← Back to Victoli

PRIVACY POLICY

Last updated: [15 April 2026]

1. Who We Are

Victoli is a gamified fitness application operated by [LEWIS MUTCH] based in Scotland, United Kingdom.

Contact email: app.victoli@gmail.com

2. What Data We Collect

Account Information

• Email address (required for account creation)
• Display name (chosen by you)
• Password (stored securely, we never see your plain text password)
• Avatar selection

Fitness Data

• Workout logs (exercises completed, weights, reps, duration)
• Personal records (PRs)
• Training preferences (experience level, training days per week)
• Fitness goals

Community Data

• Posts, comments, and likes you make in community feeds
• Community membership and selected coach
• Points, rank, and leaderboard position

Payment Data

We do not directly collect or store payment card details. All payments are processed securely by Apple (App Store) or Google (Play Store). We receive confirmation of your subscription status only.

3. Why We Collect Your Data

We use your data for the following purposes:

• To create and manage your account
• To provide your personalised workout programme
• To track your workout progress, PRs, and streaks
• To display leaderboards, ranks, and community competitions
• To enable community features (posts, comments, likes)
• To process your subscription
• To respond to support enquiries

Our lawful basis for processing is: (a) contract performance (providing the service you signed up for), and (b) legitimate interest (improving the app and preventing misuse).

4. Who We Share Your Data With

We share your data with the following third parties, solely for the purposes of operating the app:

• Supabase — our database and authentication provider
• Apple / Google — payment processing for subscriptions
• RevenueCat — subscription management

We do not sell your personal data to any third party. We do not share your data with advertisers.

Your display name, avatar, rank, and points are visible to other Victoli users within your community. Your email address and workout data are private and not visible to other users.

5. Where Your Data Is Stored

Your data is stored on Supabase servers located in the European Union. All data is encrypted in transit (HTTPS/TLS) and at rest.

6. How Long We Keep Your Data

We keep your data for as long as your account is active. If you delete your account, we will delete all your personal data within 30 days, except where we are required by law to retain it.

Aggregated, anonymised data (e.g. total community statistics) may be retained indefinitely as it cannot be used to identify you.

7. Your Rights

Under UK GDPR, you have the following rights:

• Right of access — request a copy of all data we hold about you
• Right to rectification — ask us to correct inaccurate data
• Right to erasure — ask us to delete your data
• Right to restrict processing — ask us to limit how we use your data
• Right to data portability — request your data in a machine-readable format
• Right to object — object to processing based on legitimate interest

To exercise any of these rights, email us at app.victoli@gmail.com. We will respond within 30 days.

8. Children

Victoli is not intended for children under the age of 16. We do not knowingly collect data from anyone under 16. If we discover that a user is under 16, we will delete their account and data immediately.

9. Cookies and Tracking

Victoli is a mobile application and does not use cookies. We do not use any third-party tracking or analytics tools. We do not display advertisements.

10. Data Breaches

In the unlikely event of a data breach that poses a risk to your rights and freedoms, we will notify the ICO within 72 hours and notify affected users without undue delay.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes through the app or by email. The latest version will always be available here.

12. Complaints

If you are unhappy with how we handle your data, please contact us at app.victoli@gmail.com. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Website: ico.org.uk
Phone: 0303 123 1113