Data controller: Raúl Raposo Villar. SportLoop legal notice.
Information we handle
The information involved depends on the features you choose to use.
- Account details such as email, username, authentication status and account identifiers.
- Profile and progress data such as avatar, frame, badges, showcase, XP and level.
- Activity data such as sport, duration, distance, calories, pace, speed, timestamps and personal statistics.
- GPS points, route, elevation and related metrics for supported activities when location permission is granted.
- Optional Health Connect data made available through Android permissions, including compatible step or exercise information.
- A Firebase Cloud Messaging (FCM) device token, the app language and your notification preferences when you enable push notifications. The token identifies an app installation for delivery; it is not your advertising identifier.
- Friendships, requests, blocks, Club membership, rankings and user-created Club names or descriptions.
- Purchase verification, entitlements, inventory, virtual coins and gifting records. Payment credentials are handled by the platform store.
- Consent choices, ad-delivery identifiers and server-side reward-verification events for optional advertising.
- Support messages, reports, diagnostics and limited security or anti-fraud records.
How we use information
We use information to create and secure accounts, record activities, calculate statistics and progress, operate challenges, rankings, social and Club features, verify purchases and optional ad rewards, provide support, prevent abuse and meet applicable obligations.
The legal basis depends on the feature and applicable law: providing a feature you request, consent where required, legitimate service-security needs, or a legal obligation.
GPS, routes and background recording
Running, cycling and hiking may use GPS when you grant location permission. During an active workout, background location may continue recording while the app is in the background or the screen is off so that route and distance remain continuous. Other sport modes do not automatically use GPS.
Routes are sensitive and are not made public merely because other activity information is visible. If you deliberately include a route in a share image, that exported image can be seen wherever you choose to share it.
Health Connect
Health Connect access is optional and controlled by Android permissions. SportLoop uses permitted data for fitness features you request, such as compatible workout imports and personal step summaries. A limited step aggregate may be stored on the device; compatible workouts or routes may be imported into SportLoop when you use that feature.
Health Connect information is not used to build advertising audiences. SportLoop is not a medical device and does not provide a diagnosis.
Push notifications
If you enable notifications, SportLoop may send brief transactional, social, Club, challenge, gift and progress updates through Firebase Cloud Messaging (FCM). The device token, selected language and category preferences are used only to route and localise these messages. SportLoop does not use them to create advertising audiences.
A notification’s short title and message may be visible on your device’s lock screen according to its system settings. To protect privacy, SportLoop avoids including routes, precise health measurements or other sensitive detail in that preview.
The optional 10,000-step progress notification is evaluated only after the app synchronises the authorised daily step aggregate from Health Connect; SportLoop does not continuously monitor Health Connect and the alert may therefore arrive later. Health Connect data is never used for advertising. You can manage notification categories in SportLoop and disable notifications or lock-screen previews in the device settings.
Social features and community safety
Information you choose to use in social features may be visible to other users according to the feature—for example a username, avatar, Club membership, challenge participation or ranking result. Do not put private information in usernames, Club names or descriptions.
SportLoop provides reporting and blocking tools. Reports may be reviewed to protect users and enforce the Community Guidelines; no automatic or immediate outcome is promised.
Advertising and purchases
SportLoop may offer optional rewarded advertising through Google AdMob. Consent and privacy choices are requested where required. Google may process device, consent and ad-delivery information under its own terms. Health Connect data is not supplied for advertising targeting.
Where digital purchases are available, Google Play processes payments. SportLoop receives the information needed to verify a purchase, grant the entitlement and prevent duplicate or fraudulent fulfilment. Refunds remain subject to Google Play terms and applicable law.
Service providers
Verified providers used for relevant functions include Google Firebase, Google Health Connect, Google AdMob, Google Play, Resend and Zoho. The public website hosting and content-delivery provider processes technical request data needed to serve the site. Providers act for their stated role and may operate under their own privacy terms. We do not claim that every operation takes place in one country.
Retention and account deletion
Information is kept only as long as needed for account operation, the stated purpose, service security, fraud prevention, transaction integrity and applicable obligations. Different categories receive different treatment when an account is deleted.
Private and transient account information is deleted where appropriate. Some shared records can be anonymised to preserve another user’s entitlement or the integrity of a completed interaction. Limited private evidence may be retained when necessary for security, anti-fraud, purchase or reward reconciliation, audit or legal compliance. We do not promise immediate deletion of every record or publish an unverified fixed retention period.
Security, choices and rights
SportLoop uses authentication, access controls and backend validation designed to prevent unauthorised account or economic operations. No system can guarantee absolute security.
You can manage optional device permissions, Health Connect access, advertising choices and route-sharing preferences through SportLoop or device settings. Depending on applicable law, you may request access, correction, deletion, restriction, objection or a copy of certain personal information. Identity verification may be required.
Website storage, children and contact
This public website does not use advertising or analytics cookies. It stores only your language preference locally. If tracking is introduced later, this notice and any required consent will be updated first.
The public website can be viewed without creating an account. SportLoop V1 and its authenticated account services are intended exclusively for people aged 18 or over. If you are under 18, do not create or use a SportLoop account.
For privacy questions or rights requests, contact contacto@sportloopapp.com. Material changes will be published with a revised date.
Activity Wall, comments and private chats
In versions that include the Activity Wall, sharing new activities is enabled by default. Only activities newly recorded after this feature is activated can enter the Wall; existing historical activities are not published retrospectively. They are available only to your current friends and current members of the same Club, subject to blocking, deletion and moderation. The Wall is not a public website and is not accessible anonymously.
You can turn off “Share new activities in the Wall” in the privacy and sharing settings. This stops future posts without automatically deleting previous posts; turning it on again applies only to future activities. Social views respect your route settings: with streets disabled, they show a normalised shape on a blue background, without map tiles or raw coordinates. A recognisable shape can still reveal a place. Optional start/end hiding removes the chosen metres from social and shared representations, without changing the original route or sporting statistics.
Private activity notes are always excluded from the Wall, automatic social projections, public previews and other users’ activity details. Existing notes are included automatically only in an activity image the owner explicitly chooses to share. An exported image may be retained by its recipients and cannot be recalled by changing an app setting.
Comments and chats contain text, account identity, timestamps and interaction/read state stored through Firebase for app functionality and community safety. Private messages can be sent only between current friends; after unfriending, participants may retain read-only history. Club chat is restricted to current Club members. Blocking prevents access and new interaction. These chats are not end-to-end encrypted. Private-chat and Club-chat notifications have separate controls and do not include message text in their lock-screen notice.
You can report content or users, block users and delete your own comments or messages. Account deletion removes authored social activities, comments and messages and associated identity links; another participant may retain their own messages in read-only history. Deleting an activity removes its social projection and interactions. Limited moderation/security records are handled under the existing deletion and retention policy. For permitted social maps, the server may request the needed OpenStreetMap tiles and return only an image to the authorised viewer, never raw route coordinates.
Optional activity photos and explicit sharing
Versions with activity photos allow you to select up to six images using the system photo picker, without general access to your gallery. Processed photos and thumbnails are stored through Firebase for activity display and sharing. Uploads are optional. A private, processed draft may remain on your device while an upload is pending so you can retry it.
Unnecessary image metadata, including EXIF GPS, is removed before an image is used for social viewing or sharing. The visible contents of a photograph can still identify a place or person. Photos in the Wall or an athlete profile are served only under current friendship or Club access, blocking, deletion and moderation checks; they are not anonymous public web previews. You can delete photos, and activity or account deletion also removes the associated stored images and metadata.
When the owner explicitly shares an activity image, its real, trimmed activity notes are included automatically when present. Notes remain excluded from the Wall, automatic social projections, other users’ activity details and public web previews. Recipients may retain or redistribute exported images; deleting the activity or changing a privacy setting cannot recall their copies.
Private account area and deletion
The SportLoop website uses the same Firebase Authentication account as the app. Authentication credentials are handled by Firebase and are not placed in public URLs or sent to analytics. Private account pages are not indexed and are served without reusable browser caching.
Deletion can be completed in the app or through the authenticated website. Private account data is deleted, shared records are anonymised where another person’s entitlement must be preserved, and only minimum pseudonymised evidence may be retained for fraud prevention, purchase or reward integrity, legal duties and idempotency. Retained evidence does not remain a public profile.
External services: OpenStreetMap and Google Fonts
When you use a feature that displays a map—for example, to record or view an optional GPS route—SportLoop requests map tiles from the tile service operated by the OpenStreetMap Foundation (OSMF). These technical requests disclose your IP address and the tile coordinates or viewport needed to render the area on screen, so OSMF may infer the area of the map being viewed. The requests occur only while a map is displayed; use of GPS route features is optional. SportLoop does not intentionally include your account credentials in these requests.
SportLoop uses the Google Fonts library for interface typography. If a required font is not already bundled or cached, the app may download and cache it at runtime from Google-hosted infrastructure, including fonts.gstatic.com. This technical connection may disclose your IP address and basic request or device information to Google. SportLoop makes the request to render typography and does not intentionally include profile, health or activity content in it.