RovaFit — Privacy Policy & Referral Program Terms

1. The short version

Your fitness data lives on your device. Steps, workouts, GPS routes, Heart Points, heart-rate readings, and your profile (age, height, weight, goals) are stored locally in the app's database. We do not upload them to our servers.
Location is used only while you track an outdoor workout, to draw your route on the map. Routes are saved on your device only.
The free app shows ads. Ad partners (Google AdMob and, via mediation, Meta Audience Network) may process your advertising identifier, subject to the consent you give in-app.
You can remove ads with a purchase/subscription or through our referral program.
Uninstalling the app deletes your local fitness data.

2. Who we are

RovaFit is published by the RovaFit team ("we", "us"). This policy covers the RovaFit mobile applications distributed on Google Play (Android) and the Apple App Store (iOS), and the rovafit.com website.

Contact for any privacy question or request: support@kingbrainapps.com.

3. Data we handle, and where it stays

Stored only on your device (never sent to our servers)

Data	Purpose
Steps, distance, calories, active time, Heart Points	Counting and showing your daily activity, reports and insights
Outdoor workout sessions incl. GPS routes	Route maps, workout history, statistics
Heart-rate measurements (camera-based)	Showing your pulse when you use the heart-rate feature; the camera image is processed on-device and never stored or transmitted
Profile: age, height, weight, step/distance/calorie/Heart-Point goals, units, language	Personalising calculations and the interface
Water, sleep and eye-exercise records	The corresponding wellness features

Processed by service providers

Data	Service & purpose
Advertising identifier (Android Advertising ID / Apple IDFA), coarse device data, ad interaction data	Google AdMob and Meta Audience Network (mediation) — showing ads in the free version, subject to your consent choices
Anonymous usage statistics and app events	Google Firebase Analytics — understanding which features are used so we can improve the app
Crash and performance diagnostics	Firebase Crashlytics & Performance — fixing bugs and slowness
Push token	Firebase Cloud Messaging — delivering notifications you have allowed
Anonymous account ID and referral/invite records	Firebase Authentication (anonymous), Firestore and Cloud Functions, plus the Google Play Install Referrer — operating the referral programme (Section 9) and granting ad-free rewards
Purchase tokens	Google Play Billing / Apple StoreKit — processing the ad-free purchase or subscription; we never see your payment details
Map tiles requests	Google Maps — rendering the workout map (your saved routes stay on-device)
Optional game-services ID	Google Play Games — leaderboards, only if you sign in to them

We do not sell personal data, and we do not use your health and fitness data for advertising.

4. Permissions we ask for, and why

Permission	Why
Physical activity / Motion & Fitness	Counting steps with your device's sensors
Location (precise, while-in-use)	Drawing your route during outdoor walk/run/ride tracking; used only while a tracking session is active, via a visible foreground notification
Camera	Measuring heart rate from your fingertip; images are analysed on-device only
Notifications	Step counter status, goal achievements and reminders you enable

Every permission is optional — the related feature simply stays off if you decline. You can change permissions any time in your system settings.

5. Advertising and your choices

The free version of RovaFit is funded by ads (banner, native, interstitial, app-open and optional rewarded ads).

Android: where required (e.g. EEA/UK), we show Google's consent dialog (UMP) before ads are served, and your choice controls personalised vs. non-personalised ads. You can revisit your choice in the app.
iOS: we request App Tracking Transparency (ATT) permission; if you decline, ads are non-personalised.
You can reset or delete your advertising identifier in your device settings at any time.
Partner policies: Google Ads · Meta.
Purchasing the ad-free option, or earning ad-free days via referrals, removes ads and the related processing.

6. Data retention & deletion

On-device fitness data remains until you delete it in the app (e.g. deleting workouts, resetting today's steps) or uninstall the app — uninstalling removes it permanently.
Analytics and crash data are retained by Firebase for limited periods (typically 2–14 months) and then deleted or aggregated.
Referral records and the anonymous account ID are kept while the programme runs; email us to have them deleted.
To exercise deletion for any provider-side data, contact support@kingbrainapps.com — we respond within 30 days.

7. Your rights

Depending on where you live (e.g. GDPR in the EEA/UK, CCPA/CPRA in California, and similar laws elsewhere), you may have the right to access, correct, delete, or receive a copy of your personal data, to object to or restrict processing, and to withdraw consent at any time without affecting prior processing. Because your fitness data is stored on your device, you can exercise most of these rights directly in the app; for provider-side data, email us and we will assist. You may also lodge a complaint with your local data-protection authority.

8. Children

RovaFit is not directed at children under 13 (or the higher minimum age in your country). We do not knowingly collect personal data from children. If you believe a child has used the app and data was collected, contact us and we will delete it.

9. Referral Program Terms

Invite & Earn Share your invite link; when a friend installs RovaFit through it, you earn ad-free days.

Rewards are ad-free days in RovaFit; no cash value, non-transferable.
Maximum 28 ad-free days per inviter from referrals.
No self-referrals and no same-device invites.
A device can receive the invitee reward only once.
You may share your invite link publicly (including social media).
We may withhold or revoke rewards obtained through fraud, automation or abuse, and may modify or end the programme at any time; earned rewards remain valid.
To operate the programme we process an anonymous account ID, invite codes and the Play Install Referrer, as described in Section 3.

10. Security & international transfers

Provider-side data is processed by Google (Firebase, AdMob, Maps, Play) and Meta on infrastructure that may be located outside your country, protected by mechanisms such as the EU Standard Contractual Clauses. We follow a data-minimisation approach: what doesn't leave your phone can't be breached on a server.

11. Changes to this policy

We will post any changes on this page and update the effective date above. For material changes we will additionally notify you in the app before they take effect.

12. Contact

RovaFit Support — support@kingbrainapps.com

Website — rovafit.com

This document serves as the privacy policy for both the Google Play and Apple App Store listings of RovaFit.