Privacy policy

1. Who is responsible

During BYOH’s alpha and beta stages, the service is operated privately by Niels Kragbak in Denmark. You can contact the operator at niels@byoh.io about privacy or data-rights requests.

2. Information BYOH processes

• Account information: your email address, authentication identifiers and basic account details needed to create and secure your sign-in.
• Hero information: your chosen hero name, calculation reference, bodyweight, appearance choices, exercise progress, quests, unit preference and privacy settings.
• Optional social information: a chosen locality, public focus, friendship activity, posts, cheers, endorsements, reports and feedback when you use those features.
• Leaderboard information: your hero name, hero level, training scores and public focus, shown with your town and country where you are visible in the Atlas. Shown unless you leave the leaderboards, which you are asked about before your hero is created.
• Technical information: security, request and error logs generated when the service operates. These may include timestamps, routes, device or browser information and network identifiers.

BYOH does not ask for exact workout routes. Bodyweight is used for calculations and is not part of your public profile.

3. Messaging

Companions can write to each other. Messages are encrypted on the sending device for the registered devices of both heroes. Private keys remain on those devices; BYOH stores public keys, encrypted copies and routing metadata, not plaintext messages or private keys. Administrators cannot decrypt stored messages using the data held by the service alone. This does not protect against a compromised device, malicious browser extension or compromised application code. The messaging design has not undergone an independent cryptographic audit and does not provide forward secrecy. We cannot recover messages if you lose the device keys.

The service can see which heroes exchanged a message, from which device, and when. This routing information is readable by administrators. Messages become unavailable through the API after 90 days. An hourly database cleanup removes expired encrypted copies and their message routing rows; empty conversation records are removed after 90 days without a new message. Cleanup delays or failures can postpone physical removal. Backups follow the provider’s separate retention schedule.

Deleting your copy of a conversation removes the encrypted copies addressed to your devices from the active database. The other hero’s copies remain. Deleting your hero removes its conversations and messages from the active database. Neither action can erase text a recipient has already copied, downloaded or captured. You can block a hero to stop further messages; contact the operator about abuse. Administrators cannot review an encrypted message from the stored ciphertext alone.

Heroes who are not companions cannot send free-form messages. They may attach one of three fixed introductions to a companion request. BYOH stores the chosen introduction, and you may ignore the request or block the hero.

4. Why information is used

Information is used to provide and secure your account, save your hero, calculate progress, deliver the social features you choose, respond to feedback, prevent misuse and diagnose faults. Processing needed to provide the service is based on our agreement with you. Public visibility is based on your choice and can be withdrawn in settings. Hero creation asks for a locality: both social boxes start ticked and are shown before you create the hero; either can be unticked there or changed at any time afterwards. Giving no locality keeps you off the Atlas entirely. Hero creation also offers the leaderboards, ticked: unless you untick it there, your hero name, public focus, hero level and training scores appear on public leaderboards visible to other signed-in heroes, and your town and country are shown alongside them once you are visible in the Atlas. No address, route or bodyweight is shown on a leaderboard. Your Atlas profile also shows your avatar, attributes, cleared exercise levels, completed non-secret quests and a count of completed secret quests. You can leave the leaderboards at any time in Hero Settings, which removes your hero from them. Security and fault-prevention work is based on the legitimate interest in operating a safe, reliable service.

5. Service providers and sale of data

BYOH does not sell your personal data to third parties. The service currently relies on infrastructure providers, including Supabase for authentication and database services and Vercel for hosting and delivery. They process information only to provide their services under their own contractual and security commitments. Town searches are sent through our server to OpenStreetMap’s Nominatim service with the search text and selected country. Map tiles are fetched directly from OpenStreetMap, which receives the network information needed to deliver them, including your IP address. Exercise illustrations and hero artwork are served by BYOH itself, so looking up an exercise tells nobody outside the service which one you opened. Avoid entering a home address in town search. Data may also be disclosed when required by law or necessary to protect users and the service.

6. International processing

Infrastructure providers may process limited information outside Denmark or the European Economic Area. Where this occurs, the provider is expected to use a lawful transfer mechanism, such as an adequacy decision or the European Commission’s standard contractual clauses.

7. Retention and deletion

Hero and account information is kept while your account or hero remains active and for the time reasonably needed to operate, secure and document the service. You can delete your hero from Settings. Deleting a hero does not delete your sign-in account or reset its email verification. Authentication-account deletion is handled on request during alpha. Account-linked feedback remains until account deletion or a separate deletion request; short-lived abuse-limit counters remain independently of hero deletion and are cleaned up after expiry. Some information may remain temporarily in encrypted backups or security logs until normal retention periods expire, and information may be retained where Danish or EU law requires it.

8. Your choices and rights

You can change your hero name and privacy choices, hide your hero from discovery, export your hero record, delete your copy of a conversation, revoke a device that holds your message keys, and delete your hero in Settings. Under applicable data-protection law, you may also request access, correction, deletion, restriction, portability or objection, and may withdraw consent where consent applies. Identity may need to be verified before a request is completed.

You may complain to the Danish Data Protection Agency, Datatilsynet, if you believe your information has been handled unlawfully.

9. Cookies and local storage

BYOH uses essential authentication cookies and browser storage needed for sign-in, security, preferences and device-only features. The alpha service does not use advertising cookies.

10. Changes

This policy may change as BYOH develops. Material changes will be shown in the service, and the effective date above will be updated.