Compety is a sports competition app for groups of friends. It reads physical activity data from your iPhone, calculates a score, and shares that score with members of the leagues you join. This policy explains what data is handled, where it is handled, and what leaves your phone.
The short version. Your health data is read and processed on your own iPhone. Only your score travels to the server and, for each workout, the sport type and when it ended; never your heart rate, your sleep, or the duration or detail of your sessions.
1. Data controller
The controller is Manuel Parraga, an individual based in Spain, trading as Pizco Deploy.
- Contact: pizcodeploy@gmail.com
2. Health data: what is read and where it stays
With your explicit authorisation, Compety reads the following from the Health app on your iPhone (HealthKit):
| Data | Purpose | Leaves the phone |
|---|---|---|
| Workouts: type, duration and time | Know what activity you did | No |
| Heart rate during those workouts | Calculate the effort of the session | No |
| Active energy, distance and steps | Session context | No |
| Sleep and daily metrics (resting heart rate, oxygen saturation, respiratory rate, VO₂ max, heart rate variability) | Show you your own trend | No |
| Your score | League standings | Yes |
| Per workout: sport type, points, whether it was a hard, regular or easy session for you, and the time it ended | Friends feed, so your people can cheer you on | Yes (no duration, no heart rate, no route) |
Score calculation happens entirely on your device. Raw health data is not transmitted to any server, is not stored outside your iPhone, and is not copied to iCloud.
Compety does not write any data to the Health app.
3. Where the data comes from
Compety does not connect to your tracker or watch. It only reads what other apps have saved into the Health app, whether that is the iPhone itself, an Apple Watch, or apps such as Google Health, WHOOP, Garmin Connect, Oura, Strava or Nike Run Club.
You enable that sync inside each of those apps, and it is governed by their own privacy policies, which are independent from this one.
4. Account data
Competing with other people requires an account. The following data is processed:
- Sign-in identifier: your email address, or the identifier provided by Sign in with Apple. If you use Sign in with Apple you can choose to hide your real address, in which case we only receive an anonymous relay address from Apple.
- Display name: whatever you choose to appear as in standings. It can be a nickname and you can change it any time.
- Leagues you belong to and the scores you have earned.
- Your in-app friendships (requests sent and accepted), and the reactions and comments you leave on other people’s workouts.
Date of birth, gender, phone number, postal address and identity documents are never requested.
5. What other people can see
Members of a league you have joined can see your display name, your score and your position in that league.
Friends feed. Your accepted friends and the members of your private leagues can see, for each of your workouts, the sport type, the points, whether it was a hard, regular or easy session compared with your own average, when it ended, a duration label (short, medium or long, never the exact minutes) and how the effort was measured (heart rate, self-reported or estimated). They can react and comment, and you see the same from them. Members of public area leagues do not see your workouts. You can remove any workout from the feed inside the app.
Nobody can see your heart rate, your sleep, your health metrics, the duration of your sessions or your route. That data never leaves your phone, so it is not even available to share.
Leagues are only accessible with an invitation code. There is no public user directory and no people search.
6. Contacts, location and advertising
Compety does not access your contacts, your photos, your microphone or your camera.
Location: if you choose to join your area leagues, you can tap "Use my location" so the app suggests your city and district. It is optional (you can type them instead), the permission is requested only at that moment, and coordinates are never stored and never leave your phone: only the area name you confirm goes to the server. Compety does not track your position, neither during workouts nor in the background.
Compety shows no advertising and does not use health data for advertising, marketing or commercial profiling. It is not sold or shared with third parties for those purposes.
7. Service providers
| Provider | Role | What it receives |
|---|---|---|
| Supabase | Authentication and database of accounts, leagues, scores and feed | Sign-in identifier, display name, scores, friendships, published workouts (type, points, tone, time), reactions and comments |
| Apple | Sign in with Apple and app distribution | Whatever Apple handles in its own sign-in process |
| Expo | App builds and updates | Technical installation data, no health data |
| GitHub Pages | Hosting of the website, the invite page and these legal pages | Technical visit data in GitHub's server logs, under its own privacy policy |
| Sentry | Crash reports: when the app breaks, it sends the error so we can fix it | The technical stack trace, device model, iOS and app version. No IP address, no user identifiers, and no health data or scores. Servers in the European Union |
None of these providers receives health data.
The Compety website uses no cookies, no analytics tools and no third-party embedded content. That is why you will not see a cookie banner: there is nothing to consent to.
8. Legal basis and retention
Processing of health data relies on your explicit consent (GDPR article 9.2.a), granted in the system permission sheet and withdrawable at any time from your iPhone Settings.
Processing of account data relies on performance of the service you request (article 6.1.b).
Account data and scores are kept while your account remains open. Deleting the account deletes them.
9. Your rights
You can exercise access, rectification, erasure, restriction, portability and objection rights by writing to pizcodeploy@gmail.com.
Delete your account: you can do it directly in the app, under Settings, without contacting anyone. Your account, display name, scores, friendships, published workouts with their reactions and comments, and league memberships are removed.
Withdraw health data access: iPhone Settings, Privacy and Security, Health, Compety. The app keeps working, though without data it cannot calculate your score.
If you believe the processing does not comply with the applicable rules, you may lodge a complaint with the Spanish Data Protection Agency.
10. Children
Compety is not directed at children under 16 and does not knowingly collect their data.
11. Changes to this policy
If this policy changes materially, notice will be given inside the app before the change takes effect. The last update date appears at the top.