Privacy Policy
Last updated: 30 August 2026
The PvPr mobile application ("we", "the App") is developed by Atsugo. We are committed to protecting your privacy. This policy explains which personal data we process, why, and what your rights are.
Your data is never sold, rented, or shared with third parties for advertising purposes. The App shows no advertising and uses no advertising identifier.
1. Data we collect
| Data | Purpose | Legal basis |
|---|---|---|
| Email address | Account creation and security, password reset | Performance of the contract |
| Username | Display in the leaderboards of your groups | Performance of the contract |
| Sex and bodyweight | Calculation of the DOTS strength index, which is required to compare athletes of different body sizes fairly | Performance of the contract |
| Training logs (exercises, loads, repetitions, RPE, dates, notes) | History, estimated 1RM calculation, personal record detection, duel scores | Performance of the contract |
| Group membership and challenge participation | Operation of leaderboards and the group activity feed | Performance of the contract |
| Users you have blocked | Hiding their posts and comments from the feeds you see | Performance of the contract |
| Content reports | Reviewing reported content and countering repeated abuse | Legitimate interest |
| Subscription status (active plan, start and expiry dates, store transaction identifier) | Give you access to PvPr PRO features on all your devices, and handle support requests | Performance of the contract |
| Technical diagnostic data | Crash fixing and stability improvement (Firebase Crashlytics and Analytics) | Legitimate interest |
We never receive your card number or any payment details: purchases are collected by Apple or Google, who only tell us that a subscription is active.
We collect no location data, no contacts from your address book, and no photos. The App requests no access permission on your device other than notifications (optional, see §3).
2. How your data is used
- DOTS index calculation: your bodyweight and sex feed the normalisation formula that allows a 65 kg athlete and a 95 kg athlete to be compared fairly.
- Personal record detection: your sets are compared against your own history to estimate your theoretical 1RM.
- Group leaderboards: your username and challenge scores are visible to the members of the groups you choose to join — and to them only.
3. Notifications
The App can send you local notifications (generated by your phone, without going through our servers) to signal the end of a rest period between two sets. This permission is requested when you start your first workout and can be revoked at any time in your phone settings. Declining it does not prevent any other feature from working.
4. Who has access to your data
Your detailed training logs are private. Only the items you choose to publish in a group (workout summary, records beaten, notes) are visible to the members of that group.
We use the following processor:
-
Google Firebase (Google Ireland Limited) —
authentication, database, diagnostics. Data is hosted in the European
Union (
eur3multi-region, Belgium and the Netherlands). Firebase is subject to Google's privacy policy. - RevenueCat, Inc. (United States) — subscription management. Receives your PvPr account identifier, your email address and your username (so support can locate a subscription), along with purchase events sent by Apple and Google. No training data is sent to them. The transfer outside the European Union relies on the European Commission's standard contractual clauses.
- Apple and Google — subscription payments, each under its own privacy policy.
These last three processors are only involved if you subscribe. A free account exchanges no data with them.
5. Security
Exchanges with our servers are encrypted with HTTPS/TLS, and data is encrypted at rest. Access is controlled by strict Firestore security rules: a user can only read their own training logs and the content of the groups they belong to.
6. Data retention
Your data is kept for as long as your account is active. When the account is deleted, it is erased immediately from within the App, or within 30 days for a request made by email.
Three exceptions, none of which identifies you directly:
- Anonymised technical logs (Firebase Analytics / Crashlytics): kept for up to 14 months in aggregated form, in accordance with Google Firebase's policy.
- Content reports: kept for 12 months, so that repeated abuse can be identified.
- Transaction records, should a paid offer ever be introduced: kept for 10 years in accordance with article L. 123-22 of the French Commercial Code.
7. Deleting your account and your data
You can delete your account entirely from within the App: Profile → Settings → Delete my account. This action is permanent and erases your profile, workouts, records, routines and duel entries.
The full procedure, including by email if you no longer have access to the App, is described on the Account deletion page.
8. Your rights (GDPR)
Under the General Data Protection Regulation, you have the right to access, rectify, erase, restrict the processing of, object to, and port your data. The CSV export of your workouts, available in the App, fulfils the right to portability.
To exercise these rights, write to atsugo.webapp@gmail.com. You may also lodge a complaint with the French data protection authority (CNIL) or with the supervisory authority of your country of residence.
9. Minors
The App is not intended for people under 16. We do not knowingly collect data concerning minors under 16.
10. Changes
We may update this policy. Any substantial change will be signalled in the App before it takes effect. The date of the last update appears at the top of this page.
11. Contact
- Email: atsugo.webapp@gmail.com
- Through our support page