Legal

Privacy policy

Last updated 8 October 2026

Ultim8 (“we”, “our”, “the app”) is a friends-and-family fitness competition app, designed by ARTH. This policy explains what we collect, why, and what control you have over it.

What we collect

DataWhy
Email addressSigning you in, and letting friends find your account by email.
Display name, profile photoTaken from your Google account or entered by you. Shown to people in your groups and friends list, nowhere else.
Mobile number (optional)Only if you choose to add it to your own profile. It is not verified and is never shown to friends or groups.
Steps, active/total calories, workout sessionsRead from Android Health Connect (with your permission) so your group's leaderboard can rank you. Never shown outside groups you choose to join.
Weight, height, birthdate, biological sexOptional, private Health Profile you log yourself. Never shown to friends or groups, ever.
Push notification tokenLets us notify you if someone overtakes you on a leaderboard, or when you unlock a badge. You can deny notification permission at any time in your device settings.
Purchase data (if you buy remove-ads)Handled by Google Play Billing. We never see your payment details. Purchases are not live yet.
Website visit countThis website adds one anonymous number to a visit counter each time the home page loads. No cookies, no personal details.

Where it lives

Your data is stored on Google Firebase (Cloud Firestore, Mumbai region) and Google's servers. We don't sell your data, and we don't share it with anyone except the service providers below, who process it only to help run the app.

Who else touches it

  • Google Firebase: authentication, database, push notifications.
  • Google AdMob: shows ads to free users; may use an advertising ID for ad relevance, per Google's own ad policies.
  • Google Play Billing: will process remove-ads purchases; we never receive your card details.
  • Android Health Connect: the on-device store your steps, calories and workouts are read from. It is not a third party we send data to.
  • Supabase: stores the anonymous website visit count described above.

Your controls

  • Revoke Health Connect permission any time in Android Settings → Apps → Ultim8 → Permissions.
  • Turn off notifications any time in your device's notification settings.
  • Leave any group or remove any friend from inside the app, instantly.
  • Delete your account and all associated data permanently from Profile → Delete account. This removes your profile, health data, friends, group memberships and sign-in credentials. It cannot be undone.

Children

Ultim8 is not directed at children under 13, and we don't knowingly collect data from them.

Changes

If this policy changes in a way that matters, we'll update the date at the top and, for anything significant, tell you in the app.

Questions or a data request?

Email hello@designedbyarth.com.