Privacy Policy

What we collect

Account: your email address and password (stored securely as a hash by our database provider).

Profile: display name, username, and anything you choose to add — bio, location, links, interests, profile photo.

Content: room posts and replies, private messages, photos you send in chats, reactions, friend connections, Circles and blocks.

Training: workouts, sets, weights and reps you log, programmes you create, and milestones (timers).

Membership: whether you have LOCKED IN and its renewal status, from Apple via RevenueCat. We never see your card details.

Safety: reports you make or receive, moderation actions, and a private copy of messages and posts that are deleted (see “How long we keep data”).

Some interests and communities, such as Recovery or Sobriety, can reveal information about your health. Adding them is always your choice, they’re never assigned automatically, and you can remove them at any time.

How we use it

To run EXOLUS: your account, profile, chats, communities, training history and membership (necessary to provide the service you asked for). To keep members safe: reviewing reports, enforcing our rules and preventing abuse (our legitimate interest). For anything else we’d ask for your consent first.

Who can see what

Your profile, room posts and interests are visible to signed-in members. Private messages and Circles are visible only to their members; moderators can’t browse them. Workouts, Match Facts and milestones are private to you. Others see your achievement tiers in room chats unless you turn this off.

Service providers

Supabase (database, file storage and sign-in; data stored in Ireland, EU), RevenueCat (subscription status), Apple (payments and app distribution) and Resend (account emails). They process data only on our instructions. Where data is transferred outside the UK or EU, it’s protected by standard contractual clauses or equivalent safeguards.

How long we keep data

We keep your data while your account exists. When you delete your account we delete your profile, connections, private messages, photos you uploaded, training data and milestones. Room discussions other members replied to remain as “Message deleted” by a “Deleted member” so their replies still make sense.

A private copy of deleted posts and messages is kept, separately and only accessible to us, for as long as needed to handle safety reports and legal obligations, and then deleted.

Your rights

You can access, correct, export or delete your data, and object to or restrict how we use it. Delete your account in You › Account › Delete account, or email support@exolushq.com. If you’re in the UK you can complain to the Information Commissioner’s Office (ico.org.uk); in the EU, to your local data protection authority.

Children

EXOLUS isn’t for anyone under 16. If we learn an account belongs to someone younger, we’ll delete it.

Security and changes

Data is encrypted in transit, private data is protected by access rules in our database, and photos in private chats are stored privately. We’ll update this policy when things change and tell you in the app about significant changes.

Contact

Privacy questions or requests: support@exolushq.com