Privacy Policy

1. Information We Collect

We collect the following categories of information to provide and improve our services:

1.1 Personal Information

1.2 Account Information

• Firebase User ID: Unique identifier for your account
• Account type: Anonymous guest, or an account signed in with Apple, Google, or an email address and password
• Account creation date: For service provision and analytics

1.3 Usage and Activity Data

• Selected goals and preferences
• Feature engagement (affirmations viewed, meditations completed, etc.)
• Progress tracking data (completion streaks, daily activity logs)
• Bookmarked content (affirmations, book lessons, meditations)
• Notification preferences and scheduled reminder times
• Session duration and app interaction patterns

1.4 Device and Technical Data

• Device type and model
• Operating system and version
• App version
• IP address (anonymized for analytics)
• General location (country/region level, derived from IP)
• Device identifiers (IDFV for analytics; IDFA only with your consent)
• Push notification tokens (APNs and FCM)

1.5 User-Generated Content

• Vision board images (uploaded or AI-generated)
• Custom goals and affirmations
• Community posts and shared content
• Chat interactions with AI features
• Messages you send to support from the Help Center in the App. Each one is stored with your account ID, your email address and display name if your account has them, and your iOS version, so we can reply
• Friend connections, invite codes, encouragements, waterings and shared challenges, if you use the friends features (see section 8.5)

1.6 Health and Wellness Data

• Water intake logs (amount, type, timestamps)
• Breathing exercise sessions (duration, type, completion)
• Meditation sessions (duration, type, completion)
• Mood and wellness preferences
• Daily wellness progress and streaks

2. How We Use Your Data

We use your information for the following purposes:

2.1 Service Provision

• Personalize your app experience, including affirmations, meditations, and book recommendations
• Track your progress across features (streaks, completions, goals)
• Sync your data across devices when signed in
• Deliver scheduled notifications and reminders

2.2 Personalization and AI Features

• Generate personalized AI responses using OpenAI services
• Create custom affirmations and goal suggestions
• Recommend content based on your preferences and activity
• Generate vision board images based on your descriptions

2.3 Communication

• Send daily motivational reminders (with your consent)
• Notify you of feature updates and new content
• Respond to support inquiries

2.4 Analytics and Improvement

• Analyze feature usage to improve the app
• Identify and fix technical issues
• Understand user preferences to develop new features
• Measure the effectiveness of app features

2.5 Legal and Safety

• Comply with legal obligations
• Enforce our Terms of Service
• Protect against fraud and abuse
• Ensure community safety

3. Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA), United Kingdom, and other jurisdictions requiring a legal basis, we process your data based on:

Your consent can be withdrawn at any time through the app settings or by contacting us. Withdrawing consent does not affect the lawfulness of processing before withdrawal.

4. Feature-Specific Data Collection

4.1 Affirmations Feature

Data Collected:

• Selected affirmation categories and subcategories
• Viewed and bookmarked affirmations
• Voice gender preference (male/female narrator)
• Notification schedule for affirmation reminders
• Playback position and completion status

Purpose: Deliver personalized affirmations, prevent repetition, track engagement.

4.2 Meditation Feature

Data Collected:

• Selected meditation categories
• Session duration and completion status
• Playback position (for resume functionality)
• Meditation streak data
• Favorited meditations
• Voice preference

Purpose: Provide personalized meditation experiences, track wellness progress, maintain streaks.

4.3 Breathing Exercises Feature

Data Collected:

• Exercise type and difficulty selection
• Session duration and completion
• Daily progress and streak data
• Category preferences

Purpose: Guide breathing exercises, track wellness habits.

Note: Breathing exercise data may be considered health-related data in certain jurisdictions. See Section 5.

4.4 Book Lessons Feature

Data Collected:

• Book and lesson selections
• Reading/listening progress
• Bookmarked lessons
• Category preferences
• Voice preference for narration
• AI chat interactions about book content

Purpose: Deliver educational content, personalize recommendations, enable AI-powered book discussions.

4.5 Vision Board Feature

Data Collected:

• User-uploaded images from camera or photo library
• AI-generated images based on your descriptions
• Goal and vision text descriptions
• Visualization frequency and timestamps

Permissions Required:

• Camera access (optional, for taking photos)
• Photo library access (optional, for selecting images)

Purpose: Create and store personalized vision boards, generate AI images.

4.6 Goal Tracking Feature

Data Collected:

• User-defined goals
• Daily progress across all features
• Achievement milestones
• Activity timestamps

Purpose: Track overall wellness journey, provide progress insights.

4.7 Water Tracking Feature

Data Collected:

• Water intake amounts and timestamps
• Drink types and hydration coefficients
• Daily goals and achievements
• Hydration streaks
• Reminder preferences and quiet hours

Purpose: Track hydration habits, send reminders, maintain streaks.

Note: This is health-related data. See Section 5.

4.8 Notifications Feature

Data Collected:

• APNs device token
• Firebase Cloud Messaging (FCM) token
• Notification preferences per feature
• Scheduled reminder times
• Quiet hours configuration

Purpose: Deliver push notifications and scheduled reminders.

What we promise: Champ's notifications are about your own plan: the reset banner that appears when a guarded app opens, reminders you schedule yourself (affirmations, water, visualization, guardian check-ins), a "guarding resumed" notice, and your weekly garden note. We do not send marketing or promotional notifications. If we ever introduce optional marketing messages, they will require a separate, explicit opt-in inside the app; your notification permission alone is never used for them. You can turn any notification off in iOS Settings → Apps → Champ → Notifications.

4.9 Screen Time (Mindful Pause / Guard) Feature

Champ's Mindful Pause uses Apple's Screen Time frameworks (FamilyControls, ManagedSettings, DeviceActivity) to pause the apps you choose and to show you your own usage.

What stays on your iPhone (never uploaded):

• The list of apps and categories you choose to guard. Apple hands Champ opaque tokens rather than app names, Champ never tries to turn a token back into an app identity, and no server ever sees the list. It is kept only in a private storage area shared between Champ and its own Screen Time extensions on your device.
• Your per-app usage durations and pickups. Apple renders these inside a sandboxed report extension that has no network access and cannot write anything back; Champ cannot read them.
• What you do inside any app. Apple's frameworks do not expose content, and Champ never sees what you read, watch or type.
• The name of a guarded app, where it appears at all. Apple makes an app's name available to Champ's code only inside the extension that draws the pause screen, so that the screen you are looking at can name the app you just opened. It is used for that wording and nothing else: it is never saved, never added to your account, and never sent to Champ or to anyone else.

What Champ's analytics do receive (aggregate, never tied to an app name):

• Whether Screen Time access was granted or declined.
• How many apps or categories you guard (a count only).
• That a guarded app was opened, that a reset was started or completed, and coarse threshold events such as "a daily time budget of N minutes was reached". The number is the budget you set, never a per-app usage total.
• Your chosen wake and bedtime minutes, if you set them.

Purpose: Pause the apps you choose, show you your own week, and measure whether Champ's resets are helping, without ever learning which apps you use or what you do in them. Screen Time access is granted and revoked by Apple in iOS Settings → Screen Time; declining it disables app pausing only, and every other Champ feature keeps working.

5. Health and Wellness Data

Champ collects certain data that may be classified as health or wellness information under various privacy laws:

5.1 Types of Health-Related Data

• Water intake logs: Daily hydration tracking
• Breathing exercises: Session data related to respiratory wellness
• Meditation sessions: Mental wellness activity tracking
• Mood indicators: Wellness preferences and patterns

5.2 How We Handle Health Data

• Health data is processed only with your explicit consent
• We do not share identifiable health data with third parties for their own purposes
• Health data that the App stores in Firebase is kept in your own account area. It is encrypted in transit and at rest, and only your signed-in account can read or change it (see section 15.1)
• You can delete your health data at any time through the app or by contacting us

5.3 Health Data Disclaimer

The wellness tracking features in Champ are for general wellness and motivational purposes only. They are not medical devices and should not be used to diagnose, treat, cure, or prevent any disease or health condition. Always consult a healthcare professional for medical advice.

5.4 Your Control Over Health Data

• You can disable individual wellness features at any time
• You can request deletion of all health-related data
• You can export your health data upon request

6. AI-Generated Content

Champ uses artificial intelligence to enhance your experience:

6.1 AI Services Used

• OpenAI GPT: For generating personalized affirmations, book recommendations, goal suggestions, and chat responses
• OpenAI image models (gpt-image-1.5 and gpt-image-1-mini): For painting vision board images from your descriptions, and (only if you choose to add one) from a photo you supply

6.2 Data Sent to AI Services

When you use AI features, we send the following to OpenAI:

• Your prompts and requests
• Relevant context (selected categories, preferences)
• Photos you choose to add to a vision board (see 6.3)
• We do NOT send: Your name, email, or account identifiers

6.3 Photos in a Vision Board

Adding a photo of yourself or someone you love to a vision board is optional. The board is painted with or without one, and you are asked to agree before the first photo is ever picked.

If you do add one:

• The photo is stored on your device only, with file-level encryption. It is never saved to a Champ account, never backed up to our servers, and never shared with other users.
• While a board is being painted, the photo is sent to OpenAI so the painting resembles the person. It is reduced to a small copy (longest side 768 pixels) and stripped of location and other EXIF metadata first.
• On its way to OpenAI it passes through a Champ relay service, which forwards the request and keeps no copy of the photo. The relay records only which account made the request, the size of the request in bytes, and which model was asked, never the image itself.
• What comes back is an AI painting of someone who resembles you, not your photograph.
• You can delete the photo at any time from the vision board screen, which removes it from the device.

If you add a photo of another person, please make sure they are happy for you to use it this way.

6.4 AI Data Retention

• We use OpenAI's API with data retention controls
• Your prompts are processed in real-time and are not stored by OpenAI for training purposes under our API agreement
• AI-generated responses are stored in your account for your continued access

6.5 AI Content Disclaimer

AI-generated content (affirmations, book summaries, recommendations, images) is created algorithmically and may not always be accurate, complete, or suitable for your specific situation. This content is intended for motivational and educational purposes only and should not be treated as:

• Medical, psychological, or therapeutic advice
• Legal or financial advice
• Professional guidance of any kind
• Factually verified information

You are responsible for evaluating the appropriateness of AI-generated content for your personal use.

7. Book Lessons and Educational Content

7.1 Nature of Book Content

Champ provides AI-generated educational summaries and lessons inspired by published books. This content:

• Is original AI-generated educational material
• Is designed to inspire users to read the original works
• Includes full attribution to original authors and publishers
• Provides links to purchase original books (where available)

7.2 Educational Purpose

Our book lessons are created under fair use principles for educational commentary and are intended to:

• Summarize key concepts for personal learning
• Inspire further reading of original works
• Provide actionable insights for self-improvement

7.3 User Restrictions

Book lesson content is for personal, non-commercial use only. You may not:

• Reproduce or redistribute summaries
• Use content for commercial purposes
• Claim authorship of AI-generated summaries

7.4 Copyright Respect

We respect intellectual property rights. If you are a rights holder with concerns about specific content, please contact us at hello@champ.plus, and we will promptly address your concerns.

7.5 Disclaimer

Book summaries are AI interpretations intended to complement, not replace, the original works. We encourage users to purchase and read the full original books for comprehensive understanding. Summaries may not capture all nuances of the original text.

8. Community and Social Features

8.1 Public Content Sharing

When you share content to the Community feature:

• Your display name and profile photo will be visible to other users
• Shared affirmations and book lessons are public
• Other users can like and interact with your posts
• Your post history is associated with your profile

8.2 Information Visible to Others

What other people can see is set by our database rules and by what you choose to share (see section 15.1).

Anyone, including people without a Champ account:

• Community posts you share: the post text, the display name and profile photo shown with it, and its number of likes
• Your profile photo, if you upload one. Profile photos are stored as public image files that anyone can view without signing in
• Vision board images saved by versions 4.2 and earlier of the App, which uploaded them to our file storage. They are public image files in the same way. Current versions keep vision board photos on your device only (see section 6.3)

Other Champ users (anyone signed in to the App, including with a guest account):

• Your main profile record, if they have your account ID. It holds details such as your display name, email address (if your account has one), profile photo link, coin balance and the token we use to send you notifications. Account IDs are not secret (for example, your invite code leads to yours, see section 8.5), so treat this record as visible to other Champ users. The App uses it to show your display name when someone adds you as a friend. We plan to narrow it to your display name in a future update
• They can also send you a friend request, which is stored in your friends list until you accept or decline it. Encouragements can come from anyone with a pending or accepted friendship with you. Waterings come only from accepted friends

Friends you connect with (see section 8.5):

• Your display name, account ID and invite code, stored in their friends list
• Encouragements and waterings you send them, with your display name
• Shared challenges you take part in: both display names and each person's tree, day and streak
• Your place on their weekly friends leaderboard

No other user:

• Everything else in your account, such as your garden, goals, habits, progress, bookmarks, playlists, AI chat history, and water, breathing and meditation records. Only your signed-in account can read or change it

8.3 Your Control Over Shared Content

• You choose what to share; sharing is always optional
• To remove a post you shared, email hello@champ.plus. The App cannot delete posts
• You can modify your display name and profile photo
• Anonymous accounts can participate with a "Guest" identifier

8.4 Community Guidelines

Shared content must comply with our Terms of Service. We may remove content that violates our guidelines.

8.5 Friends, Invite Codes and Shared Challenges

The friends features are optional. If you use them:

• When you open Friends, your account gets an invite code. Anyone you share it with can enter it in the App to find your account, see your display name and send you a friend request
• When you send or accept a friend request, both accounts store the other person's display name, account ID and invite code, and the status of the request
• Encouragements and waterings you send to a friend are stored with your display name
• A shared challenge stores both people's display names and each person's tree, day and streak in the challenge
• Friends you connect with can see your display name and the progress you share with them

9. Data Sharing and Third Parties

9.1 We Do NOT Sell Your Personal Data

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

9.2 Service Providers

We share data with the following service providers who process data on our behalf:

9.3 Analytics Partners

We use Firebase Analytics to understand app usage. Analytics data is:

• Aggregated and anonymized where possible
• Used only for app improvement
• Subject to Google's data retention policies

We also use the Meta (Facebook) SDK and the TikTok Business SDK to measure whether our ads on those platforms lead to app installs, free trials and subscriptions. They receive the app events and data listed in section 9.2. On iOS they receive your device's advertising identifier only if you allow tracking when the app asks, and you can change that choice at any time in iOS Settings under Privacy & Security, then Tracking.

On this website (champ.plus). We use Google Analytics 4 to measure how the site is used, such as which pages are visited. In the EEA, the UK and Switzerland, analytics cookies stay off until you accept them in the cookie banner; until then Google Analytics sets no cookies and receives only cookieless pings, without a cookie identifier. Elsewhere analytics cookies are on by default, and you can turn them off the same way. Advertising storage is always denied, for every visitor: the site runs no ads. Your choice is kept in your browser's local storage, and you can change it at any time from "Cookie settings" in the site footer.

9.4 Legal Disclosures

We may disclose your information if required by law, court order, or government request, or to:

• Protect our legal rights
• Prevent fraud or security threats
• Enforce our Terms of Service

9.5 Business Transfers

If Champ is involved in a merger, acquisition, or sale of assets, your data may be transferred. We will notify you of any such change.

10. International Data Transfers

10.1 Where Your Data Is Processed

Your data may be processed in:

• United States: Firebase (Google Cloud), OpenAI, RevenueCat
• Advertising measurement partners: Meta and TikTok process data in the countries where they operate, as described in their privacy policies
• Your region: Depending on Firebase's data center selection

10.2 Transfer Safeguards

For transfers from the EEA, UK, or Switzerland, we rely on:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Adequacy decisions where applicable
• Data processing agreements with our service providers

10.3 Your Acknowledgment

By using Champ, you acknowledge that your data may be transferred to and processed in countries outside your residence, which may have different data protection laws.

11. In-App Purchases and Virtual Currency

11.1 Payment Processing

• In-app purchases are processed by Apple App Store
• We do not collect or store payment card information
• Purchase history is managed by Apple
• Purchases are validated, and access to Champ Pro is managed, by RevenueCat (see section 9.2)

11.2 Champ Coins (Virtual Currency)

• Coins are earned through app activities or purchased
• Coin balances are stored in your account
• Coins can be used to unlock premium features
• Coins have no monetary value and cannot be exchanged for cash

11.3 Subscriptions

• Subscription status is verified through Apple's StoreKit
• We store your subscription tier and expiration date
• Subscription management is handled through Apple

12. Data Retention

12.1 Retention Periods

12.2 Deletion Process

How to delete your account: open Champ, go to the Profile tab, tap Edit Account, then Delete Account, and confirm. If Champ says your sign-in is too old, it asks you to confirm your Google, Apple or email sign-in and then finishes the deletion; nothing is removed until the deletion goes through. If you use Champ without signing in, email us rather than signing out, because a session without a sign-in cannot be reopened once you leave it. You can always email hello@champ.plus and a person will handle the request.

When you delete your account:

1. Your profile, garden, goals, playlists and other account data are erased from our servers, usually within a minute
2. Point-in-time recovery keeps earlier versions of our database for 7 days, so we can undo a mistake. Your erased data can remain in those earlier versions for up to 7 days, and then it is gone. Champ schedules no other backups. Google Cloud, which hosts the database, removes its own internal copies on its own deletion schedule
3. Purchase records are kept with your name and ID removed, because tax rules require them
4. Anonymized analytics data may be retained

Deleting your account does not cancel an App Store subscription; cancel it in iOS Settings first. Your guarded-apps list never leaves your iPhone. Vision board images are stored on your iPhone only: a photo you add, and the painting made from it, pass through Champ's relay on the way to and from OpenAI while a board is painted, and the relay keeps no copy (see 6.3). Both are cleared from the device when you delete your account.

12.3 Data You Can Delete Anytime

Through the app or by contacting us:

• Bookmarked content
• Community posts
• Vision board images
• Progress history
• Entire account

13. Your Rights

Depending on your location, you may have the following rights:

13.1 Access

Request a copy of your personal data we hold.

13.2 Correction

Request correction of inaccurate or incomplete data.

13.3 Deletion

Request deletion of your personal data ("right to be forgotten").

13.4 Portability

Request your data in a portable, machine-readable format.

13.5 Restriction

Request limitation of how we process your data.

13.6 Objection

Object to processing based on legitimate interests.

13.7 Withdraw Consent

Withdraw previously given consent at any time.

13.8 How to Exercise Your Rights

• In the App: open the Profile tab, then Edit Account, to change your display name or photo, or to delete your account (see section 12.2)
• Email: hello@champ.plus
• Response Time: Within 30 days (may extend to 60 days for complex requests with notice)

13.9 Verification

To protect your privacy, we may verify your identity before processing requests.

13.10 No Discrimination

We will not discriminate against you for exercising your privacy rights.

14. Children's Privacy

14.1 Age Requirements

• United States: 13 years or older (COPPA)
• European Union: 16 years or older (GDPR), or lower if permitted by member state law
• Other regions: Age of digital consent in your jurisdiction

14.2 No Knowing Collection from Children

We do not knowingly collect personal information from children under the applicable age. The App does not ask for your age or date of birth, so please do not use it if you are under the age that applies to you in section 14.1.

14.3 Parental Rights

If you believe we have collected data from a child under the applicable age:

• Contact us immediately at hello@champ.plus
• We will promptly investigate and delete such data
• Parents may request review or deletion of their child's data

14.4 Content Appropriateness

While our content is designed for general audiences, parental guidance is recommended for users under 18.

15. Security

15.1 Security Measures

These measures are in place as of the "Last Updated" date at the top of this policy:

• Encryption in transit: the App, our cloud services and champ.plus use HTTPS (TLS)
• Encryption at rest: Google Cloud encrypts the data Champ stores in Firebase (AES-256)
• Sign-in: Firebase Authentication, with Apple, Google, an email address and password, or an anonymous guest account. Champ's own servers never store your password
• Database rules: your account data can be read and changed only by your own signed-in account, except as described in section 8.2. Champ's content, such as affirmations, meditations and books, is read-only in the App, apart from play counts. Records that only our servers use, such as subscription events from our payment provider, usage limits and account deletion records, cannot be read or written by the App or by anyone on the internet. Help Center messages and purchase diagnostics can be sent from the App but cannot be read back through it
• File storage: the App can upload files only under your own account's file names, and only up to a size limit. Stored images can be viewed by anyone (see section 8.2)
• Cloud functions: the AI relay that the App uses accepts requests only from a signed-in account. Functions that manage content or data can be run only by accounts we have authorized through Google Cloud's access controls (IAM)
• Recovery: point-in-time recovery keeps earlier versions of our database for 7 days, so we can undo a mistake (see section 12.2)
• Direct access: only Champ's own Google Cloud accounts can open the database and file storage directly

15.2 Data Breach Procedures

In the event of a data breach:

• We will investigate immediately
• Affected users will be notified without undue delay when a breach is likely to result in a high risk to them, as the GDPR requires
• Relevant authorities will be notified as required by law (under the GDPR, within 72 hours of becoming aware of a breach that must be reported)
• We will take steps to mitigate harm

15.3 Your Security Responsibilities

• Keep your device secure
• Use strong authentication for your Google account (if using Google Sign-In)
• Log out of shared devices
• Report suspicious activity to us

15.4 Limitations

No system is completely secure. While we strive to protect your data, we cannot guarantee absolute security. You use the app at your own risk.

16. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

16.1 Right to Know

You may request information about:

• Categories of personal information collected
• Sources of collection
• Business purposes for collection
• Categories of third parties with whom we share data
• Specific pieces of personal information collected

16.2 Right to Delete

You may request deletion of your personal information, subject to certain exceptions. The quickest way is in the app: Profile, Edit Account, Delete Account (see section 12.2). You can also email hello@champ.plus.

16.3 Right to Opt-Out of Sale

We do not sell personal information. Therefore, there is no need to opt out.

16.4 Right to Non-Discrimination

We will not discriminate against you for exercising CCPA rights.

16.5 Authorized Agents

You may designate an authorized agent to make requests on your behalf with proper verification.

16.6 Categories of Information (CCPA Disclosure)

16.7 Contact for CCPA Requests

Email: hello@champ.plus

17. Changes to This Privacy Policy

17.1 Notification of Changes

• We may update this Privacy Policy periodically
• Material changes will be notified via in-app notification and/or email
• We will provide at least 30 days notice before significant changes take effect

17.2 Review Date

The "Last Updated" date at the top indicates when this policy was last revised.

17.3 Continued Use

Your continued use of the app after changes take effect constitutes acceptance of the updated policy. If you disagree with changes, please discontinue use and delete your account (Profile, Edit Account, Delete Account; see section 12.2).

18. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

Email: hello@champ.plus

Response Time: We aim to respond to all inquiries within 48 hours and resolve requests within 30 days.

For Privacy Rights Requests:
Please include:

• Your name and email associated with your account
• Specific right you wish to exercise
• Any relevant details to help us locate your data

Additional Information

Governing Law

This Privacy Policy is governed by the laws of the jurisdiction where our company is registered, without regard to conflict of law principles. For users in the EU/EEA, this does not affect your rights under applicable local law.

Severability

If any provision of this Privacy Policy is found unenforceable, the remaining provisions will continue in full force and effect.

Entire Agreement

This Privacy Policy, together with our Terms of Service, constitutes the entire agreement regarding privacy practices.

By using the Champ app, you acknowledge that you have read and understood this Privacy Policy and agree to its terms.

© 2025–2026 Champ. All rights reserved.