Privacy Policy

Last Updated: February 22, 2026

This Privacy Policy explains what information BetaCrux collects and how it is used.

1. Who We Are (Data Controller)

Controller: Sunpatch Ltd
Contact: legal@sunpatch.co.uk
If applicable, this policy also covers our appointed representatives and processors.

Account information: email and account identifiers.
Profile data: display name, status, grade, home gym, avatar path, and profile visibility setting (public/private).
Activity data: check-ins, badge progress, gym requests, gym events you create, event signups, and gym videos you upload (including video URL, grade/tags, and preview image path).
Presence data: gym presence heartbeat records (including gym, timestamp, and location-related fields used for nearby/live presence features).
Support data: bug reports you submit, including title, description, optional screen name, app version, and platform.
Legal/compliance data: legal acceptance versions and acceptance timestamp.
Technical data: basic app/device/network diagnostics needed for operation, reliability, and security.

To authenticate your account and provide core app features (contract performance).
To provide profile, check-in, badge, event, video, and live presence features (contract performance).
To apply profile visibility/privacy choices and control what other users can view (contract performance / legitimate interests).
To maintain app reliability, security, abuse prevention, and diagnostics (legitimate interests).
To troubleshoot and resolve product issues, including user-submitted bug reports (legitimate interests).
To meet legal obligations where applicable (legal obligation).
Where we rely on consent (for example, certain optional permissions), you can withdraw consent in device/app settings.

If enabled, location is used for gym distance, check-ins, and live presence features.
BetaCrux does not require always-on background location for normal app usage.
Location permissions are managed by your device settings, and you can disable location access at any time.

We do not sell your personal information.
We use service providers that process data for us, including: Supabase (authentication, database, storage), Sentry (error monitoring and diagnostics, when enabled), and platform providers (Apple/Google/Microsoft) and other infrastructure vendors as needed.
These providers process data under contractual safeguards and only for service operation.

Your data may be processed in countries outside your own.
When transfers occur, we apply appropriate safeguards (for example, standard contractual clauses) where required by law.

Account/profile data: kept while your account is active.
Activity/community data (including check-ins, events, event signups, and videos): kept while your account is active unless deletion is requested or required by law.
Bug report data: retained as needed for support, security, and product improvement.
Security/diagnostic logs: retained for a limited period appropriate for fraud/security investigation and debugging.
Legal acceptance records: retained to evidence terms/privacy acceptance and legal compliance.
When you request account deletion, we delete or anonymise data unless retention is required for legal/security reasons.

Depending on your location, you may have rights to access, correct, delete, restrict, object, and request portability of your data.
You may also withdraw consent where processing is based on consent.
To make a request, contact us at: legal@sunpatch.co.uk
We may need to verify your identity before completing certain requests.

If you are in the UK and believe your data rights were not handled properly, you can complain to the Information Commissioner's Office (ICO): ico.org.uk

We may update this Privacy Policy from time to time.
If updates are material, we may require in-app re-acceptance before continued use.