your account ID. We use them to see what works and what fails.
- Crash reports. When iOS reports that LEVL crashed, the next launch sends the type of crash and a technical stack trace, with your account ID if you are signed in. We use them to fix crashes.
You can turn diagnostics off at any time in Profile › Help & data › Share diagnostics. From then on LEVL sends no usage events and no crash reports from that iPhone. It is on until you turn it off. You can also object by emailing us. Diagnostics are kept for one year. When you delete your account, your account ID is removed from them.
Bug reports and support
If you send a bug report from Profile › Report a bug, we receive your message, the category you chose, the app version and build, and your iOS version. If you are signed in, we also receive your account email and ID. If sending fails, LEVL opens your email app with the same details addressed to us. Emails you send us are handled in our email provider, Gmail.
Bug reports are deleted when you delete your account. Reports sent as a guest, and support emails, are kept for as long as we need them to deal with the report or your message.
Password safety check
When you create an account or set a new password, LEVL checks whether that password has appeared in known data breaches, using Have I Been Pwned's range search. Only the first five characters of a one-way hash of the password are sent. Your password itself doesn't leave your iPhone for this check, and nothing about it is stored.
Technical information
Like any online service, our hosting provider receives your IP address and basic device and app information with every request, and keeps request logs for 1 day on our current plan. We use them only to run and secure the service.
What we never do
- We don't sell your data.
- We don't show advertising. LEVL contains no advertising or third-party analytics code, and doesn't track you across other companies' apps or websites.
- We don't use Apple Health data for anything except showing it to you.
- We don't show your email address to other players.
Who processes data for us
- Supabase: database, sign-in, photo storage and live updates. Hosted in the EU (Frankfurt, eu-central-1).
- Apple: Sign in with Apple, push notification delivery, and Apple Health on your iPhone.
- Have I Been Pwned: the password safety check above.
- Google (Gmail): if you email us.
- GitHub: hosts these web pages, and may log visits to them.
Each provider receives only what it needs to do its job, under its own data processing or privacy terms. Supabase stores LEVL's data in the EU (Frankfurt). Apple, Google and GitHub may handle data outside the UK. Where they do, they use the legal safeguards UK law requires for international transfers, such as the UK–US data bridge or approved contract clauses.
How long we keep data, and deleting it
You can delete your account in the app: tap your picture at the top right, then Delete account. Full steps are on the account deletion page. When you confirm:
- LEVL removes your Check In photos from storage. If that fails, nothing is deleted and the app tells you.
- Your account is deleted, together with your profile, save, training log, Check Ins, comments, reactions, friends and requests, duels, notices, blocks, reports you made, settings (including your push token) and bug reports.
- Your iPhone forgets that account's save, recovery copies, any unsent Check In and cached photos, then signs you out. If this iPhone ran a LEVL version before 2.0, the copy that older version kept inside the app stays there until you delete the app.
What stays, without your account ID: diagnostics records, reports other people made about your posts, and the record that an invite code was used.
We don't make our own backups of the database. Our hosting provider may keep daily backups of it for up to 7 days, so something you delete can remain in those backups for up to 7 days before it is gone. Content hidden after reports is kept for review for one year.
If you used Sign in with Apple, you can also remove LEVL in the Settings app › your name › Sign-In & Security › Sign in with Apple.
Your choices and rights
- See and export your data. Everything is visible in the app. Profile › Export my data gives a backup code containing your save (training log, physical details and progress). For a copy of anything else we hold about you, email us.
- Correct it. Edit or delete any logged set, change your display name and username, and edit your physical profile in Profile.
- Choose who sees your posts. Pick friends or public for each Check In, set a default audience, turn Public discovery on or off (it starts off), delete a Check In, or block someone.
- Notifications. Use the switches in Profile, or the iPhone's Settings › LEVL › Notifications.
- Start over without deleting. Profile › Reset all data resets your progress on this iPhone and, if you're signed in, your account's saved progress. Your account, friends and Check Ins stay.
- Delete everything. See above.
- Object, restrict or complain. Email us. You can also complain to your data protection authority: in the UK, the Information Commissioner's Office (ico.org.uk).
Under the UK GDPR, we rely on:
- performance of our contract with you, to run the app you asked for;
- our legitimate interests, for diagnostics, security and keeping the community safe;
- your choice, for optional features such as Apple Health and the camera.
We aim to reply to requests within 24 hours.
Children
LEVL is not intended for anyone under 13, and we don't knowingly collect their data. If you believe a child has created an account, email us and we will remove it.
Changes
If this policy changes in a way that matters, we will say so in the app before the change takes effect. The date at the top shows the latest version.