Proofit

Privacy Policy

Last updated 17 October 2026

In short. Your photos and workouts are only visible to the members of your circles. We sell no data, show no ads and use no analytics tools in the app. Your health data is only read if you allow it. You can delete your account and your data at any time from Profile > Delete my account.

1. Who we are

Proofit is published by Qore Games, a simplified joint-stock company (SAS) with share capital of €1,000, registered with the Paris Trade and Companies Register under number 949 296 313, 9 rue des Colonnes, 75002 Paris, France. Qore Games is the controller of your personal data. For any question: [email protected].

This policy supplements the Terms of Use.

2. The data we process

  • Account: depending on how you sign in, your phone number, or the email address and name provided by Apple or Google (Apple may provide a relay address that hides yours), along with an account identifier.
  • Profile: the first name and profile photo you choose.
  • Circles and content: the circles you create or join, their name and goal; your activity photos and their captions; your reactions, comments, excuses, roasts, forfeits and votes, wizzes and breaks.
  • Health and fitness (optional): if you connect Apple Health or Health Connect, the app reads your workouts (type, duration, calories, average heart rate, distance) to suggest them to you. When you post a photo, the stats of the workout you picked, or else those of your day, are attached to it and sent to our servers: you see them before posting, and can pick a sport without stats instead. The rest of your health data never leaves your phone. The app writes nothing to Apple Health or Health Connect.
  • Purchases: the history of your excuse purchases (product, date, platform), linked to your account identifier. Payment is handled by Apple or Google: we never have access to your payment details.
  • Reports and blocks: what you report (the post, comment or member, the reason, and the reported text as it was), the members you block, and what concerns you in others' reports.
  • Notifications and settings: your phone's notification token, your notification preferences and your time zone, to set the week and the reminders.
  • Technical data: like any online service, our host keeps technical logs (IP address, date and type of requests) for a short time, for security and to keep the Service running.

We do not collect your location or your contacts. The app asks for access to the camera and your photos only for the photo you post or your profile photo. You can withdraw each permission in your phone's settings.

3. Why we use it

  • To run Proofit: your account, your circles, the week's ring, streaks and badges, posts, reactions and comments. Legal basis: performance of the contract (the Terms).
  • To attach your health stats to your photos. Legal basis: your explicit consent, given by connecting Apple Health or Health Connect, which you can withdraw at any time.
  • To send you notifications (reminders, wizzes, new activities, reactions, comments, new members). Legal basis: your consent, given by allowing notifications.
  • To credit your excuse purchases. Legal basis: performance of the contract.
  • To keep the Service safe, handle reports and prevent abuse. Legal basis: our legitimate interest in protecting Users, and our legal obligations.
  • To answer your requests for support or to exercise your rights. Legal basis: performance of the contract and our legal obligations.

We never use your data for advertising, never sell it and do no profiling. Your health data is only used to show your stats in your circles.

4. Who can access it

  • Members of your circles see your first name, your profile photo and, in each circle where you post them, your activities with their photos, captions and stats, as well as your reactions, comments, excuses and forfeits. Your activity photos are kept in private storage, only accessible to the members of the circle.
  • The people you share with when you share an activity outside the app (Share feature): you choose them.
  • Our service providers, only to run the Service and on our instructions:
    • Supabase: database, photo storage and sign-in, on servers in Ireland (European Union);
    • Google (Firebase Cloud Messaging) and Apple (Apple Push Notification service): delivering notifications;
    • RevenueCat: managing in-app purchases;
    • Apple and Google: sign-in with Apple or Google, and payments through the App Store and Google Play;
    • an SMS provider: the sign-in code sent to your phone.
  • Authorities, when the law requires it.

Some of these providers may process data outside the European Union, in particular in the United States. These transfers are covered by the safeguards provided by the GDPR: an adequacy decision (EU-US Data Privacy Framework) or the European Commission's standard contractual clauses.

5. How long we keep it

  • Your account and content: as long as your account exists. A post you delete is erased with its reactions and comments.
  • When you delete your account (Profile > Delete my account): your profile, photos, activities, reactions, comments, preferences and notification tokens are permanently deleted. They may remain for a few days in our host's backups before being overwritten.
  • Inactive accounts: they may be deleted after 24 months of inactivity, after notifying you.
  • Purchases: Apple, Google and RevenueCat keep the transaction history under their own rules and for the period required by law.
  • Reports: as long as needed to handle them and any follow-up, then one year at most. They remain after an account is deleted, no longer linked to the person.
  • Technical logs: a few days.

6. Security

Traffic between the app and our servers is encrypted (HTTPS). Access to data is restricted by rules that limit each piece of content to the members of the circle concerned, and activity photos are kept in private storage. Only the people who need it to run the Service can access the data.

7. Your rights

You have the right to access, rectify, erase, restrict, object to and port your data, to withdraw your consent at any time, and to set instructions for what happens to your data after your death.

  • Change your first name or photo: from your Profile.
  • Delete your account and your data: Profile > Delete my account, or simply ask us at [email protected].
  • Stop sharing your health data or receiving notifications: in your phone's settings.
  • For any other right: write to us at [email protected]. We reply within one month.

If you believe your rights are not respected, you can lodge a complaint with the CNIL, the French data protection authority (cnil.fr), or the authority of your country.

8. Minimum age

Proofit is for people aged 15 and over. If you believe a younger child has given us data, write to us: we will delete it.

9. This website

getproofit.app shows no ads and uses no analytics tools. It sets a single cookie, proofit_lang, when you pick a language, to remember it for a year. Fonts are served by the site itself.

10. Changes

We may change this policy, for example when the Service evolves. If the change is significant, we will let you know in the app before it takes effect. The date of the last update is shown at the top of this page.

11. Contact

For any question about this policy or your data: [email protected], or Qore Games, 9 rue des Colonnes, 75002 Paris, France.