Privacy Policy
Niniejszy dokument jest dostępny w języku angielskim. Polskie podsumowania sekcji podane są kursywą.
01Who is the Data Controller? / Kim jest Administrator Danych?
The data controller within the meaning of Art. 4(7) GDPR is:
operating as: bypop (działalność nierejestrowana)
Country: Poland
E-mail: hello@bypop.dev
This Privacy Policy covers both the RepDrop mobile app (iOS and Android) and the website at repdrop.bypop.dev.
I am an independent developer. I do not have a registered company or a designated Data Protection Officer (DPO), as I do not process personal data on a large or systematic scale. For any privacy-related questions, please contact me directly by e-mail.
Administratorem danych osobowych jest Kamil Popczyk, prowadzący działalność nierejestrowaną pod nazwą bypop, z siedzibą w Polsce. Kontakt: hello@bypop.dev.
02What Data Do I Collect and Why? / Jakie dane zbieram i dlaczego?
2.1 Fitness and App Data - Stored Locally / Dane przechowywane lokalnie
Your personal fitness data - the full rep history, challenge settings, break history, and notification preferences - is stored only on your device:
- On iOS: in your personal iCloud container (your own Apple account), or on-device if iCloud is unavailable.
- On Android: on the device only (local storage).
This data never reaches my servers - I have no server. I have no access to it.
Legal basis (GDPR): Performance of the service you requested - Art. 6(1)(b).
Twoje dane treningowe (pełna historia, ustawienia, preferencje) są przechowywane wyłącznie na Twoim urządzeniu lub w iCloud. Firebase Analytics (sekcja 2.2) otrzymuje jedynie anonimowe sygnały o zdarzeniach (np. „zalogowano powtórzenia"), nie kopię Twoich danych.
2.2 Analytics - Firebase Analytics (Google) / Dane analityczne
I use Firebase Analytics, a service by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA), to understand how the App is used in aggregate so I can improve it.
Firebase Analytics does not collect your name, e-mail address, or any other directly identifying information. The following anonymous/pseudonymous usage events are collected:
| Event | Data collected |
|---|---|
| Screen view | Screen name |
| Onboarding step / complete | Step identifier |
| Challenge started | Exercise type, difficulty, duration (days), goal reps |
| Challenge completed | Exercise type, difficulty, duration, total reps |
| Reps logged | Amount added, running total |
| Break started | Activity name, duration (minutes) |
| Paywall viewed | Source screen name |
| Subscription status | is_pro: true or false |
Firebase assigns each device an anonymous installation identifier (Firebase Installation ID) generated by the Firebase SDK. On Android, Firebase may also use the Google Advertising ID (GAID) provided by the operating system. The App does not request Apple's Advertising Identifier (IDFA) on iOS - no App Tracking Transparency prompt is shown. None of these identifiers contain your name or contact details. You can reset or limit the Android advertising ID at any time:
- Android: Settings → Google → Ads → Reset advertising ID
Analytics is enabled by default with no in-app opt-out prompt. If you wish to limit data collection, use your device's advertising ID controls above.
Legal basis (GDPR): Legitimate interests - Art. 6(1)(f). I use only anonymous aggregate data to understand which features are used, with no profiling or advertising involved.
International transfer: Google LLC is in the USA. The transfer of analytics data is covered by Standard Contractual Clauses (SCCs) adopted by Google under Art. 46(2)(c) GDPR. More details: Google's data transfer mechanisms.
Firebase Analytics zbiera anonimowe zdarzenia użycia aplikacji. Dane są przekazywane do Google LLC w USA na podstawie Standardowych Klauzul Umownych (SCC). Google nie zna Twojego imienia ani adresu e-mail.
2.3 Website Analytics - Google Analytics / Analityka strony internetowej
The website repdrop.bypop.dev uses Google Analytics 4, a service by Google LLC (USA). When you visit the website, Google Analytics collects:
| Data collected | Example |
|---|---|
| Pages visited | Which page you landed on |
| Time on page | How long you stayed |
| Device & browser type | iPhone, Chrome |
| Approximate country / region | Based on IP address |
| Referral source | How you found the site |
Google Analytics uses cookies stored in your browser to distinguish visits. Your IP address is anonymised before storage.
Cookies set after consent: _ga (distinguishes visitors, up to 2 years) and _ga_35STRWSECQ (GA4 session state, up to 2 years). If you decline, no analytics cookies are set and Google Analytics is not loaded.
Legal basis (GDPR): Consent - Art. 6(1)(a). Analytics cookies are only set after you accept via the consent banner.
International transfer: Google LLC is in the USA. Transfer is covered by Standard Contractual Clauses (SCCs). See Google Analytics data privacy.
You can opt out of Google Analytics across all websites by installing the Google Analytics Opt-out Browser Add-on.
Strona repdrop.bypop.dev używa Google Analytics 4 (Google LLC, USA). Analityczne pliki cookie są ustawiane wyłącznie po wyrażeniu zgody przez użytkownika za pomocą baneru cookie. Podstawa prawna: art. 6 ust. 1 lit. a) RODO.
2.5 In-App Purchases / Zakupy w aplikacji
If you subscribe to RepDrop Pro ($1.99/month), the payment is processed entirely by:
- Apple App Store (iOS) - Apple Privacy Policy
- Google Play (Android) - Google Privacy Policy
I receive only a confirmation from the store that a valid subscription exists. I never see or store your payment card details.
The date your subscription was first started (trial start date) is stored locally on your device to manage free trial state and show you how many trial days remain. This date is also stored in your iCloud container on iOS (if iCloud is available) so it persists across reinstalls. It is never transmitted to me or any third party.
Płatności obsługują Apple lub Google. Otrzymuję jedynie potwierdzenie, że subskrypcja jest aktywna. Nie widzę danych karty płatniczej. Data rozpoczęcia subskrypcji jest przechowywana lokalnie na urządzeniu (i w iCloud na iOS) wyłącznie w celu obsługi okresu próbnego.
2.6 Notifications / Powiadomienia
The App schedules local notifications entirely on your device (daily challenge reminders, break reminders, weekly recaps). There is no notification server. Notifications are not used to collect any data.
03Retention Periods / Okresy przechowywania
| Data | Retention |
|---|---|
| Local / iCloud fitness data | Until you uninstall the App or remove it from iCloud settings |
| Firebase Analytics events | 14 months (Google's default; I have no control over this) |
| IAP subscription status | Verified on each app launch; no persistent copy on my side |
04Your Rights Under GDPR / Twoje prawa wynikające z RODO
If you are in the EEA, UK, or Switzerland, you have the following rights:
| Right | Article | What it means |
|---|---|---|
| Access | Art. 15 | Request a copy of personal data I hold about you |
| Rectification | Art. 16 | Request correction of inaccurate data |
| Erasure | Art. 17 | Request deletion of your data |
| Restriction | Art. 18 | Ask me to limit how I use your data |
| Portability | Art. 20 | Receive your data in a machine-readable format |
| Objection | Art. 21 | Object to processing based on legitimate interests |
To exercise any right, e-mail me at hello@bypop.dev. I will respond within 30 days (Art. 12 GDPR).
Right to Lodge a Complaint / Prawo do skargi
Poland - UODO:
ul. Stawki 2, 00-193 Warszawa
Tel.: +48 22 531 03 00
E-mail: kancelaria@uodo.gov.pl
Web: uodo.gov.pl
Other EU/EEA countries: You may contact the supervisory authority in your country of residence.
UK: Information Commissioner's Office - ico.org.uk
Masz prawo złożenia skargi do Prezesa UODO jeśli uważasz, że przetwarzam Twoje dane niezgodnie z RODO.
05Rights for US Users / Prawa użytkowników w USA
California - CCPA / CPRA
| Right | Details |
|---|---|
| Right to Know | What categories of personal data I collect, sources, purposes, and third parties |
| Right to Delete | Request deletion of your personal data |
| Right to Correct | Request correction of inaccurate data |
| Right to Opt-Out of Sale | I do not sell personal data |
| Non-Discrimination | I will not discriminate for exercising these rights |
Categories of personal information collected (CCPA):
| Category | Collected? | Purpose |
|---|---|---|
| Name, e-mail, IP address | No | - |
| Device / advertising identifier | Yes (via Firebase/OS) | Anonymous analytics |
| App usage / screen activity | Yes (via Firebase) | Anonymous analytics |
| Fitness / health data | No (on your device only) | - |
| Payment / financial data | No | - |
| Geolocation | No | - |
To submit a request: e-mail hello@bypop.dev with subject "CCPA Request". I will respond within 45 days.
Shine the Light (Cal. Civ. Code § 1798.83): I do not share personal information with third parties for their own direct marketing purposes.
Virginia, Colorado, Connecticut and other US states
I extend the same access, deletion, and correction rights to residents of states with enacted comprehensive privacy laws (VCDPA, CPA, CTDPA, etc.).
06Third-Party Services / Usługi zewnętrzne
| Service | Purpose | Privacy Policy |
|---|---|---|
| Firebase Analytics - Google LLC, USA | Anonymous usage analytics | policies.google.com/privacy |
| Apple App Store - Apple Inc., USA | iOS in-app purchases + iCloud sync | apple.com/legal/privacy |
| Google Play - Google LLC, USA | Android in-app purchases | policies.google.com/privacy |
All three are US-based. EU data transfers are covered by SCCs or applicable adequacy decisions.
07Children's Privacy / Ochrona prywatności dzieci
RepDrop is not directed at children under 13 (USA - COPPA) or under 16 (Poland / EU). I do not knowingly collect personal data from children below these ages. If you believe a child is using the App, please contact me and I will take appropriate steps.
Aplikacja nie jest przeznaczona dla dzieci poniżej 16 lat (Polska/UE) ani 13 lat (USA).
08Changes to This Policy / Zmiany polityki
I may update this Privacy Policy. When I do, I will update the "Last updated" date above. For material changes, I will display a notice within the App. Your continued use of the App after the effective date constitutes acceptance.
O istotnych zmianach poinformuję w aplikacji.
09Contact / Kontakt
See also our Terms of Service.