Privacy Policy

Patoosa · Last updated 8 August 2026

Patoosa is a step-counting game you play with friends. This policy explains exactly what the app collects, why, and who can see it. It is written to be read, not to be skimmed past.

The short version. Patoosa reads your step count from Apple Health and stores your daily total on our server so your crew can race you. We do not run ads, we do not use any analytics or tracking SDK, and we never sell or share your data with data brokers or advertisers.

1. Who we are

Patoosa is published by Konstantinos Lepidas, based in Greece. For any privacy question — including access, correction, export or erasure of your data — write to sonidbike@gmail.com and we will answer.

2. Health and fitness data

With your permission, Patoosa reads step count — from Apple Health (HealthKit) on iPhone and from Health Connect on Android. This is the only Health data type the app requests, and the app only reads — it never writes back to Apple Health or Health Connect.

Your daily step total is uploaded to our server and stored against your account, because a race between friends cannot be scored on the device alone. We store the daily total only; we do not store the individual samples, timestamps, routes or locations behind it.

In line with Apple's rules for HealthKit apps:

Health data is used only to provide the app's features — your daily race, your streak and your statistics.
Health data is never used for advertising, marketing or any similar purpose.
Health data is never sold, and never shared with third parties for their own purposes.
Health data is not stored in iCloud.

You can revoke access at any time in Settings → Privacy & Security → Health → Patoosa. The app keeps working; it simply stops receiving new step counts.

3. Everything we store

Data	Why
Email address	Identifies your account and lets you sign back in.
Display name and username	Shown to the friends in your crew.
Avatar choices	Which character, hat, eyes and outfit you picked.
Daily step totals	Scores your races. See section 2.
Coins, items and purchase history	Your in-game balance, and which power-ups you own and have used.
Crew membership	Which group you race with.
App Store transaction identifier	Confirms a purchase with Apple and stops the same purchase being credited twice.

We do not collect your location, contacts, photos, advertising identifier, or any device identifier used for tracking. Patoosa contains no advertising SDK and no analytics SDK of any kind.

4. Who can see your data

The friends in your crew can see your display name, your avatar and your step count for the current race. That is the entire point of the game. They cannot see your email address.

Nobody outside your crew can see your data. Someone must have your crew's invite code to join it.

5. Service providers

We use Supabase to host the database and authentication that the app depends on. They process data on our instructions only.

Purchases are handled entirely by Apple. We never see your card, your billing address or your Apple Account details — only a transaction identifier confirming a purchase happened.

6. Legal basis and your rights (GDPR)

We process your account data to perform our contract with you (running the game), and your Health data on the basis of the explicit consent you give in the iOS Health permission prompt. You may withdraw that consent at any time, as described in section 2.

You have the right to access, correct, export, restrict or erase your data, and to lodge a complaint with your data protection authority (in Greece, the Hellenic DPA).

7. Deleting your account

Open Patoosa and go to Me → Delete account. It happens immediately: your profile, step history, crew membership, coins and items are removed. Deletion is permanent and there is no recovery, so the app asks you to confirm first.

If you cannot get into the app, email sonidbike@gmail.com from the address you signed up with and we will do it for you.

We keep records of App Store transactions where tax and accounting law requires it, with all other data removed.

8. Retention

Your data is kept for as long as your account exists. Daily step records older than 24 months are removed automatically.

9. Children

Patoosa is rated 4+ and contains nothing unsuitable for children, but it is not directed at children under 13, and we do not knowingly collect data from them. If you believe a child has created an account, contact us and we will remove it.

10. Changes

If this policy changes materially we will update the date at the top and, where the change affects how your data is used, tell you in the app before it takes effect.