1. Introduction
Built by Foundry, Inc., formerly known as Playpen Games, Inc. ("Built by Foundry," "we," "us," or "our"), operates the Do Hard Things mobile application ("App") for the creator Rich Hernandez (@dohardthings365). This Privacy Policy explains how we collect, use, share, and protect information when you use the App or contact us about it.Contact: For privacy requests, email privacy@builtbyfoundry.io. For general questions: hello@builtbyfoundry.io2. Information We Collect
2.1 Information Stored on Your Device
Your full challenge results, rep counts, calibration settings, training history, onboarding answers, and proof files are stored locally on your device. You can erase them from You > Account & Data. Deleting the App also deletes local data.2.2 Camera and LiDAR (Rep Counting)
The App uses your camera, and LiDAR on supported Apple devices, to count push up reps and check form during a set. All pose detection runs on your device. Camera frames and depth data are processed in real time and discarded; they are never uploaded to our servers. You can decline camera access, but the current release needs it to count a tracked set.2.3 Information You Provide
• A handle if you choose to publish eligible ranked results or join a private crew
• A private crew name if you create a crew
• Support requests and feedback you send us, including any information you include in the message2.4 Automatically Collected Information
• Device and app information: device type, operating system, app version, language settings
• Usage and analytics: screens viewed, features used, challenges started and completed, and similar product events
• Crash and error diagnostics used to fix bugs2.5 Leaderboard
Entering a filtered handle opts eligible ranked results into weekly boards. The board stores your handle, challenge, target, score, verification state, week, and a one-way identifier derived from a private deletion secret on your device. Personal-only results, complete training history, camera frames, and proof files are never sent to the board. Skip the handle to keep every result private.2.6 Board Safety Reports
You can hide another athlete from your device or report and hide a board entry using a fixed safety reason. A report stores a one-way identifier derived from your anonymous profile ID, the reported board row and device identifier, a snapshot of the reported handle, the selected reason, status, and timestamps. It does not include camera footage, proof files, or training history. Reports are reviewed to detect abuse, enforce our Terms, and keep public boards safe.2.7 Private Crews
If you create or join a private crew, we create an anonymous profile and store your handle, crew membership, weekly promise total, and preset encouragements. Crews contain 5 to 10 invited athletes and do not include open chat. Deleting your profile in the App removes this data and your weekly board entries.3. How We Use Your Information
• Count your reps and coach your pacing during challenges
• Save your challenge results and training history
• Show your verified results on the leaderboard if you choose to join it
• Operate private crews and delete your anonymous profile when you ask
• Respond to customer support requests
• Monitor product performance, debug issues, and improve the App
• Detect abuse, enforce our terms, and comply with legal obligations4. Third-Party Service Providers
We share limited data with service providers to operate the App. All are contractually required to protect your data and use it only as we instruct.Infrastructure and Authentication: Supabase stores weekly board entries and authenticated private crew profiles. Training does not require a login. Data is processed in the United States.Analytics: PostHog for product analytics (screens viewed, features used, challenges completed). Session replay is disabled.Crash Reporting: Sentry for crash and error diagnostics. Text inputs are not captured.We Never Sell Your Data. Full service provider details and privacy policies available upon request.5. International Data Transfers
The App is hosted in the United States. If you access from other regions, your data is transferred to and processed in the US.EU/UK Users: International transfers are handled under the legal mechanisms and safeguards available for the applicable provider and request. Those mechanisms may vary by service and processing location. You can request information about the safeguards used for a particular transfer by contacting privacy@builtbyfoundry.io.6. Data Retention and Deletion
We retain data only as long as necessary or required by law.Full challenge results and training history stay on your device until you erase them or delete the App. You > Account & Data immediately requests deletion of your private crew profile and weekly board entries, then erases local training data and app-owned proof files. Shared proof copies remain under your control. Safety reports may be retained as an abuse-prevention and enforcement record. Analytics events are retained up to 26 months and crash reports up to 90 days.7. Your Privacy Rights
All Users can request access, correction, or deletion of personal data.EU/UK Users (GDPR)
Additional rights: Data portability, restrict processing, object to processing, withdraw consent, file complaints with your Data Protection Authority.File a complaint: UK (ICO: ico.org.uk), Ireland (dataprotection.ie), or your local EU authority.Legal basis: Contract performance, legitimate interests (analytics, security), consent (session replay), legal obligations.California Users (CCPA/CPRA)
Additional rights: Know what data we collect and who we share with, delete data, correct inaccuracies, opt out of certain data sales or sharing where applicable, limit use of sensitive information.You can designate an authorized agent to make requests. We verify identity before fulfilling requests. No discrimination for exercising rights.How to Exercise Rights
Email privacy@builtbyfoundry.io with your name, email, user ID (Settings → Profile), and specific request.In-app deletion: Settings → Account → Delete AccountResponse time: GDPR: 30 days, CCPA: 45 days. Requests are free.8. Children's Privacy
Do Hard Things is not directed to children under 13. We do not knowingly collect data from children under 13.Parents: If your child under 13 has provided information, contact privacy@builtbyfoundry.io. We'll delete it within 30 days.Teens (13-17): Review this policy with a parent or guardian.9. Data Breach Notification
If a breach compromises your data, we will notify you and relevant authorities within 72 hours, describing what happened, what data was affected, what we're doing, and what you should do.Report security concerns: privacy@builtbyfoundry.io10. Security
We use encryption in transit (TLS 1.3+), encryption at rest (AES-256), secure authentication (OAuth 2.0), access controls, and regular security audits. While no system is 100% secure, we work to protect your data.You should: Protect your device passcode and biometric authentication, use strong Apple/Google account passwords, enable two-factor authentication.11. Updates to This Policy
We may update this policy to reflect new features or legal requirements. Material changes will be communicated via email or in-app notification 30 days before taking effect. Continued use after changes means you accept the updated policy.