Privacy Policy
1. Introduction
SolFit ("we", "our", or "the app") is a fitness tracking application built on the Solana blockchain, operated by an independent developer based in the Republic of Korea. This Privacy Policy explains how we collect, use, and protect your information when you use SolFit on Android (Solana Seeker).
By using SolFit, you agree to the practices described in this policy.
2. Information We Collect
Camera Access
SolFit uses your device camera solely for real-time pose detection to count squat repetitions. No video is recorded, stored, or transmitted. All pose analysis occurs locally on your device using MediaPipe.
Workout Data
We store the following data in Firebase Firestore:
- Total squat counts and workout history
- Daily and weekly fitness goals and progress
- Streak counts and points balance
- Badge achievement and claim records
- Locked In records: daily squat totals counted by our server, whether you finished, your Square pick, its result and Reward, and whether your deposit was returned
Wallet Address and Sign-In
Your public wallet address is your SolFit account ID, and your workout records, points and badges are stored under it. To sign in, your wallet signs a one-time "Sign In With Solana" message for solfit.digitiumlabs.com. Signing sends no transaction and costs nothing. Our server checks the signature and does not store the message or the signature. We keep your wallet address as a Firebase Authentication account, the times of your first and latest sign-in, and each one-time code (nonce) used with your address, which a daily cleanup job deletes after it expires. The app keeps your sign-in session and your wallet's connection token on your phone. We never access your private keys or seed phrase.
3. How We Use Your Data
- Display your personal fitness progress and history
- Track daily goals, streaks, and achievements
- Record your badge claims and add their points to your total
- Confirm that you own the wallet you sign in with
- Improve app performance and functionality
4. Data Sharing
We do not sell, rent, or share your personal data with third parties. Your workout data is stored in Firebase Firestore (Google) and is used solely to provide app functionality. Badge claim transactions are recorded on the Solana public blockchain by nature of the technology. Locked In deposits, picks, Reward claims and returns are Solana transactions and are public, along with your wallet address.
5. Data Retention & Deletion
Your workout data is retained as long as you use the app. You may request deletion of your data at any time by contacting us at jamielimq@gmail.com. On-chain records such as badge claims and Locked In transactions on the Solana blockchain cannot be deleted due to the immutable nature of blockchain technology.
6. Security
We use industry-standard security measures including Firebase security rules and HTTPS encryption. Camera data is never stored or transmitted — all processing occurs on-device in real time.
7. Your Rights — Global Users
Regardless of your location, you have the following rights regarding your personal data:
- Right to Know: What data we collect and how it is used
- Right to Access: Request a copy of your personal data
- Right to Deletion: Request removal of your data
- Right to Correction: Request correction of inaccurate data
- Right to Object: Object to certain data processing
To exercise any of these rights, please contact jamielimq@gmail.com. We will respond within 30 days.
EU/EEA Users (GDPR)
If you are located in the European Union or European Economic Area, you have additional rights under the General Data Protection Regulation (GDPR), including the right to data portability and the right to lodge a complaint with your local data protection authority.
California Residents (CCPA)
If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to request deletion of personal information, and the right to opt-out of the sale of personal information. SolFit does not sell personal information.
Korean Users
If you are located in the Republic of Korea, your data is handled in accordance with the Personal Information Protection Act (PIPA).
8. Children's Privacy
SolFit is not directed to children under the age of 13 (or the applicable age of digital consent in your jurisdiction — 14 in the Republic of Korea, 16 in most EU countries). We do not knowingly collect personal information from children below the applicable age. If you believe a child has provided us with personal information, please contact us immediately at jamielimq@gmail.com.
9. International Data Transfers
Your data may be transferred to and stored on servers located outside your country of residence (primarily Firebase servers operated by Google). By using SolFit, you consent to this transfer. We take reasonable steps to ensure your data is protected in accordance with this Privacy Policy.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Updates will be posted on this page with a revised effective date. Continued use of SolFit after changes constitutes acceptance of the updated policy.
11. Contact
For questions or requests regarding this Privacy Policy, please contact:
Data Controller: Jamielim, Republic of Korea