Gamify Privacy Policy

Effective date: October 15, 2026

This Privacy Policy describes how Gamify (the mobile app and web PWA) and Atlas (the AI assistant powering Gamify) collect, use, store, and delete your information. By using Gamify or Atlas you agree to this policy.

1. Who we are

Gamify is operated by Gamify Global LLC, a Colorado limited liability company. Atlas is the AI backend that powers coaching, vision, and personalization features. Privacy contact: privacy@gamifyglobal.fit Security contact: security@gamifyglobal.fit

2. Data we collect

Account data: email, display name, subscription tier, referral codes.
Fitness and health: workout plans, set logs, nutrition targets, calorie and macro logs, physique photos (Elite), and HealthKit data when you grant permission (workouts, steps, sleep, heart rate).
Financial account data (via Plaid): if you connect a bank, we receive account information, balances, transactions, and liabilities and APR data. Section 6 covers this in full.
Camera and photos: food scans, physique check-ins, gym equipment identification, and visual context analysis, when you capture or upload images.
Location: approximate location when in use, for gym finder, weather-aware suggestions, and proactive coaching (only with permission).
Voice: microphone audio for voice commands. Transcribed text is sent to our servers for processing. Wake word detection may run on-device.
Calendar and contacts: only when you grant access and request a feature that uses them (scheduling, contact-aware reminders).
Usage: missions, XP, streaks, energy logs, affiliate store interactions.
Payment: Stripe customer and subscription IDs on web. Apple original transaction ID on iOS. We do not store full card numbers.

3. Local vs cloud storage

Cloud (Supabase): account profile, fitness plans, set logs, nutrition targets, missions, conversation summaries, AI session metadata, and connected financial account data. All tables use Row Level Security. Backend access uses service-role keys, server-side only.
Local device: a device credential stored on your device that identifies your account on that device (the app has no sign-in; your account is bound to your device, and an optional recovery code in Settings lets you restore it on a new device), cached PWA assets, optional on-device wake word processing, and HealthKit data on your iPhone until synced.
Atlas memory: persistent memories and instructions stored in Atlas when you use Atlas directly. Gamify relays context per session.

4. How we use data

Personalize AI coaching, workout plans, progressive overload, and nutrition targets.
Power the Wealth pillar: budgets, spending insights, net-worth and debt tracking, and financial coaching.
Deliver proactive morning briefs, workout reminders, and habit-based suggestions.
Process subscriptions (Apple IAP on iOS, Stripe on web).
Improve reliability and security.
We do not sell your data.

5. Third-party services

Supabase - database and authentication.
Plaid - bank account connections for the Wealth pillar. See Section 6.
Stripe - web subscription billing only.
Apple In-App Purchase - iOS subscriptions.
Anthropic (Claude API) - primary AI processing via Atlas.
OpenAI / Google Gemini - optional fallbacks for specific task types.
Brave Search / Serper - web search when Atlas tools require it.
Porcupine - on-device wake word detection (disclosed in App Store privacy nutrition labels).
Railway - application hosting.

AI providers receive only the messages, images, and context needed to fulfill your request. Do not submit passwords, government IDs, or payment card numbers in chat.

6. Bank Connections via Plaid

Gamify uses Plaid Inc. ("Plaid") to connect your financial accounts. Plaid powers the bank connection in Gamify's Wealth pillar. When you choose to connect an account, you use Plaid's secure flow, called Plaid Link. Your bank login details go to Plaid and your bank only. Gamify never sees or stores your bank username or password.

Plaid's policy applies to Plaid's handling of your data. Plaid processes your data consistent with Plaid's End User Privacy Policy. Read it here: https://plaid.com/legal By connecting an account, you agree that Plaid may treat your data under that policy.

Your consent comes first. Gamify records your consent before any account is linked. Tapping "Connect" and completing Plaid Link is your clear consent for Plaid to share the data listed below with Gamify, for the uses described here.

What Plaid shares with us. With your consent, Plaid shares these categories of data from the financial institutions you connect:

Account information: account names, account types (checking, savings, credit card, and similar), and official account names.
Balances: current balances, available balances, and credit limits. Balances arrive as part of your account data each time your accounts sync.
Transactions: transaction amounts, dates, merchant names, and categories. At linking, we receive up to the past 90 days of transactions. While your account stays connected, new transactions sync on an ongoing basis.
Liabilities and APR data: credit card balances owed and annual percentage rates (APRs), plus similar liability details for connected accounts. We use this for debt tracking in the Wealth pillar.
Identity information: only what is needed to match accounts to your profile.

Real-time updates from Plaid. Plaid also sends our servers real-time event notifications, called webhooks. These tell us about new transactions, account health changes, and if you revoke access at your bank or through Plaid. They let us keep your data current without asking you to reconnect.

How we use this data. We use it only to run Gamify's features for you: budget insights, spending categories, savings tracking, debt tracking, net-worth calculation, and personal financial coaching in the Wealth pillar. We do not use your financial data for advertising.

We never sell your financial data. Gamify does not sell, rent, or share your Plaid-provided financial data with third parties for marketing or any unrelated purpose.

How we store and protect it. Plaid access tokens are encrypted with AES-256-GCM before storage. Tokens stay server-side only. They are never sent to your device. Account, transaction, and liability data sits in our database behind row-level access controls, so only your account can read your data. All data moves over TLS-encrypted connections.

Your control, and what happens when you disconnect. You can disconnect your bank at any time in Gamify (Wealth pillar, then bank settings), or revoke access through Plaid. When you disconnect, two things happen right away: 1. Your stored Plaid data (accounts, transactions, and the access token) is deleted from our systems immediately. 2. We remove the connection at Plaid using Plaid's /item/remove, so Plaid stops sharing your data with us.

7. HealthKit

When you enable HealthKit integration, Gamify and Atlas may read workout summaries, nutrition-related metrics, steps, sleep, and heart rate to personalize coaching. We may write completed workout summaries back to HealthKit when you log sessions. You can revoke HealthKit access anytime in iOS Settings.

8. Your choices and rights (GDPR / CCPA)

Access and export: request a copy of your data via Profile, then Export, or email privacy@gamifyglobal.fit.
Deletion: delete your account in Profile. This removes user-linked rows from our database per our deletion procedure. Bank data is deleted immediately when you disconnect, as Section 6 describes.
Opt-out of sale: we do not sell personal information.
California residents: you may request disclosure of the categories collected, and deletion, as described above.
EEA and UK residents: lawful bases include contract performance, consent (HealthKit, camera, location, bank connections), and legitimate interests (security, fraud prevention).

9. Data retention

Account data is retained while your account is active. Deleted accounts are purged within 30 days, except where law requires longer retention (for example, billing records). Financial data from a disconnected bank is the exception: it is deleted immediately on disconnect, not held for the 30-day purge.

10. Security

API keys and secrets are stored server-side only. Sessions use expiring tokens. Sensitive fields are not logged in plain text. Plaid access tokens carry the extra encryption layer described in Section 6. Report a security issue to security@gamifyglobal.fit.

11. Children

Gamify is not directed at children under 13. We do not knowingly collect data from children.

12. Changes

We may update this policy. Material changes will be notified in-app or by email. Continued use after changes constitutes acceptance.