Privacy Policy of Challengify

Last Updated: July 7, 2026

This page informs you of our policies regarding the collection, use, storage, and disclosure of personal data we receive from users of the Application, in compliance with the **General Data Protection Regulation (GDPR)** of the European Union.

1. Information We Collect

To provide the core interactive challenge experience of the Application, we collect different types of information:

Account Data: Email address and/or phone number collected during registration for the passwordless authentication system.
Profile Data: Public username and profile images (avatar).
Multimedia Content (UGC): Video files recorded using your device's camera to publish challenges or responses, along with their metadata and tags.
Technical Data: Device tokens (FCM Tokens) and logical identifiers for managing blocks and reports.

2. How We Use the Data

We process your data for the following logical purposes:

To efficiently upload, play, and distribute challenge videos within the community's feeds.
To ensure community safety and moderation through internal report logging.
To send login links or OTP verification codes.
To manage push alerts via Firebase Cloud Messaging (FCM).

3. Data Storage and Security

Metadata is stored in structured relational databases, while multimedia files (videos and images) are hosted in cloud-optimized object storage infrastructure. Although videos distributed within the Application are public, storage buckets have strict perimeter access rules to mitigate external tampering.

4. Your Rights (GDPR & Content Deletion)

Right to be Forgotten and Absolute Content Control:

You maintain full control over the data and media files you share on the platform through the following native mechanisms:

Individualized Video Deletion: At any time, you can choose to individually delete any challenge or accepted attempt (challenger) you have previously uploaded. This action ensures that the video immediately becomes unavailable to all other users and, crucially, will be physically deleted from our production servers and storage buckets, preventing any form of subsequent technical recovery.
Full Profile Deletion: An explicit "Delete Profile" button is available in the user profile settings section. Upon execution, the system will destroy your permanent token, your unique identifier, and will permanently and irreversibly delete your record along with all associated videos from our servers.

5. Third-Party Service Providers

We work with Google Firebase (Auth, Cloud Messaging, Crashlytics) for identity management, hot-crash analysis, and push notification delivery.