Privacy Policy for Stryked

Last Updated: December 7, 2025

1. Information We Collect

1.1 Location Data

We collect and process your precise location data to enable the core functionality of Stryked.

What location data we collect:

• GPS coordinates (latitude and longitude)
• Altitude, speed, and direction of travel
• Location accuracy and timestamp
• Device motion data (accelerometer, gyroscope, magnetometer) for anti-spoofing

When we collect location data:

• Continuously while the app is open
• Periodically in the background (when you enable background location services)
• When you are near a trophy location (within 1000 meters)
• When you visit a trophy (within 50 meters)

Why we collect location data:

• Essential: To detect nearby trophies and validate your visits
• Analytics: To understand how users discover and interact with trophies
• Anti-Fraud: To prevent location spoofing and ensure fair gameplay

1.2 Photos and Media

We collect photos you upload as part of the Snapventure feature.

• Photos you capture or select for Snapventures
• Photo metadata (when and where the photo was taken, if available)
• Photo thumbnails for display purposes

These photos are shared with other users as part of the social features of the app.

1.3 User Profile Data

• User ID (automatically generated by Firebase)
• Username and display name you choose
• Email address (if you sign in with Google)
• Profile picture (optional)
• Game statistics (points, trophies visited, achievements)

1.4 Purchase Information

• In-app purchase history (subscription status, unlocked tiers)
• Purchase dates and renewal status
• Payment information is processed by Apple and is not accessible to us

1.5 Device and Usage Data

• Device type and iOS version
• App version and build number
• Device integrity status (to detect jailbroken devices for security)
• Usage patterns and interaction data for improving app performance

2. How We Use Your Information

2.1 Core Game Functionality

• Detect nearby trophies based on your location
• Validate trophy visits to award points and achievements
• Display your progress and statistics
• Enable Snapventure social features

2.2 Anti-Spoofing and Security

• Analyze movement patterns to detect location spoofing
• Verify device integrity to prevent cheating
• Apply automated security measures including temporary bans for violations
• Maintain fair gameplay for all users

2.3 Service Improvement

• Analyze usage patterns to improve app features
• Optimize performance and fix bugs
• Develop new features based on user behavior

3. Data Storage and Security

3.1 Where We Store Your Data

• Firebase/Google Cloud: User profiles, location history, photos, and game data
• On Your Device: Temporary location data, app preferences, cached content
• Apple Servers: Purchase and subscription information (managed by Apple)

International Data Transfers: Your data may be stored on servers outside your country, including in the United States. We use Google Cloud Platform which complies with EU-US Data Privacy Framework.

3.2 How Long We Retain Your Data

• Active location data: Rolling daily batch (overwritten each day)
• Trophy visit history: Retained for the lifetime of your account
• User profile: Until you delete your account
• Snapventure photos: Until you delete them or your account
• Purchase history: Retained as required by law (typically 7 years for tax purposes)
• Ban records: 24 hours for temporary bans, longer for repeat violations

3.3 Security Measures

• Data encryption in transit (HTTPS/TLS)
• Firebase authentication and security rules
• Regular security audits
• Access controls and monitoring

4. Data Sharing and Disclosure

4.1 With Other Users

• Your username, profile picture, and public statistics are visible to other users
• Snapventure photos and captions you post are visible to all users
• Leaderboard rankings and achievements are publicly visible

4.2 With Service Providers

• Firebase/Google Cloud: For hosting, database, authentication, and analytics
• Apple: For in-app purchases and App Store services

4.3 Legal Requirements

We may disclose your information if required by law or to:

• Comply with legal processes or government requests
• Enforce our Terms of Service
• Protect the rights, property, or safety of our users or others
• Prevent fraud or security issues

4.4 We Do NOT:

• Sell your personal data to third parties
• Share your data for advertising purposes
• Use your data for cross-app tracking

5. Your Rights and Choices

5.1 Location Services

• Disable location tracking: Go to iPhone Settings > Stryked > Location
• Note: Disabling location will prevent trophy discovery and visit validation

5.2 Account Management

• Update profile: Edit your username, display name, and profile picture in Settings
• Delete Snapventures: Remove your uploaded photos anytime
• Manage subscriptions: Go to iPhone Settings > Your Name > Subscriptions

5.3 GDPR Rights (EU Users)

If you are in the European Union, you have additional rights:

• Right to Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate personal data
• Right to Erasure: Request deletion of your account and data
• Right to Data Portability: Receive your data in a machine-readable format
• Right to Object: Object to automated decision-making (including anti-spoofing bans)
• Right to Withdraw Consent: Withdraw your consent for data processing at any time

5.4 Account Deletion

To delete your account and all associated data:

1. Go to Settings in the app
2. Select "Delete Account"
3. Confirm your decision

Upon deletion:

• Your profile, location history, and uploaded photos will be permanently deleted
• Your username will become available for others to use
• This action cannot be undone
• Purchase records may be retained as required by law

6. Automated Decision-Making

6.1 Anti-Spoofing System

The app uses automated systems to detect location spoofing and cheating. This system:

• Analyzes your movement patterns and device sensor data
• May automatically apply temporary bans (typically 24 hours) for detected violations
• Uses machine learning to identify suspicious behavior

6.2 Your Right to Appeal Automated Decisions (GDPR Article 22)

Under GDPR Article 22, you have the right not to be subject to a decision based solely on automated processing, including automated bans. You have the right to request human review of any automated decision that affects you.

If you believe you were incorrectly banned:

How to Submit an Appeal

1. In-App Appeal: When you see a ban notification in the app, tap the "Appeal Ban" button. This will open your email client with a pre-filled appeal message.
2. Email Appeal: Send an email to support@exploringaintboring.com with the subject "Ban Appeal" and include:
   • Your User ID (shown in the ban notification)
   • An explanation of why you believe the ban was incorrect
   • Any relevant context or circumstances

What Happens After You Submit an Appeal

• Review Process: Our support team manually reviews your appeal by examining your account's trust score logs, location history, and the circumstances that led to the ban.
• Response Time: We commit to reviewing and responding to all ban appeals within 48 hours of receipt.
• Possible Outcomes:
  • Ban Overturned: If the ban was incorrect, your account will be immediately restored and you can continue playing.
  • Ban Upheld: If the ban was correct, we will explain the reason and provide information about when the ban will expire.
  • Additional Review: In complex cases, we may request additional information or extend the review period (we will notify you if this happens).
• Notification: You will receive an email response with the decision and any relevant details.

Your Rights

In addition to the appeal process, you have the right to:

• Request Human Review: You can request that any automated decision be reviewed by a human (GDPR Article 22(3))
• Express Your Point of View: You can provide additional context or explanations in your appeal
• Challenge the Decision: If you disagree with the appeal outcome, you can contact us again or lodge a complaint with your local data protection authority

Note: Automated bans are typically temporary (24 hours) and are designed to prevent cheating and maintain fair gameplay. Most bans are automatically lifted after the specified duration, but you can appeal at any time if you believe the ban was incorrect.

7. Children's Privacy

Stryked is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we discover that we have collected data from a child under 13, we will delete it immediately.

8. Changes to This Policy

We may update this privacy policy from time to time. When we do:

• The "Last Updated" date at the top will be changed
• Significant changes will be announced in the app
• Continued use of the app constitutes acceptance of the updated policy

9. Third-Party Services

Our app uses the following third-party services:

9.1 Firebase (Google LLC)

• Purpose: Authentication, database, hosting, analytics
• Data Collected: User data, location data, usage data
• Privacy Policy: firebase.google.com/support/privacy

9.2 Apple Sign-In

• Purpose: User authentication
• Data Collected: Email, name (if you choose to share)
• Privacy Policy: apple.com/legal/privacy

11. Legal Basis for Processing (GDPR)

We process your personal data based on:

• Consent (Article 6(1)(a)): Location tracking, motion data, behavioral analytics
• Contract Performance (Article 6(1)(b)): Trophy validation, game features, user account
• Legitimate Interest (Article 6(1)(f)): Anti-spoofing, security, fraud prevention
• Legal Obligation (Article 6(1)(c)): Compliance with applicable laws

© 2025 Stryked. All rights reserved.
This privacy policy is effective as of December 7, 2025.