Privacy policy

Not Bad. is owned by Dalliane Dos Santos Ferreira, a self-employed professional in Spain. Write to us at Calle Zeus 6, 20 B, 29649 Mijas, Spain. For anything to do with your data, write to Info@notbad.fit.

Account details: your email address, username, date of birth (to check your age) and your theme choice. Your password is held by our sign-in provider, Supabase, not by us. Activity you record: habit and challenge completions, wellness logs including mood, weekly reviews, physique measurements, progress photos, XP and achievements, and journal entries. Social: friends, groups, community posts and stories. Device and diagnostic information: crash reports with personal information switched off, usage counts and categories, and a queue of unsent changes kept on your device while you're offline.

Body measurements, body-fat estimates and progress photos are private to your account. There is no sharing path for them, by design.

To run your account, show your progress back to you, award XP, operate the community, handle reports, and keep the service working. Our legal bases are: performing our agreement with you (your account and progress), your explicit consent for body and health-related information, and our legitimate interests in keeping the community safe and the service secure.

Supabase hosts our database, handles sign-in and stores files in Ireland, in the EU. PostHog provides analytics, hosted in the EU. Sentry receives crash reports, hosted in Germany. Expo delivers app builds and updates. Apple and Google distribute the app. Resend will send our transactional email. Hostinger hosts our website on a virtual private server in France.

When you delete your account, we mark it for deletion straight away and remove your data within 30 days of your request. Supabase keeps database backups for up to seven days. Sentry keeps crash reports for up to 90 days. PostHog keeps analytics events for one year on its free plan.

You can ask for a copy of your data, ask us to correct it, ask us to delete your account, object to certain processing, or withdraw consent. Write to Info@notbad.fit. We'll respond within one month, as the GDPR requires.

Not Bad. is for people aged 18 and over.

If this policy changes in a way that matters, we'll tell you in the app before the change takes effect.