The short version
- We collect what the app needs to track your training, run your account and keep the games fair.
- We don't sell your personal information.
- Your workout history, body stats and goals are private unless you choose to share something.
- You can delete your account and data at any time.
This policy explains how Plate Roll ("Plate Roll", "we", "us") handles information when you use the Plate Roll app (Android, iPhone and web) and the website at plateroll.app (together, the "Service").
What we collect
Information you give us
- Account: your email address and password. Passwords are stored by our authentication provider as secure hashes; we never see them.
- Profile: display name, @handle, avatar choice, titles and other cosmetics you equip, and, for members who upload one, a profile photo.
- Training: exercises, sets, weights, reps, warm-ups, splits, cardio sessions (activity, duration, distance and details such as speed or incline) and notes you add.
- Body and goals (optional): bodyweight, height, body measurements and goals.
- Social: friends, crews you create or join, challenges and messages sent through in-app features such as invitations.
- Support: anything you send us by email or through our social channels.
Information collected when you use the Service
- Heart rate (optional): if you connect a Bluetooth heart rate monitor, the app reads your heart rate while connected. It's used for effort scoring, recovery cues and features like Pulse Poker. Readings attached to a saved set or cardio session are stored with that session.
- Game and token activity: token balances, earnings, bets, results and purchases of in-app items, so balances stay correct and the games can be audited.
- Device and technical data: basic information such as device type, operating system, app version, and a push notification token if you allow notifications.
- Advertising: the Android app shows ads through Google AdMob, which may collect your device's advertising ID and similar information. See "Your choices" to limit this.
We don't collect your precise location. Android may ask for location permission when scanning for Bluetooth devices on older versions; the app uses it only to find your monitor.
How we use it
- To provide the Service: tracking your training, scoring sets, crediting tokens, running games and the weekly jacked pot, and syncing your data between devices.
- To keep things fair: checking workouts and game actions on our servers, preventing cheating, abuse and fraud, and enforcing our Terms.
- To run social features: leaderboards, friends, crews, challenges and public profiles.
- To send notifications you've allowed, such as friend requests, challenges and jacked pot results, and essential account emails.
- To review profile photos for nudity, violence and hateful content before they appear.
- To fix problems and improve the Service.
We don't sell your personal information or share it with third parties for their own marketing.
What other players can see
Some information is public to other signed-in players so the social features work: your display name, @handle, avatar or photo, equipped cosmetics, level, weekly lifting tokens, weekly casino result, week streak, membership badge, your best free-weight lifts on the leaderboards, and crew membership. Your bodyweight is shown only if you turn on sharing for the Strength ÷ Bodyweight board. At a Pulse Poker table, your live heart rate is visible to other seated players who are also sharing theirs.
Service providers
We use trusted providers to run the Service. They process data only on our behalf:
| Provider | What for |
|---|---|
| Supabase | Accounts, database, file storage and server functions |
| Google Firebase Cloud Messaging | Push notifications |
| Google AdMob | Ads in the Android app |
| Sightengine | Automatic review of uploaded profile photos |
| Resend | Account emails such as sign-up confirmation and password reset |
| Google Play / Apple App Store | App distribution and, when available, in-app purchases |
We may also share information if required by law, to protect the safety of our players or the public, or as part of a merger or sale of the Service (in which case this policy continues to apply).
How long we keep it
- Account, profile and training history: for as long as your account exists.
- Detailed per-bet casino records: about 90 days. Finished game rounds: about 30 days. Notifications: about 90 days.
- Live heart rates shared at a poker table: about 1 hour.
- When you delete your account, we delete your personal data within 30 days, except where we must keep something to meet legal obligations or resolve disputes.
Your choices
- Notifications: turn each kind on or off in the app's inbox settings, or in your phone's settings.
- Heart rate: optional; disconnect your monitor at any time.
- Bodyweight sharing: off by default; turn it off again at any time.
- Ads: reset or limit your advertising ID in your Android settings (Settings → Privacy → Ads). Members don't see pop-up ads.
- Export: download a copy of your training data from the app's settings.
Delete your account
In the app: open your profile → Account → Delete account, then type DELETE to confirm. Your account and personal data are deleted straight away, and the copy on that device is wiped. Open coin flips and challenges are refunded to the other player.
Without the app: email from the address on your account with the subject "Delete my account". We'll confirm and delete your account and personal data within 30 days.
Tokens, items and progress can't be recovered after deletion. A membership bought through Google Play or the App Store must be cancelled in that store.
Security
Data is encrypted in transit, access to your private data is restricted by row-level security in our database, and token balances can only be changed by our servers. No system is perfectly secure, so please use a strong, unique password.
Age limit
Plate Roll includes simulated casino games and is intended for people aged 17 or older (or the age of majority where you live, if higher). We don't knowingly collect information from anyone younger. If you believe a child has an account, contact us and we'll delete it.
Your rights by region
Depending on where you live (for example the EU, UK, California and other US states), you may have the right to access, correct, delete or receive a copy of your personal information, to object to or restrict certain processing, and to withdraw consent. We don't sell or "share" personal information for cross-context behavioral advertising as those terms are defined under California law, other than through the ad partner described above, which you can limit through your device settings. To exercise any right, email us; we'll respond within the time the law requires and won't treat you differently for asking. Where EU or UK law applies, we process data to provide the Service you asked for, for our legitimate interests in keeping it secure and fair, and with your consent where required (for example optional heart rate features and notifications).
Changes
If we change this policy, we'll update the date at the top and, for significant changes, tell you in the app or by email before they take effect.