Privacy Policy

Last updated: April 17, 2026 · Effective immediately

DEFI is operated by DEFI APP LABS LTD (company number 17159909), registered in England and Wales. This Privacy Policy explains how we collect, use, and protect your personal data when you use the DEFI app.

1. Data We Collect

When you use DEFI we collect the following information:

Account data: email address, username, profile photo, gym name
Fitness and performance data: personal records, workout scores, challenge results, body weight logs, DEFI score and tier
Social data: followers, following, challenge history, comments, likes
Device data: push notification token, device type, operating system
Usage data: app activity, feature usage, error logs
Payment data: subscription status (processed securely via RevenueCat and Apple — we never store card details)

2. How We Use Your Data

To provide and improve the DEFI app and its features
To display your athletic identity card and performance analytics
To facilitate challenges, rankings, and social features
To send push notifications and email updates about your challenges and activity
To process your DEFI Supporter subscription via RevenueCat
To serve light banner advertisements in the feed (after a 14-day grace period)
To monitor app errors and performance via Sentry

3. Advertising and Tracking (ATT)

DEFI uses Google AdMob to display light banner advertisements in the app feed. These ads help keep DEFI free for all athletes.

On iOS, we ask for your permission to track your activity across other apps and websites (App Tracking Transparency). If you allow tracking, ads will be personalised to your interests. If you decline, you will still see ads but they will not be personalised. You can remove all ads by subscribing to DEFI Supporter.

You can change your tracking preference at any time in your iPhone Settings → Privacy & Security → Tracking.

4. In-App Purchases

DEFI offers a DEFI Supporter subscription at £2.99/month, processed through Apple's App Store and managed via RevenueCat. We do not store your payment details. All billing is handled by Apple. You can cancel your subscription at any time through your Apple ID settings.

5. Third-Party Services

We use the following third-party services to operate DEFI:

Supabase — database and authentication (data stored in EU region)
Google AdMob — in-app advertising
RevenueCat — subscription management
Sentry — error monitoring and crash reporting
Resend — transactional email notifications
Expo — push notification delivery

Each service operates under its own privacy policy and data processing terms.

6. Data Storage and Security

Your data is stored securely on Supabase infrastructure in the EU region. We use row-level security policies to ensure athletes can only access their own data. All data is transmitted over HTTPS.

7. Your Rights (GDPR)

If you are based in the UK or EU, you have the following rights regarding your personal data:

Right of access — request a copy of your data
Right to rectification — correct inaccurate data
Right to erasure — request deletion of your account and data
Right to portability — receive your data in a portable format
Right to object — object to processing of your data for direct marketing

To exercise any of these rights, contact us at privacy@getdefiapp.com.

8. Account Deletion

You can delete your account at any time from within the DEFI app (Settings → Delete Account) or by emailing privacy@getdefiapp.com. Upon deletion, all your personal data, performance records, and social activity will be permanently removed from our systems within 30 days.

9. Children's Privacy

DEFI is not directed at children under the age of 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via the app or email. Continued use of DEFI after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact:

DEFI APP LABS LTD
Company number: 17159909
Email: privacy@getdefiapp.com
Website: getdefiapp.com