Privacy Policy

What PropStar Fitness collects, why, and what it never does with it.

Effective 30 July 2026 · Applies to the PropStar Fitness iOS app (com.propstar.app) and the PropStar API.

The short version. We collect the minimum needed to run competitions between you and your friends: an account, and aggregate workout totals. We never collect GPS routes or locations. We never sell your data, we run no advertising, and we never use your health data for marketing. There is no third-party analytics or tracking SDK in the app.

1. Who we are

PropStar Fitness is an independent app operated by its developer, based in the United States. For any privacy question, or to request deletion of your data, contact support@propstarfitness.com.

2. What we collect

Data	Why we have it
Email address	Identifies your account, and receives the six-digit code that verifies it. Also used for account-related notices.
Display name	Shown to other members of groups you join.
Date of birth	Enforces the app's minimum age at signup. Stored as a date; not shown to other users.
Password	Stored only as a salted cryptographic hash. We cannot read or recover your password.
Health & fitness totals	Read from Apple Health with your permission, to score competitions. See section 3.
Competition activity	Groups you belong to, competitions you join, your entries and results, and comments or reactions you post.
Push token	A device identifier issued by Apple, so we can send notifications you've opted into. Removed when it stops working.
Purchase records	Confirmation from Apple that an in-app purchase completed, so Stars can be credited. See section 6.

We do not collect your location, your contacts, your photos, your device advertising identifier, or your browsing behaviour. The app contains no advertising SDK and no third-party analytics SDK.

3. Health and fitness data

With your explicit permission, PropStar Fitness reads workout and activity data from Apple Health in order to score the competitions you enter. We read aggregate totals only:

Workout type, start time, end time and duration
Distance, step count, active energy, and elevation gained
Whether a workout included heart-rate data — not the heart-rate values themselves

We never read or store routes, GPS traces, or any location data, and we never request write access to Apple Health. Nothing PropStar Fitness writes back to your Health data.

Health data is subject to specific, binding limits. We will never:

use health data for advertising, marketing, or any similar service;
sell health data, or disclose it to data brokers or information resellers;
share health data with any third party except as required to operate the app (our hosting provider stores it) or where the law compels us.

Health data you contribute to a competition is visible to the other members of that competition, as progress toward the agreed goal. That is the point of the app. You can revoke PropStar Fitness's access to Apple Health at any time in iOS Settings → Privacy & Security → Health; scoring stops at that point.

4. How we use your data

We use the data above only to:

create and secure your account, and verify your email address;
run competitions — tracking progress, deciding outcomes, and settling entries;
show you and your group members shared progress, results and comments;
send notifications you have opted into;
credit Stars purchased through Apple's in-app purchase system;
detect abuse, fraud, and implausible activity data.

We do not profile you for advertising and we do not sell personal information.

5. Who else touches your data

We keep the list of third parties deliberately short:

Provider	Role	What they see
Fly.io	Application and database hosting (United States)	All stored app data
Resend	Transactional email delivery	Your email address and the message contents
Apple	Push notifications and in-app purchase verification	Push tokens; purchase receipts
Cloudflare	DNS for this website	No app data

We may also disclose data if legally required, or where necessary to protect the rights or safety of our users. We have never received a government request for user data.

6. Stars, purchases and payment data

Stars are a virtual, in-app currency. Stars have no cash value, cannot be exchanged for money or anything of monetary value, and cannot be withdrawn, redeemed, transferred off the platform, or cashed out under any circumstances.

Stars can be purchased through Apple's in-app purchase system. We never see, receive, or store your payment card details — Apple processes the payment entirely, and tells us only that a purchase completed so the Stars can be credited. Refunds are handled by Apple under its own policies.

7. How long we keep it

We keep your account data for as long as your account exists. Login sessions expire automatically and expired ones are purged. Push tokens are deleted once Apple reports them invalid. When you ask us to delete your account, we delete your personal data — email, display name, date of birth, password hash, health and activity records, and push tokens — within 30 days. Records of completed competitions may be retained in de-identified form so other participants' histories stay intact.

8. Your rights and choices

Access or export — request a copy of the data we hold about you.
Correction — change your display name in the app; email us for anything else.
Deletion — request deletion of your account and personal data.
Withdraw health access — revoke Apple Health permission at any time in iOS Settings.
Notifications — turn push notifications off in iOS Settings at any time.

Depending on where you live, you may have additional rights under laws such as the California Consumer Privacy Act or the GDPR — including the right not to be discriminated against for exercising them. To exercise any of these, email support@propstarfitness.com. We do not sell or share personal information as those terms are defined under California law.

9. Security

Traffic between the app and our servers is encrypted in transit with TLS. Passwords are stored only as salted hashes, and session tokens are stored hashed, never in plain text. Our database is not exposed to the public internet. No system is perfectly secure, but we keep the amount of data we hold small on purpose — the strongest protection for data is not collecting it.

10. Children

PropStar Fitness is not directed to children. You must meet the app's stated minimum age, shown on its App Store listing, to create an account, and we ask for your date of birth at signup to enforce it. We do not knowingly collect personal information from anyone below that age. If you believe a child has created an account, email us and we will delete it.

11. Changes

If we change this policy we will update the effective date above, and for significant changes we will notify you in the app or by email. Continuing to use PropStar Fitness after a change means you accept the updated policy.

12. Contact

Questions, requests, or complaints: support@propstarfitness.com. We aim to reply within a few days.