Privacy Policy · caspyr

This policy explains what caspyr collects, why, who can see it, how long it’s kept, and the choices you have. It covers the caspyr iPhone app and this website, caspyr.app. caspyr is made by caspyr LLC (“caspyr,” “we,” or “us”).

The short version

From Apple Health, caspyr reads one thing: your step count. It reads it only after you agree, and it never writes to Apple Health.
Your steps are used to run caspyr’s matches and nothing else. We never sell your data, and we never use it for ads.
Some of your information is shown to other players: your rival for the day, your friends, and, while you’re in the top 100, everyone on the Ladder. The full list is under “Who sees what.”
You can delete your account in the app at any time. That deletes your steps, your chats, and the rest of your account right away, with the few exceptions explained under “Deleting your account.”
Our Consumer Health Data Privacy Policy explains your rights over your health data, including under Washington’s, Nevada’s, and Connecticut’s laws.

Who we are and how to reach us

caspyr LLC runs caspyr and is responsible for the information described here. For questions about this policy, your data, or your account, email support@caspyr.app.

What caspyr collects and why

Your account

Sign in with Apple. caspyr asks Apple only for your email address, not your name. If you choose Apple’s Hide My Email, we get a private relay address instead of your real one. Apple also gives us an ID that stands for your Apple account in caspyr. We use these to sign you in and keep your account yours. caspyr doesn’t send players email today, and we don’t use your address for marketing.
Date of birth. You enter it when you make your profile, so we can confirm you’re 18 or older. It’s stored with your account and never shown to anyone.
Apple’s age check. When Apple tells caspyr that a state age law covers your Apple Account (Texas’s, for example), caspyr also asks Apple for your age range. The answer is used only for that check and stays in the app’s memory while caspyr is open. It’s never saved, never sent to our servers, and never logged.
Username. You choose it when you sign up, and other players see it. It can’t be changed later, though a moderator can replace one that breaks our rules. New usernames are checked against our own word list, on our own servers.
Profile photo (optional). If you add one, the app crops and shrinks it. Before anyone sees it, we remove hidden details stored in the file (such as where it was taken) and run a safety check (see OpenAI under “Outside services”). A photo that fails the check is never stored. Photos are kept at a web address that’s hard to guess but not secret, so anyone who has the address can see the photo.
Time zone. caspyr saves your phone’s time zone so your daily match runs from midnight to midnight where you are, and updates it when your phone moves to another US time zone (at most once a day). A time zone shows roughly which part of the country you’re in. caspyr never collects your precise location.
Your agreements and settings. When you agreed to the Terms of Service and this policy (and which version), when you agreed to share your steps, when you agreed to the photo and message safety checks, and whether Message notifications are on. Other players never see these.

Your steps from Apple Health

What caspyr reads. Your step count, and nothing else. caspyr reads Apple Health’s own hourly totals, which count iPhone and Apple Watch steps only once, so caspyr’s number matches the Health app. Each time caspyr syncs (when you open it, and in the background when iOS allows), it reads your hourly step totals for yesterday and today and uploads them.
Your starting rating. Once, when you join, caspyr reads your daily step totals for the last 30 days to set your starting ELO. Our server works out your average from them and keeps only that average.
Sync times. Our server notes when each upload arrives, so your rival can see when your phone last synced.
What caspyr never reads. Any other Health data: no workouts, distance, heart rate, sleep, weight, cycle tracking, medications, health records, or anything else. caspyr never writes to Apple Health.

How your steps are used and protected is explained under “Apple Health” below.

Your matches and rating

Matches. Who you played and on which day, your final step count and hour-by-hour steps for that day, the result, and your ELO, tier, and win streak before and after. Friendly matches with friends are kept too; they never change your rating.
Your rating. Your ELO, your starting ELO, the history behind your ELO chart, your win streak, and your wins, losses, and ties. caspyr uses your record to run the game but never shows it to other players. (The only place any of it shows is the “While you were away” line you see after missing two or more results, which counts the wins, losses, and ties among those matches.)
Your matches, ELO, tier, and rank are all worked out from your steps.

Friends, challenges, and chat

Friends and friend requests. Who you’ve added, who has asked you, and what happened to each request. Declining is never shown to the sender.
Challenges. Who challenged whom, for which day, and how it ended (accepted, turned down, withdrawn, called off, or played).
Chat messages. What you write to your friends and when, and which messages you’ve read, so caspyr can show which chats have something new. Your friend never sees what you’ve read.
A log for limits. When you looked someone up, sent a friend request, sent a challenge, or sent or tried to send a message, but not who or what. It’s used only to enforce limits, such as 30 lookups an hour.

Safety

Blocks. Who you blocked and when. The person you block is never told.
Reports. Who you reported, the reason, where you reported from, and when, along with the reported player’s username and photo at the time. A report about a photo (or for “Something else”) keeps a private copy of the reported photo. A report about a friend keeps a copy of your chat’s last 50 messages, from both of you, and any message you picked out.
Stopped messages. If the message check stops a message for sexual content involving a minor, we record who sent it and when, never the text.
Moderation. Whether and when your account was suspended, whether a moderator replaced your username, and our notes on how each report was handled.

Notifications

When you allow notifications, caspyr saves a push token for each phone you’re signed in on, so our server can send you the nightly result, challenges from friends, and messages. Reminders (the 9pm lock-in reminder and the ELO decay warning) are scheduled on your phone and don’t come from our server.

Crash reports

If the app crashes or hits an error, a report goes to Sentry: the device model, iOS and app versions, what went wrong, and the app’s last few steps before it. Crash reports aren’t linked to you: they carry no account ID, name, or email, Sentry is set not to store IP addresses, taps are left out, and web addresses are trimmed. They’re set up to leave out your step counts and messages. The app also tells Sentry when you open and close it, without saying who you are, so we can see how often crashes happen.

On your phone

The app keeps a few things on your phone to work properly, such as when it last synced and your reminder schedule. Apple Health data stays in the Health app; caspyr reads it there. Deleting the app removes what caspyr kept on the phone.

This website and email

This website has no analytics, ads, trackers, or forms, and caspyr sets no cookies. No third party collects information about your activity over time or across other websites or apps through this website or the app. Because nothing tracks you, a browser’s Do Not Track or Global Privacy Control signal has nothing to turn off, and the site works the same either way. Cloudflare hosts it and, like any web host, handles visitors’ IP addresses to deliver pages and block attacks. If you email us, we get your email address and whatever you write, and we use them to answer you. Email to caspyr.app addresses passes through Cloudflare to our inbox, which Google (Gmail) hosts.

Technical records

The services that run caspyr keep short-term technical records of requests to our servers (such as IP addresses and times) for security and troubleshooting. When the app checks for updates, it contacts Expo’s update service, which receives the technical details needed to deliver them, such as the app version and your IP address.

Who sees what

Your rival for the day

Your username, photo, tier, ELO, the month you joined, your steps that day, your steps hour by hour during that day, and when your phone last synced that day (the time caspyr last received your steps, to the minute). Because caspyr syncs while it’s open, the sync time can show when you last had caspyr open. Rivals always share the same time zone that day, so your rival knows you’re in theirs, but never sees your age, birthday, city, precise location, or record.

Your friends

Your username, photo, ELO, tier, the month you joined, and your step total so far today (your own day; only when you’ve both agreed to share steps). Never your hourly steps, sync times, or record.
Your messages to them, and the challenges between you.
Your place on the Ladder’s Friends view, which ranks you and your friends by ELO.
When Challenge is off between you because you’re on different time zones that day, a friend can tell you’re on another time zone.

Everyone on caspyr: the Ladder

While you’re one of the top 100 players by ELO among players whose steps caspyr received in the last 7 days, everyone on caspyr sees your username, photo, tier, ELO, and rank on the Ladder. Suspended accounts are left off. If caspyr gets no steps from you for 7 days (for example, after you turn off Steps for caspyr in the Health app), you drop off the list. Deleting your account removes you at once. Outside the top 100, only you see your rank.

Anyone who types your exact username

They see only your photo and username, and they can send you a friend request. There’s no browsing or searching by partial name.

In notifications

Your username can appear in other players’ notifications: in a rival’s nightly result (such as “Lost to @yourname” or “Today’s rival: @yourname”), in a friend’s challenge notification, and with the text of each message you send a friend. caspyr never puts step counts in notifications (a message’s text goes as you wrote it).

People at caspyr

We don’t read your chats. Someone at caspyr reads messages only when a chat is reported (and then the copy saved with the report), or when the law requires it. Moderators see what’s needed to handle a report: the reported username, photo, or messages, and who filed it.

When the law requires it, or to protect someone

We may share information when the law requires it, such as in response to a valid subpoena or court order.
US law requires online services to report child sexual abuse material and the online enticement of children to the National Center for Missing & Exploited Children (NCMEC). When we make such a report, we give NCMEC the information and evidence the law requires, and NCMEC may pass it to law enforcement.
We may share information when we believe in good faith that it’s needed to protect someone from serious harm.
If caspyr is ever sold or merged with another company, your information would move to the new owner only under this policy’s protections, and we’d tell you before it does.

Outside services that handle your data

caspyr uses a few companies to run the app. Each gets only what it needs to do its job for us, and we share your information with them only so they can provide their service to caspyr. We expect each of them to protect it at least as well as this policy does.

Supabase hosts caspyr’s database, photo storage, and server code, in the United States. Everything described in this policy that’s kept on our servers is stored there.
Apple provides Sign in with Apple, Apple Health (on your phone), the age check, and the Apple Push Notification service, which delivers notifications to your iPhone. caspyr doesn’t send your steps to Apple.
Expo relays our notifications to Apple’s push service. It gets your push token and each notification’s text: a result, a rating change, a promotion, a rival’s or friend’s username, a challenge’s day, or a message’s text (never step counts). Expo also delivers app updates.
OpenAI runs the safety checks on profile photos and chat messages, before anyone else sees them. It gets the photo or the message, plus, for a message, the sender’s own messages in that chat from the last 2 minutes (so a threat split into pieces is caught). It gets nothing else about you: no username, no steps. You agree to the photo check once, before your first photo, and to the message check once, before your first message. OpenAI doesn’t use what it checks to train its AI, and may keep it for up to 30 days to watch for abuse before deleting it, unless the law requires it to keep it longer.
Sentry receives crash reports, which aren’t linked to you (see “Crash reports” above).
Resend sends moderation emails to our inbox. When someone files a report, the email includes the reported player’s username, the reporter’s username, the reason, where it was filed from, and the time, how many reports and blocks the reported player has had, a link to a private copy of a reported photo, and, if a message was picked out, up to 300 characters of it. When the message check stops a message for a minor’s safety, the email includes the sender’s username and how many such messages there were, never the text.
Google hosts our email inbox (Gmail), which holds the emails you send us and our moderation emails.
Cloudflare hosts this website and routes email sent to caspyr.app addresses.

We don’t sell your information, share it for advertising, or let advertisers or data brokers have it. caspyr has no ads and no advertising or tracking code.

Apple Health

Your steps get the most care, because they’re health data.

Only with your permission. caspyr reads nothing from Apple Health until you agree on the “Share your steps with your rivals” screen, and Apple then asks separately which Health data caspyr may read. caspyr asks only for Steps.
Used only to run caspyr. Your steps are used to score your matches, pick winners, set and update your ELO and tier, pair you with rivals and set up your matches, rank the Ladder, apply the ELO decay rule, and show your steps to your rival and friends as described under “Who sees what.”
Never sold, never used for ads. We never sell your Health data, never use it for advertising, marketing, or data mining, never share it with data brokers or advertisers, and never use it for anything unrelated to caspyr. It isn’t used to train AI.
Shared only as described. Besides the players described above, your steps go only to Supabase, which stores them for us. Notifications may carry a result, a rating change, or a promotion that comes from your steps, but never a step count.
Kept until you delete your account. Synced steps stay on caspyr’s servers until you delete your account, and deleting it deletes them.

To stop sharing new steps, turn off Steps for caspyr in the Health app (tap Summary, then your picture or initials, then Apps, then caspyr). caspyr gets no new steps after that. The steps it already has stay until you delete your account; after 2 days without new steps you stop getting nightly rivals, after 5 full days your ELO can start to drop, and after 7 you leave the Ladder. Friends still see your ELO and tier. To remove everything, delete your account in the app.

How long we keep it

Your account (email, Apple ID link, date of birth, username, time zone, agreements, settings, and any suspension or username-reset record): until you delete your account.
Steps and sync times: until you delete your account.
Your photo: until you change or remove it, or delete your account. The old file is deleted within minutes, though a cached copy can still load for up to an hour.
Matches, ELO, and rating history: until you delete your account. Your former rivals keep their own results, without your name or steps.
Friendships: until either of you unfriends, blocks, or deletes their account.
Friend requests: until they’re accepted, or until a pending one is withdrawn. Declined and hidden requests stay, even after the sender withdraws them, until either account is deleted.
Challenges and how they ended: until you or the other player deletes their account.
The log for limits: each entry at least 2 days; after that it’s deleted at your next lookup, request, challenge, or message, or with your account.
Chat messages: while you’re friends and for 30 days after the friendship ends (an unfriend, a block, or a friend’s suspension counts as an ending), then deleted, unless a report is holding the chat (below). Deleting your account deletes every chat you were in, both sides, at once. Messages the safety check stops aren’t kept.
Reported chats: a report’s copy of the chat (its last 50 messages from both people, the reporter’s own included, plus any message picked out) is kept until 30 days after the report is handled, or a year when a minor’s safety is involved, even after either account is deleted. The reported chat itself is also kept whole, every message from both people, for as long as its report is open, and for a year after the report is handled when a minor’s safety is involved (which also holds every other reported chat of the reported player). Deleting either account still deletes the chat itself at once; the report’s copy stays.
The record of a stopped message (who and when, never the text): a year, or until that account is deleted.
Reports: report records are kept, including after either account is deleted, so we can recognize repeated abuse; there’s no set deletion date for them today. A private copy of a reported photo is deleted 30 days after the report is handled; when it may show child sexual abuse, it’s kept for at least a year, and longer if NCMEC or law enforcement asks.
Blocks: until either account is deleted.
Push tokens: until you sign out, delete your account, or the phone stops taking notifications. Our record of each notification is deleted within a few days.
Crash reports: deleted by Sentry automatically, within 90 days.
Emails you send us, and moderation emails: kept in our inbox for as long as we need them to help you, handle reports, and keep a record of what we did.
Backups: our database is backed up daily, and backups are kept for 7 days, so deleted information can stay in a backup for up to a week before it’s gone for good.

Deleting your account

Go to Profile, tap the gear at the top right to open Settings, then tap Delete account. Apple may ask you to confirm with your Apple ID. You can also email support@caspyr.app and ask us to delete it. Signing out or deleting the app doesn’t delete your account.

What’s deleted right away: your sign-in account (email and Apple ID link), your profile (username, date of birth, photo, time zone, agreements, and settings), every step and sync time caspyr has, your side of every match, your ELO and rating history, your friendships, friend requests, and challenges, your blocks and other players’ blocks of you, your push tokens, the log for limits, any record of a stopped message, and every chat you were in, both sides (your friends see “This chat is no longer available.”). Your photo files are deleted too, though a cached copy can load for up to an hour.

What stays, and why:

Reports, and their copies of photos and chats, until they expire as described above, so we can finish handling them and meet our legal duties. A photo held as possible evidence of child sexual abuse is moved to private evidence storage instead of being deleted.
Other players’ own match results, without your name or steps.
Notifications already delivered to other people’s phones.
Emails you sent us, and moderation emails about reports.
Copies in outside services and backups until they expire: database backups up to 7 days, OpenAI up to 30 days, crash reports (not linked to you) up to 90 days.

Your choices

Stop sharing new steps: turn off Steps for caspyr in the Health app (see “Apple Health” above).
Change or remove your photo: tap your picture on Profile.
Block someone: from your rival’s profile, a friend’s page, a friend request, or a chat. Blocking a friend also ends the friendship.
Report someone: from the same places. We review every report.
Unfriend or decline: caspyr never tells the other person. (A friend you remove will notice you’re gone from their list and that your chat has ended; a declined request just stays as “Requested” on their side.)
Notifications: turn Message notifications on or off in caspyr’s Settings (you can also turn the 9pm reminders back on there), or turn off any of caspyr’s notifications, including the reminders, in your iPhone’s Settings.
Delete your account: in Settings, at any time (see above).
Ask us: email support@caspyr.app to get a copy of your information, to have something corrected, to have it deleted, or with any question. We’ll need to confirm the request comes from you, and we answer within 45 days. We never ask for your Apple password.

For health data, including your rights under Washington’s, Nevada’s, and Connecticut’s laws and how to appeal a decision, see our Consumer Health Data Privacy Policy.

18 and older only

caspyr is only for people 18 and older. It checks your date of birth when you sign up, and where a state law requires it, it also asks Apple for your age range. caspyr isn’t meant for children, and we don’t knowingly collect information from anyone under 18. If you believe someone under 18 is using caspyr, email support@caspyr.app and we’ll act on it, which can include closing the account.

United States only

caspyr is offered only in the United States, and its servers are in the United States.

How we protect your information

caspyr’s data travels over encrypted connections and is encrypted at rest by our hosting provider. Players can reach other players’ information only through caspyr’s own server functions, which enforce the rules in this policy. Only caspyr’s owner has administrator access to caspyr’s servers. No system is perfectly secure, but if a breach ever affects your information, we’ll tell you and the authorities as the law requires.

Changes to this policy

When we change this policy, we’ll post the new version here and update the date at the top. For important changes, we’ll tell you in the app before they apply. If we ever want to show your steps, or information worked out from them, to more people than this policy describes, we’ll ask for your agreement again first.

Contact

Questions about this policy or your information: support@caspyr.app.