For the Boys

What we collect

Account. Your email address, used to send you a sign-in magic link and to identify your account. No password is stored because there is none.

Profile. A username (generated from the first part of your email plus a short random suffix), the display name and emoji you choose, your honor points, and your current and best streak.

Activity. Each challenge you complete or tap out of, the rep count, distance or time you logged, the points gained or lost, and the badges you earned.

Call-outs. Who you called out, the workout and target, and the trash-talk line you wrote (up to 140 characters).

Technical. A session cookie that keeps you signed in, and the ordinary request logs kept briefly by our hosting providers. We do not use these to profile you.

What the rest of the crew can see

The app is built around a shared scoreboard, so your display name, emoji, username, honor points, streaks, badges (including badges of shame), logged results, and the call-outs and trash talk you send are visible to other players on the leaderboard, your profile page, and challenge pages. Challenge share links are readable by anyone who has the link, signed in or not. Your email address is never shown to other users.

What the app stores on your device

Your sign-in session and a small record of which challenges you have already logged or accepted, so the result screen shows the right thing when you reopen a challenge. This lives in the app’s private storage on your iPhone.

Notifications

The iOS app does not request notification permission and sends no push notifications. The web version offers optional call-out alerts; if you turn those on in a browser, we store that browser’s push subscription so our server can send the alert, and delete it when the subscription expires or you turn alerts off.

Permissions

The app requests no device permissions. It does not access your location, camera, photos, microphone, contacts, or health data.

Honor points are not money

Coins and honor points are a virtual score. They have no cash value, cannot be purchased, cannot be cashed out, transferred, or exchanged for anything, and are never connected to real money. There are no in-app purchases and no wagering. We collect no payment or financial information.

Third parties

Two service providers process data on our behalf: Supabase hosts the database and handles sign-in email delivery, and Vercel hosts the app. Neither is permitted to use your data for its own purposes. There is no analytics SDK, no advertising, no crash reporting, and no trackers. We do not sell, rent, or share your information.

Deleting your data

There is no in-app delete button yet. Email jonahs@28digitalstudio.com from the address you signed up with and we will delete your account within a few days. Deletion permanently removes your profile, results, points history, badges, call-outs and any notification subscriptions. It cannot be undone. Deleting the app from your phone signs you out but does not delete the account.

Children

For the Boys is not directed at children under 13, and we do not knowingly collect information from them. If you believe a child has created an account, email us and we will delete it.

Not medical advice

The workouts are general fitness challenges between friends, not medical advice. Consult a qualified health professional before starting any training program.

Changes

If this policy changes, the effective date above changes with it. If we ever add a new category of data collection, we will say so here before it takes effect.

Contact

Questions about this policy: jonahs@28digitalstudio.com. For the Boys is made by 28 Digital Studio.