Last updated: December 15, 2025

RhinoPals ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

1. Information We Collect

Information You Provide

• Account Information: Name, email address, and password when you register
• Profile Information: Optional bio and display name for your public profile
• Challenge Data: Challenge names, descriptions, goals, and time logs you create
• Session Notes: Any notes you add to your tracked sessions
• Communications: Messages you send through the Service (comments, feedback)

Information from Third Parties

• Google Authentication: If you sign up with Google, we receive your name and email address from Google. We do not receive your Google password.

Automatically Collected Information

• Usage Data: Pages visited, features used, session timestamps
• Device Information: Browser type, operating system, device type
• Cookies: We use cookies to maintain your session and remember your preferences

2. How We Use Your Information

We use your information to:

• Provide, maintain, and improve the Service
• Create and manage your account
• Track your challenges, sessions, and progress
• Connect you with accountability partners
• Send you notifications about your activity and your pals' activity
• Award badges and achievements
• Respond to your inquiries and provide support
• Send important updates about the Service (not marketing unless you opt in)
• Detect and prevent fraud or abuse
• Comply with legal obligations

3. Information Sharing

With Other Users

Depending on your settings, other users may see:

• Your name and profile information
• Challenges you've shared with them
• Your time logs and progress on shared challenges
• Your public profile (if enabled) including badges and stats

We Do NOT:

• Sell your personal information to third parties
• Share your email address with other users (unless you share it directly)
• Use your data for advertising purposes
• Share your information with third parties for their marketing

Service Providers

We may share information with trusted service providers who help us operate the Service (such as email delivery services). These providers are contractually obligated to protect your information and use it only for the purposes we specify.

Legal Requirements

We may disclose your information if required by law, court order, or government request, or to protect our rights, property, or safety, or the rights, property, or safety of others.

4. Data Security

We implement appropriate technical and organizational measures to protect your information, including:

• Encryption of passwords using industry-standard hashing
• HTTPS encryption for data in transit
• Regular security assessments
• Access controls limiting who can view your data

However, no method of transmission over the Internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

5. Your Rights and Choices

Access and Update

You can access and update your account information through your Account Settings.

Delete Your Account

You can delete your account at any time through Account Settings. This will permanently delete your account and associated data. Some information may be retained for legal or legitimate business purposes.

Public Profile

You control whether to enable a public profile and what information appears on it. You can disable your public profile at any time.

Email Communications

You can manage your notification preferences in Account Settings. Note that we may still send you important service-related communications.

Cookies

Most browsers allow you to control cookies through their settings. Disabling cookies may affect your ability to use certain features of the Service.

6. Data Retention

We retain your information for as long as your account is active or as needed to provide you with the Service. If you delete your account, we will delete your personal information within 30 days, except for information we need to retain for legal or legitimate business purposes.

7. Children's Privacy

The Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

8. International Users

The Service is operated in the United States. If you access the Service from outside the United States, your information may be transferred to, stored, and processed in the United States. By using the Service, you consent to such transfer.

9. California Privacy Rights

California residents have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, request deletion of your information, and opt out of the sale of personal information (note: we do not sell your information).

10. European Users (GDPR)

If you are in the European Economic Area, you have rights under the General Data Protection Regulation (GDPR), including the right to access, rectify, port, and erase your data. Our legal basis for processing your information is your consent and our legitimate interests in providing the Service.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or through the Service. Your continued use of the Service after changes constitutes acceptance of the updated Policy.

12. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us through the Contact Us page.