Privacy Policy

ChallengeWithFriends · Effective July 14, 2026

ChallengeWithFriends is operated by Andeon Apps, a sole proprietorship based in New York, USA ("we," "us"), which is the data controller for your information. This policy explains what we collect, why, and what we do with it — in plain language, because the honest answer is short: we collect what the app needs to work, and nothing else.

What we collect

• Account info. Your name and email address, provided when you sign in with Apple or Google. If you use Apple's private relay email, that's what we see. We also assign you a random account ID that links your data together.
• Your content. Challenges you create (names, descriptions, icons) and the photos you log as daily proof.
• Activity. Which challenges you're in, which days you logged, streaks, and completion — the mechanics of the app.
• Notifications. A device push token and a per-device identifier, stored while you're signed in and used only to deliver notifications. You control whether notifications are shown in iOS Settings and per challenge in the app.
• Purchases. Your subscription status (via RevenueCat and Apple). Payment itself is handled entirely by Apple — we never see your card or billing details.
• Diagnostics. Crash reports, performance data, and basic usage analytics, collected automatically via Google Firebase — including technical details like device model, OS version, IP address, and app-instance identifiers — so we can fix bugs.

What we don't do

• We don't sell your data. To anyone. Ever.
• We don't run ads or track you across other apps or websites.
• We don't use your photos for anything except showing them to your challenge group.

Who sees your content

ChallengeWithFriends is a group app: participants in a challenge can see your name, your daily photos in that challenge, your logging activity, and group stats. Challenges are joinable only by invite code or link — there is no public feed and no user search. Share invite links only with people you want in the group.

Service providers

We use a small set of providers to run the app, each receiving only what they need: Google Firebase (sign-in, database, photo storage, notifications, crash and performance reporting), RevenueCat (subscription status), and Apple / Google (sign-in and payments). These providers are bound to protect your data to at least the standard described in this policy and may use it only to provide their services to us — see the privacy policies of Google Firebase, RevenueCat, and Apple for details. We may also disclose information if the law requires it.

Retention and deletion

Your data stays while your account is active. Activity feed items are scheduled to expire 90 days after they're created (removal can take a few additional days). When you delete your account (Settings → Account → Delete Account), your profile and the challenges you created — including all photos in them — are permanently removed. Photos and log entries you posted in challenges created by other people stay in those challenges; leave a challenge first (or ask us) if you want them scrubbed too. Diagnostic and analytics data is retained by Firebase for a limited period (up to 14 months) and then deleted or aggregated automatically.

Your rights

You can access, correct, or delete your information at any time — most of it directly in the app; for a copy of your data, email support@andeonapps.com. Where laws like the GDPR apply, we process your data to provide the service you signed up for (contract), to fix bugs and keep the app secure (legitimate interests), and — for optional things like notifications — with your consent, which you can withdraw anytime. Depending on where you live (for example the EU/EEA, UK, or California), you may have additional statutory rights; email us and we'll honor them.

Children

ChallengeWithFriends is not directed at children under 13, and we don't knowingly collect data from them. If you believe a child under 13 has an account, contact us and we'll delete it.

Security

Data is encrypted in transit and stored on Google Firebase infrastructure in the United States — if you use the app from outside the US, your information is transferred to and processed in the US, where privacy laws may differ from your country's. Database access is restricted by server-side security rules to the account or challenge group the data belongs to. Photos are stored at unguessable URLs and are readable only within the app by signed-in users.

Changes

If we make meaningful changes to this policy, we'll update the date above and note it in the app. Continued use after changes means you accept the updated policy.