1. Introduction
Built by Foundry, Inc., formerly known as Playpen Games, Inc. ("BBF," "we," "us," or "our"), operates the Do Hard Things mobile application ("App") for the creator Rich Hernandez (@dohardthings365). This Privacy Policy explains how we collect, use, share, and protect information when you use the App or contact us about it.This Privacy Policy describes the personal information we collect, where it comes from, why we use it, when we disclose it, and the choices available to you.Controller and contact: Built by Foundry, Inc. (f/k/a Playpen Games, Inc.), 2261 Market Street, Suite 86046, San Francisco, California 94114, United States. For privacy requests, email privacy@builtbyfoundry.io. For general questions: support@builtbyfoundry.io2. Information We Collect
2.1 Information Stored on Your Device
Your full challenge results, rep counts, calibration settings, training history, onboarding answers, and recorded proof files are stored locally on your device. Open Profile > Settings > Help & data to erase them. Use this control before uninstalling if you also want to remove data shared through the App; uninstalling alone does not delete server records or necessarily erase credentials retained by the operating system.2.2 Camera and LiDAR (Rep Counting)
The App uses your camera, and optional experimental LiDAR on supported Apple devices, to count pushup reps and check form during a set. Pose detection and depth processing run on your device. Camera challenges can also record a local proof video; you can turn recording off in Settings. Camera imagery is uploaded only when you choose a sharing feature that includes it. You can decline camera access and use manual beginner sets or tap-counted Clock missions or Android Gate missions; camera-verified challenges require camera access.2.3 Shared Proof Links
Creating a proof link sends the selected result, optional handle, and any attached still image or short video clip to Supabase. Anyone who receives the link can view and copy the shared content. We create an anonymous profile to authorize uploads and keep a private deletion credential on your device. Deleting your profile and training data revokes your hosted proof links and requests deletion of their uploaded media. Copies other people downloaded or saved are outside our control.2.4 Information You Provide
• A handle if you choose to publish eligible ranked results or join a private crew
• A private crew name if you create a crew
• Support requests and feedback you send us, including any information you include in the message2.5 Automatically Collected Information
• Device and app information: device type, operating system, app version, language settings
• Usage and analytics: screens viewed, features used, challenges started and completed, and similar product events
• Masked session replay showing navigation and interactions, with text inputs, images, and embedded camera views masked
• Crash and error diagnostics used to fix bugs
• Purchase and subscription status used to provide membership access2.6 Leaderboard
Entering a filtered handle opts eligible ranked results into weekly boards. The board stores your handle, challenge, target, score, verification state, week, and a one-way identifier derived from a private deletion secret on your device. Personal-only results, complete training history, camera frames, and proof files are never sent to the board. Skip the handle to keep every result private.2.7 Board Safety Reports
You can hide another athlete from your device or report and hide a board entry using a fixed safety reason. A report stores a one-way identifier derived from your anonymous profile ID, the reported board row and device identifier, a snapshot of the reported handle, the selected reason, status, and timestamps. It does not include camera footage, proof files, or training history. Reports are reviewed to detect abuse, enforce our Terms, and keep public boards safe.2.8 Private Crews
If you create or join a private crew, we create an anonymous profile and store your handle, crew membership, weekly promise total, and preset encouragements. Crews contain 5 to 10 invited athletes and do not include open chat. Deleting your profile in the App removes this data and your weekly board entries.Sources of information: We receive information from you, automatically from your device and use of the App, and from any sign-in provider, marketplace, or other service you choose to connect, including the app store. The categories above describe what we collected during the preceding 12 months; we do not collect a category unless the App uses the related feature.3. How We Use Your Information
• Count your reps and coach your pacing during challenges
• Save your challenge results and training history
• Show your verified results on the leaderboard if you choose to join it
• Operate private crews and shared proof links, and delete your anonymous profile when you ask
• Present membership offers, process store purchase results, and restore membership access
• Respond to customer support requests
• Monitor product performance, debug issues, and improve the App
• Detect abuse, enforce our terms, and comply with legal obligations4. Third-Party Service Providers
We disclose only the information reasonably needed to service providers and contractors that host, secure, analyze, support, or process purchases for the App. They process information under their agreements with us and their own legal obligations.Infrastructure and Authentication: Supabase stores weekly board entries, safety reports, private crew data, anonymous profiles, and proof content you choose to share. Training does not require a login. Data is processed in the United States.Analytics: PostHog for product analytics and masked session replay to understand navigation, interactions, and errors. Replay masks text inputs, images, and embedded camera views. Replay does not collect application logs or network telemetry.Membership and Payments: Superwall presents membership offers and checks subscription status. The store through which you purchase membership processes payment and manages your subscription. Available plans and supported stores are shown in the App. We do not receive your full payment-card details.Crash Reporting: Sentry for crash and error diagnostics. Text inputs are not captured.No sale or behavioral-advertising sharing: We do not sell personal information for money or share it for cross-context behavioral advertising. We have not done so during the preceding 12 months. We may disclose information if required by law, to protect people or the App, or as part of a merger, financing, or sale of the business, subject to appropriate safeguards.5. International Data Transfers
BBF is based in the United States. We and our providers may process information in the United States and other countries where privacy laws may differ from those where you live.EEA/UK/Swiss users: Where required, we rely on an adequacy decision, approved standard contractual clauses, or another lawful transfer mechanism. You can ask about safeguards for a particular transfer by contacting privacy@builtbyfoundry.io.6. Data Retention and Deletion
We keep personal information only as long as reasonably needed for the purposes described here, including to provide the App, maintain security, resolve disputes, and meet legal or accounting duties. Retention depends on the type of information, whether your account is active, and applicable law. When it is no longer needed, we delete or de-identify it. Copies may remain temporarily in backups or where law requires retention.Full challenge results and training history stay on your device until you erase them or delete the App. Profile > Settings > Help & data requests deletion of private crew and weekly-board records, revokes hosted proof links and deletes uploaded proof media, and erases local training data and App-owned proof files. If a network or storage step fails, the App reports that deletion is incomplete and keeps the credentials needed to retry. Copies saved to Photos or downloaded by other people remain outside this deletion process. Safety reports may be kept for abuse prevention and enforcement. Analytics and diagnostics are kept only as reasonably needed for product improvement, security, and reliability. Deleting your profile does not cancel a store subscription; cancel it through your app-store account.7. Your Privacy Rights
Depending on where you live, you may ask to access, correct, delete, or receive a copy of personal information, or object to or restrict certain processing. You may withdraw consent at any time where processing relies on consent, without affecting earlier processing.Legal bases for processing
Legal bases: We process information as needed to provide the App and perform our contract with you; for legitimate interests such as security, support, product improvement, and fraud prevention; with consent where required; and to comply with law.EEA, UK, and Swiss users
You may also have rights to data portability and to complain to your local data protection authority. We may ask for information necessary to verify and complete your request.United States state privacy rights
Residents of California and certain other states may have rights to know, access, correct, delete, or obtain personal information and to receive information about categories of recipients. We do not discriminate against you for exercising a privacy right. Where applicable, you may use an authorized agent and may appeal our response by replying to it.How to Exercise Rights
Email privacy@builtbyfoundry.io with the App name, the email or account identifier you used (if any), and your request. You may also use an account-deletion control where the App provides that control. We will verify requests as reasonably necessary and respond within the time required by applicable law.Some information may be exempt from a request or retained where permitted by law. We may charge a reasonable fee or decline requests only where applicable law allows it.8. Children's Privacy
Do Hard Things is not directed to children under 13. We do not knowingly collect data from children under 13.Parents: If your child under 13 has provided information, contact privacy@builtbyfoundry.io. We will investigate and delete the information when required.Teens (13-17): Review this policy with a parent or guardian.9. Data Breach Notification
We maintain an incident-response process. If a security incident affects personal information, we will investigate, contain, and provide notices to regulators or affected people when and as required by applicable law.Report security concerns: privacy@builtbyfoundry.io10. Security
We use administrative, technical, and organizational safeguards designed to protect personal information, including access controls and protections offered by our hosting and authentication providers. No method of storage or transmission is completely secure.You should: Protect your device, credentials, and connected accounts and tell us promptly if you suspect unauthorized access.11. Updates to This Policy
We may update this policy as the App or law changes. The Last Updated date shows when it was revised. If a change materially affects how we use personal information, we will provide notice in the App, by email when available, or by another reasonable method before the change takes effect where required.