What Idle Gains knows about you, and why.

Who we are

Idle Gains is made by Well Goods, LLC ("we", "us"). This policy covers the Idle Gains app for iPhone and Android and this website, idlegains.app. Questions, or anything you'd like us to do with your data: privacy@idlegains.app.

What the app collects, and why

Your account

Your email address, a password and the username you pick. They let you sign in and get your progress back on a new phone. Your password is stored hashed by our sign-in provider; we never see it.

Your location

The app asks to use your location, including in the background ("Always" on iPhone, "Allow all the time" on Android). That's how it notices you've walked into a gym you've marked, even when the app is closed, which is the whole game: your gym time is what powers your knight. Your phone's own geofencing does the watching, and the app only records the moment you cross into or out of one of your gyms. It doesn't record your route or anywhere else you go.

When you pin a gym, the app uses your current position to center the map. It keeps the gyms you pin (the name you give them, where they are on the map and how big their fence is) and your gym visits (when you arrived, when you left and how long you stayed).

You can turn location access off at any time in your phone's settings. The app then can't tell when you're at the gym.

Your game

Your level, gym minutes, gold, gear, skills, Hunt progress and shop, so they're never lost.

Your squad

If you join a squad, its members can see your username, whether you're at the gym right now, and when and how long you've trained. They can't see where your gyms are.

Where it's kept

On your phone, and backed up to our servers so you can restore it. Our backend runs on Supabase, which stores it for us and handles sign-in. Everything travels encrypted (HTTPS). The app keeps a log of fence crossings on your phone for troubleshooting, and that log is also part of your backup.

Other services that see a little

• OpenStreetMap. The map you pin gyms on is loaded from OpenStreetMap's servers, which see your IP address and the part of the map you're looking at. Their policy.
• Apple or Google. When you search for a gym by its address, your phone's built-in address lookup (Apple's on iPhone, Google's on Android) handles the search.
• Google Fonts. The app downloads its fonts from Google the first time it runs, so Google sees your IP address then. Their policy.

That's all of them. There are no ad networks, analytics or tracking tools in the app.

What we don't do

We don't sell your data, share it with advertisers, track you across other apps or websites, or use your location for anything except noticing your gym visits.

Deleting your data

We keep your data for as long as you have an account. To delete your account and everything that goes with it (your gyms, visits, squad membership and game), email privacy@idlegains.app from the address you signed up with, with the subject "Delete my account". We'll delete it within 30 days and let you know when it's done. Deleting the app removes what's on your phone.

You can also ask us for a copy of your data, or to correct it, the same way.

Children

Idle Gains isn't meant for children under 13, and we don't knowingly collect their data. If you think a child has signed up, email us and we'll delete the account.

This website

idlegains.app has no cookies, analytics or tracking. It's hosted on Cloudflare, which handles each visit (including your IP address) to deliver the site and protect it. Its fonts come from Google Fonts, so Google sees your IP address too.

Changes

If the app starts collecting something new, we'll update this page before that version comes out, and change the date at the top.