PRIVACY POLICY

1. Scope

This Privacy Policy applies to Shadow Ascension, a gamified calisthenics and bodyweight-training application operated by Golden Freedom LLC (the “Service,” “we,” “us,” or “our”). By using the Service, you acknowledge the practices described below.

2. Information we collect

Account and authentication information

• Email address and the account identifier used to keep your profile connected to you.
• If you use Google Sign-In, Google may provide your Google account identifier, email address, display name, and profile image, depending on your Google settings and the information made available through the sign-in flow.
• Authentication and session information needed to sign you in, maintain your session, connect login methods, and protect your account. Password authentication is handled by Supabase; we do not receive your plain-text password.
• If you enable two-step verification, Supabase stores the authenticator factor needed to verify one-time codes. Shadow Ascension does not receive the codes generated by your authenticator except when you submit one for verification.

Profile and workout preferences

• Profile name and internal account identifier.
• Date of birth or age calibration, classification selection, fitness level, training goal, workout days, preferred duration, equipment access, strength clearances, and any movement limitations you choose to provide.
• Registration Evaluation and reassessment results used to calibrate training and safety parameters.

Training and progression information

• Daily Operation, Gauntlet, Emergency Operation, Bonus Run, and Ascension Trial activity.
• Exercises, sets, repetitions, timed holds, session duration, completion dates, difficulty feedback, streaks, and recent movement history.
• Rank, internal level, XP, titles, achievements, statistics, exam history, and capacity or recovery status.

Subscription and purchase information

• Subscription provider, product or price identifier, billing interval, subscription status, trial and renewal dates, cancellation state, and provider customer, subscription, or order metadata.
• For Google Play purchases, the purchase token and order metadata needed for server verification and acknowledgement. For Stripe purchases, payment-card and wallet details are collected by Stripe, not by Shadow Ascension; we receive transaction and subscription status needed to provide Premium.

Notifications and device information

• Firebase Cloud Messaging or device installation tokens, app platform, notification preferences, and delivery metadata when you enable notifications.
• Device/browser type, operating environment, app version, timestamps, IP address, and security or diagnostic logs processed by our service providers. An IP address may allow a provider to infer approximate location; Shadow Ascension does not request precise device location.

Technical information

Our hosting, authentication, and database providers may process standard technical information such as IP address, browser or device type, timestamps, authentication events, and diagnostic or security logs. The app may also keep limited data in browser storage so an active workout and interface preferences can continue reliably on your device.

3. How we use information

We use information to:

• Create, authenticate, secure, restore, and manage your account.
• Save progress across supported browsers and devices.
• Generate personalized workouts, adjust training volume, apply age- and classification-based standards, and support recovery safeguards.
• Calculate XP, rank eligibility, streaks, achievements, exam results, and other progression features.
• Operate Ascendant Rankings and the Community activity feed, and display eligible public progression and completed-operation information.
• Maintain, troubleshoot, secure, and improve the Service; prevent abuse; and comply with legal obligations.

4. Public rankings and Community feed

Ranking and Community features display the Ascendant Name you choose for your profile. They may also display your current classification, internal level, XP, equipped title, verified operation type and date, session duration, exercise names and prescriptions, recorded intensity, and summary workout metrics such as sets, repetitions, push-ups, lower-body repetitions, or core time. Your email address, authentication account identifier, date of birth, limitations, and Google account details are not intended to appear publicly.

5. Storage and security

Account records and synced training progress are stored using Supabase authentication and database services. Some active-session information may also be stored locally in your browser. We use reasonable administrative and technical safeguards designed to protect information, but no online service or storage method can guarantee absolute security.

6. Service providers and disclosures

We use service providers only as needed to operate the Service, including:

• Supabase for authentication, linked identities, and cloud data storage.
• Google Sign-In when you choose Google authentication or connect a Google identity.
• Firebase Cloud Messaging to register enabled devices and deliver notifications.
• Google Play Billing and the Google Play Developer API to offer, verify, acknowledge, restore, and reconcile Android subscriptions.
• Stripe to display website subscription offers, complete checkout, manage subscriptions, process refunds, and report subscription events.
• Cloudflare and our website hosting provider for domain, hosting, delivery, security, and email-routing infrastructure.

These providers process information under their own terms and privacy policies. We may also disclose information when reasonably necessary to comply with law, protect users or the Service, investigate fraud or abuse, or complete a business transfer subject to appropriate safeguards.

8. Retention, deletion, and your choices

We retain account and training information while your account remains active. You may update supported profile fields within the app. You can permanently delete your account from Settings → Delete Account & Training Data, or begin through our public account-deletion page. You must sign in and confirm the irreversible action so we can verify that the account belongs to you.

Completed account deletion hard-deletes your Supabase authentication account, linked sign-in identities and sessions, fitness profile and credential, workout and operation history, classification and XP, titles and skills, ranking record, active billing-account record, Google Play purchase-verification record, notification registrations, and the current device’s Shadow Ascension browser data. Shadow Ascension retains no recoverable app account, profile, training history, or ranking copy after deletion.

We may retain pseudonymized payment-event and webhook audit records after account deletion when reasonably necessary for fraud prevention, accounting, dispute handling, security, and legal or payment-provider obligations. The account user identifier is removed when the account is deleted; retained records may include provider/event identifiers, event type and date, a subscription reference, and a payload hash, but not a restorable user profile. We retain those audit records only while reasonably necessary for those purposes and applicable legal, tax, dispute, and provider requirements. Infrastructure providers may separately retain limited security or diagnostic logs under their own retention rules. For access or correction questions, or if you cannot sign in to use self-service deletion, contact support@shadowascension.app.

9. Children’s privacy

The Service is not intended for children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided personal information through the Service, contact us so we can investigate and take appropriate action, including deletion where required.

10. Changes to this policy

We may update this Privacy Policy as the Service or applicable requirements change. The “Last updated” date identifies the current version. Material changes may also be communicated within the Service when appropriate.

11. Operator and contact

Shadow Ascension is operated by Golden Freedom LLC. Privacy questions and requests may be sent to support@shadowascension.app.