Privacy Policy

• We read your body weight and step count from Apple Health and use them for one thing: tracking and verifying your progress in the challenges you join.
• We never sell your information and we never use your health data for advertising or marketing. The app contains no advertising or third-party analytics software.
• To run paid challenges we need to confirm you are 18 or older and located in a state where we operate, and we need a way to take your entry fee and pay your prize. Those steps use specialist providers (Stripe, Finix, PayPal), described below.
• You can delete your account inside the app at any time.

• Account details: your name, email address and a password when you create an account. Sign-in is handled by our authentication provider, Supabase; we never see or store your password in readable form.
• Profile and goals: your target weight, preferred units (pounds or kilograms) and notification preferences. Your target weight is a goal you type in; it is not a measurement.
• Date of birth: collected during the in-app age check because the Service is only for adults (see "Age and identity verification").
• PayPal email address: if you win a paid challenge, we ask for the PayPal email address your prize should be sent to.
• Verification photos and videos: when a challenge requires proof, you record a photo or video in the app (see "Verification photos and videos").
• Messages you send us: anything you include when you contact support or use the contact form on our website (name, email address and your message).
• Website quiz and waitlist: if you take the fitness quiz on our website, we store the name and email address you enter together with your answers (for example age, height, current weight, goal weight and activity level) so we can show you your results and follow up about the app.

Weight Wagers uses Apple's HealthKit framework. This section describes exactly how.

• What we read: two data types only, body weight (body mass) and step count. We request read-only access. We do not write anything to Apple Health.
• What we ignore: weight samples that were typed by hand into the Health app (samples Apple marks as user-entered) are excluded. Only weights recorded by a connected scale or another device count toward a challenge. Body weight cannot be typed into Weight Wagers at all.
• Background delivery: with your permission, Apple Health notifies the app when a new weight or step sample arrives so your challenge progress can stay current even when the app is not open.
• What we do with it: we store the weight and step readings we receive on our servers, attached to your account, and use them solely to calculate and display your challenge progress, to decide whether you met your goal, and to verify results before a prize is paid.
• What we never do with it: we never use Apple Health data for advertising, marketing, profiling or any use-based data mining. We never sell it. We never share it with third parties, other than the service providers that store and process data on our behalf so the Service can run (currently Supabase, which hosts our database in the United States). We do not share your health data with other participants; they see only whether you completed a challenge, never your readings.
• Your control: you decide which Health data types the app can read, and you can change or revoke access at any time in the iPhone Settings app under Privacy & Security, then Health. If you revoke access, the app can no longer track progress in weight or step challenges.

Paid challenges are only available in certain U.S. states. When you join or create a paid challenge, the app asks for your location (while using the app only) and uses it, together with your IP address, to determine your state. We store the resulting state, the time it was checked, and the IP address used to join. We do not track your location in the background and we do not keep a history of your movements.

• Entry fees are charged per challenge. There is no wallet, stored balance, deposit or withdrawal feature.
• Cards: card details are entered into secure fields provided by our payment processor, Finix, which tokenizes them. Full card numbers never touch our servers. Finix gives us a payment token and non-sensitive details (card brand, last four digits, expiration) so you can recognise your saved payment methods.
• Bank debits (ACH): if we offer bank debit (ACH) as a payment option and you choose it, you authorise the debit under NACHA rules and the bank details are processed and stored by Finix, not by us.
• What we keep: a record of each transaction (amount, date, challenge, status and the processor's reference) so we can show your transaction history, handle refund requests and meet our financial record-keeping obligations.
• Finix processes your payment information under its own privacy policy.

Weight Wagers is only for people aged 18 or older. Before you can take part in paid challenges we verify your age and identity through Stripe Identity. You provide your date of birth and a government-issued ID document directly to Stripe, which checks them. We store your date of birth, the verification result (status and tier) and a reference number that lets us look the check up with Stripe. We do not store images of your ID document. Stripe processes your document under its own privacy policy.

Prizes are paid to the PayPal email address you give us. To send a payout we share that email address, the amount and a short description of the challenge with PayPal. We keep a record of each payout. PayPal processes your information under its own privacy policy.

Some challenges require you to prove a result, for example a video of you on your scale. The app uses your camera and microphone to record it, only when you start a recording. The files are stored in our storage provider (Supabase Storage, in the United States), are visible to you and to our team for the purpose of verifying challenge results, and are not shown to other participants. They are deleted when you delete your account.

To keep real-money challenges fair and to meet our legal obligations, we collect some technical information:

• From the app: an identifier Apple assigns to the app on your device (the "identifier for vendor"), your iOS version and whether the device appears to be jailbroken. This identifier cannot be used to track you across other companies' apps.
• From your connection: your IP address and browser or app user-agent string when you use the Service, and the IP address used when you accept our Terms or join a challenge.
• Fraud checks: when you join a paid challenge we send your IP address and user-agent string to IPQualityScore, a fraud-prevention service, which tells us the approximate country and region of the connection and whether it looks like a VPN, proxy or anonymising network, along with a risk score. We store that result and the decision we made.

We use this information to prevent duplicate accounts, payment fraud and entries from outside the states where we operate, and to investigate disputes.

Our website uses Google Analytics and Vercel Analytics to understand how visitors use the site (pages viewed, approximate location, browser and device type). Google Analytics uses cookies. The iPhone app does not include Google Analytics, advertising software or any other third-party analytics or tracking software. Diagnostic logs the app produces stay on your device.

• To create and secure your account and sign you in.
• To run challenges: reading your Apple Health progress, calculating results, verifying proof and paying prizes.
• To confirm you are eligible: age, identity and state of residence.
• To charge entry fees and keep accurate financial records.
• To send you account, challenge and payment notices, including reminders you have turned on in the app.
• To answer your questions and support requests.
• To prevent fraud and abuse and to comply with the law.
• To understand how our website is used so we can improve it.

We share personal information only with the providers we need to operate the Service, each limited to its role:

• Supabase: database, authentication and file storage (United States).
• Vercel: hosting for our website and backend (United States).
• Finix: payment processing for entry fees.
• Stripe: age and identity verification.
• PayPal: prize payouts.
• IPQualityScore: fraud prevention on IP addresses.
• Google: analytics on our website only.
• Apple: the App Store and Apple Health on your device. Apple Inc. is not a sponsor of, and is not involved in, any Weight Wagers challenge or prize.

We may also disclose information when the law requires it, to protect the rights and safety of Weight Wagers, our users or others, or, if Weight Wagers is acquired or merges with another company, to the new owner under this policy. We do not sell personal information and we do not share it with advertisers.

Our servers and providers store your information in the United States. The Service is offered to people in the United States.

• While your account is active, we keep your information so the Service works.
• When you delete your account, we permanently delete your weight and step readings, quiz answers, saved payment methods and verification photos and videos, and we remove your name, email address, date of birth, PayPal email, location and profile photo from your profile.
• What we must keep: records of payments, payouts and prizes, the outcome of identity checks (status only, with the vendor reference removed), your acceptance of our Terms, fraud-prevention decisions and the aggregate result of challenges you took part in. We keep these because payment, tax and anti-fraud rules require it. They are no longer connected to your name or email.

We protect your information with encryption in transit (HTTPS), per-user access controls in our database, payment tokenization (so card numbers never reach us) and access limited to the people who need it. No online service can promise perfect security; if we learn of a breach affecting your information we will tell you as the law requires.

• Review and update your name, target weight, units, PayPal email and notification settings in the app under Profile.
• Control device permissions for Apple Health, location, camera and microphone in the iPhone Settings app.
• Turn off notifications in the app or in iPhone Settings.
• Delete your account in the app (see below).
• Ask us to access, correct, delete or send you a copy of the information we hold about you by emailing admin@weightwagersapp.com from the address on your account. We respond to every request and will verify that it comes from you.
• Depending on where you live you may have additional rights under your state's privacy law. You can exercise them the same way. We will not treat you differently for exercising them.

Open the app, go to Profile, then Delete Account. Deletion happens on our servers and takes effect immediately; you will be signed out and cannot sign in again. If you are in a challenge that has not finished, or have a prize payout still pending, the app will tell you and you will be able to delete your account once the challenge ends or the payout completes. You can also email admin@weightwagersapp.com to request deletion.

Weight Wagers is not for anyone under 18. We do not knowingly collect information from anyone under 18, and the app checks your age before you can take part. If you believe someone under 18 has created an account, contact us and we will delete it.

When we change this policy we will post the new version here and update the date at the top. If a change materially affects how we use your information, we will also tell you in the app or by email.

Questions or requests about this policy:

• Email: admin@weightwagersapp.com
• Mail: Weight Wagers LLC, 110 Strathmore Rd, Apt 401, Brighton, MA 02135-7191, United States