Privacy Policy

2.1 Account Information

When you register for an account, we collect your email address and password (managed via Supabase for authentication). We also ask for your name, birthdate, and gender to personalize your profile. Your username is visible to other users, but it's not used for account authentication.

2.2 Location Data

We use approximate GPS location to track where you do your cold plunge sessions. This data is stored on our private and secure AWS servers. You can disable location services at any time in your device settings, though some features may become unavailable.

2.3 Camera & Media Access

We request access to your camera and media library so you can capture and upload pictures or videos of your cold plunge sessions. Uploaded media is stored in our private and secure AWS S3 servers. Public profiles allow all users to view your media, while private profiles restrict viewership to approved friends only.

2.4 Notifications

We send push notifications for session reminders, social updates (e.g., friend/follower requests), and important app feature updates. You can opt out of push notifications via your device settings.

2.5 Health & Fitness Data

Currently, we do not store any health or fitness data on our servers. If in the future we integrate with Apple Health, Apple Watch, or other wearables, we will only query such data in real-time (via AWS Lambdas) for analytics; we do not plan to retain that data on our servers.

2.6 Usage Data

We collect usage metrics such as how quickly users open notifications and the length of their activity sessions. This data is stored in a NoSQL DynamoDB database on AWS. We do not track specific times of usage.

2.7 Rewards/Points Program

We collect transaction data when users earn "PlungePoints" (e.g., completing challenges, logging sessions). In-app purchases are tracked via RevenueCat. This helps us update your points balance and reward redemptions.

4.1 Third-Party Service Providers

We rely on trusted partners to operate and improve our Services:

These providers have limited access to your data solely to perform tasks on our behalf and are obligated not to disclose or use it for other purposes.

4.2 Marketing & Affiliate Partners

We may share your email and certain usage data with affiliates or partners for co-marketing and promotional activities, as well as with advertisers or data brokers for personalized advertising campaigns.

4.3 Business Transfers

If we are involved in a merger, acquisition, asset sale, or bankruptcy, your personal data may be transferred as part of that transaction.

4.4 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency).