XPire Privacy Policy
Introduction
Welcome to XPire ("we," "our," or "us"). We are committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and website at https://xpireapp.com.
By using XPire, you agree to the collection and use of information in accordance with this policy.
Information We Collect
We collect several types of information to provide and improve our service:
Account Information
Email address (for authentication and account recovery)
Username and display name
Profile photo (if you choose to upload one)
Fitness and Workout Data
Workout logs (exercises, duration, distance, sets, reps)
Fitness metrics (weight, body measurements, personal records)
Streak data and XP points
Conquered countries and achievements
Location Data
GPS coordinates during workout tracking (when you enable live tracking)
Workout routes and paths
Real-time location for map features
Media Content
Photos and videos you upload to posts and stories
Profile pictures and cover images
Device Information
Device type and operating system
Push notification tokens
Timezone settings
Usage Data
App usage patterns and feature interactions
Ad interactions and preferences
How We Use Your Information
We use the collected information for:
Providing and maintaining the XPire service
Tracking your workouts and fitness progress
Displaying your workout routes on maps
Enabling social features (following, messaging, challenges)
Calculating XP and managing conquered territories
Sending streak reminders and notifications
Displaying personalized advertisements
Improving app performance and user experience
Communicating important updates about the service
Data Sharing and Disclosure
We do not sell your personal information. We may share your data with:
Service Providers
Supabase (database and authentication services)
Firebase (push notification services)
MapLibre (mapping and GPS visualization)
Ad networks for displaying advertisements
Other Users
Profile information you make public
Posts, stories, and workout achievements you share
Leaderboard rankings and challenge results
Legal Requirements
When required by law or legal process
To protect our rights or prevent harm
Data Storage and Security
Your data is stored securely using industry-standard encryption:
All data is encrypted in transit using HTTPS/TLS
Data at rest is encrypted in our cloud infrastructure
We use Supabase's secure cloud infrastructure
Access to personal data is restricted and monitored
Your Rights and Choices
You have the right to:
Access Your Data
View your profile and workout history in the app
Request a copy of your personal data
Delete Your Data
Delete individual workouts, posts, and stories
Delete your entire account (Settings > Delete Account)
Account deletion permanently removes all your data
Control Notifications
Enable or disable push notifications in app settings
Manage email notification preferences
Location Permissions
Grant or revoke GPS access through your device settings
Use manual workout logging without location tracking
Data Retention
Active accounts: Data retained while your account is active
Deleted accounts: All data permanently deleted within 30 days
Workout media: Automatically cleaned up after expiration
Children's Privacy
XPire is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us.
International Data Transfers
Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for international transfers.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy in the app and updating the "Last updated" date.
Contact Us
If you have questions about this Privacy Policy, please contact us at:
Email: hello@xpireapp.com Website: https://xpireapp.com
Additional Rights for EU/California Residents
EU Residents (GDPR)
Right to data portability
Right to object to processing
Right to lodge a complaint with a supervisory authority
California Residents (CCPA)
Right to know what personal information is collected
Right to request deletion of personal information
Right to opt-out of the sale of personal information (we do not sell data)
Last update: January 2026
