Hero Stage
Update: 24 September 2026

1. Who we are
Hero Stage is published by an independent developer. This policy explains what personal data we process and how.

2. Data we collect
Anonymous device ID (generated locally) — to save progress.
Sign in with Apple (optional) — only if you choose to protect your hero. We do not request your name or email: we keep the anonymous identifier Apple gives Hero Stage (hashed) and an encrypted technical token used to revoke access when you erase your data. It only lets you recover your progress on another device. You can also disconnect it at any time in iPhone Settings > your name > Sign in with Apple.
Season profile: your Season level and your latest session feedback, so a recovered hero keeps them.
Name or handle (max 24 characters) — only if you join the Hall of Fame, Patrol league or a duel. Optional.
Session data: days completed, duration, reps, Round Rush score.
Daily step count (optional) — if you enable Patrol. Read from Motion & Fitness (CoreMotion) after permission. Daily total only — never location, route or other health data.
Live Activities (optional) — if enabled, the latest 45-minute step total, its timestamp, your time zone and a technical Apple token are stored to decide whether to show a patrol reminder on your Lock Screen. You can turn them off in the app or in iPhone Settings.
Super Patrol data (optional): division, fair score, duels, invite code, result. No geolocation.
Community safety data: blocked players and handle reports.
Technical data: anonymous error logs (no persistent IP storage).
We do not collect: legal name, email, address, location, photos, contacts. No Apple Health / Google Fit. Motion & Fitness is optional and revocable in Settings.

Some league slots may be filled by synthetic training profiles (chip icon). They are not real people.

3. How we use this data
Save progress and let you recover it on another device with Sign in with Apple; show Hall of Fame, league and duels; moderate handles; show steps and Live Activities; improve the app via anonymous logs. Workout sounds and Ned's debrief are generated on your device: no workout data is sent to an AI provider. We never sell your data. No behavioral advertising.

4. Purchases (RevenueCat)
Payment is processed by Apple / Google. RevenueCat receives an anonymous ID and your purchase status. Policy: revenuecat.com/privacy.

5. Usage analytics (PostHog)
We use PostHog Cloud EU (servers in Frankfurt, European Union) to understand which sessions and screens help you keep the rhythm, and where the Premium trial stops. PostHog only receives anonymous events tied to the same device identifier as your progress save: screens opened, briefing completed, workout started or finished, paywall viewed, purchase or restore, reminder toggle, notification opened. No name, email, advertising identifier or IP address is sent: IP geolocation is disabled. PostHog policy: <https://posthog.com/privacy>

6. Processors
RevenueCat — Premium status.
Apple — Sign in with Apple (optional) and Live Activity delivery.
PostHog Cloud EU — usage analytics (no IP geolocation).

7. Retention
For as long as you use the App. Erase via “NEW GAME” (sessions) or “Delete my data” in Settings (everything, including your handle). Irreversible. Erasing your data also revokes Sign in with Apple for Hero Stage. Uninstalling removes local data.

8. GDPR
Access, rectification, erasure: [email protected], within 30 days.

9. Security
HTTPS and a secured MongoDB. No method is 100% infallible.

10. Children
Intended for ages 13+. We do not knowingly collect children’s data.

11. Changes
The date at the top is updated on every change. Continued use constitutes acceptance.