1. Introduction

BadyApp ("we", "our", or "the app") is a private group management application for badminton groups. It helps group members schedule games, track costs, manage shuttle inventory, and view personal stats.

This Privacy Policy explains what information we collect, how we use it, and how we protect it. By using BadyApp, you agree to the practices described here.

2. Information We Collect

We collect only what is necessary to operate the app:

• Account information — your name, email address, and profile photo (via Google Sign-In or email registration)
• Group activity — game registrations, attendance records, and session history within your group
• Internal cost-sharing records — group balance tracking and shuttle cost allocations within your badminton group. No real payment processing, money transfers, or financial transactions occur — these are internal ledger records only.
• Device tokens — Firebase Cloud Messaging (FCM) tokens for push notifications
• Body weight — optional; if you choose to enter it, used only to calculate calories burned per game session
• App preferences — your chosen colour theme and self-reported skill level
• Apple Health data (iOS only) — if you use Game Insights Pro, we read the following data types from Apple Health on your device: workouts, heart rate, heart rate variability (HRV), resting heart rate, active energy burned, blood oxygen (SpO2), and sleep stages. This data is processed entirely on-device and is never uploaded to our servers or any third party.
• Chat messages — text messages you send in your group's chat, including your name and timestamp. Messages are stored in Firebase Firestore and are automatically deleted after 7 days.
• Subscription status — whether you hold an active Game Insights Pro subscription. This is stored as a flag in your account record to control access to premium features.

3. How We Use Your Information

• To authenticate you and manage your account
• To display your game history, stats, and group activity
• To calculate and display cost-sharing within your badminton group
• To send push notifications about game updates, registrations, and group activity
• To allow group admins to manage members, games, and group finances
• To calculate and display fitness insights — recovery score, session quality, readiness, and training load — from your Apple Health data (iOS only, processed on-device)
• To enable real-time group chat between members of your badminton group

4. Data Storage & Security

All data is stored securely in Google Firebase (Firestore), operated by Google LLC. Firebase servers in the Middle East (Dubai/UAE — me-central1 region) are used as the primary data storage region. Data is subject to Google's security standards.

We use Firebase Authentication for secure sign-in. Access to group data is restricted by role-based security rules — only authenticated members of a group can access that group's data.

5. Data Sharing

We do not sell, rent, or share your personal data with any third parties for marketing or commercial purposes.

Your data is only shared with:

• Other members of your group — your name, skill level, and game activity are visible to other members in your group
• Google Firebase — as our backend infrastructure provider
• Group admins — admins can view member balances, attendance, and account status within their group

6. Data Retention

Your data is retained for as long as your account is active. If you wish to have your data deleted, please contact the group admin or contact us directly at the email address below.

Chat messages are automatically deleted after 7 days from the date they were sent. Apple Health data is never stored on our servers — it is read locally on your device only.

7. Children's Privacy

BadyApp is suitable for all ages (rated 4+) and does not contain any age-inappropriate content. The app is primarily designed for badminton sports groups. To create an account, users must be at least 13 years old. We do not knowingly collect personal data from children under 13. If a parent or guardian believes a minor's data was submitted without appropriate consent, please contact us at rationaldelta@gmail.com and we will delete it promptly.

8. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Withdraw consent for notifications at any time via your device settings

To exercise any of these rights, contact us at the email below. If you are located in the European Economic Area or United Kingdom, these rights are guaranteed under GDPR/UK GDPR. Our legal basis for processing your data is providing the service you signed up for.

9. Third-Party Services

BadyApp uses the following third-party services:

• Google Firebase (Authentication, Firestore, Cloud Messaging, Cloud Functions, Hosting) — Firebase Privacy Policy
• Firebase Analytics — we use Firebase Analytics to track anonymised in-app events (e.g. game created, session viewed). No personal health data is included in analytics events. — Firebase Privacy Policy
• Google Sign-In — Google Privacy Policy
• Sign in with Apple — Apple Privacy Policy
• Apple HealthKit (iOS only) — health data is read from Apple Health on your device. It is not shared with Apple or any third party by BadyApp. — Apple Privacy Policy
• Apple App Store (In-App Purchases) — Game Insights Pro subscriptions are processed by Apple. We receive only a subscription status confirmation; no payment details are shared with us. — Apple Privacy Policy

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of significant changes via the app. Continued use of the app after changes constitutes acceptance of the updated policy.

11. Account & Data Deletion

You can delete your BadyApp account and associated data at any time.

Option 1 — In-app deletion (recommended):

• Open BadyApp → Profile → Close Account
• Follow the on-screen steps to permanently close your account
• Your Firebase Auth credentials are deleted immediately

Option 2 — Email request:

• Send an email to rationaldelta@gmail.com with the subject line "Account Deletion Request"
• Include the email address associated with your BadyApp account
• We will process your request within 7 business days

What gets deleted:

• Your account credentials and profile (name, email, photo)
• Your FCM notification tokens
• Your app preferences (theme, skill level)

What may be retained:

• Historical transaction and game records within your group — these are retained for group financial integrity and audit purposes for up to 12 months after account deletion

12. Contact Us

If you have any questions about this Privacy Policy or your data, please contact us at: