Privacy Policy
Effective November 12, 2026. What Jolt Club collects, who can see it, and how to delete it.
Jolt Club (“the App”) is made by VirtualBeans LLC (“we”, “us”). This policy covers the Jolt Club apps for iPhone and Android and the Jolt Club website at joltclub.app. Questions: [email protected].
In short: we use your data only to run your challenges. We never sell it, never use it for advertising, and never share your health data with anyone outside the challenges you join.
1. What we collect
Account
- Email address and password. The password is stored only as a secure hash by our authentication provider.
- First name, unit preference (miles or kilometres) and the app you signed up in.
Jolt Club uses the same account system as other VirtualBeans apps. If you already have an account with one of them, you sign in to Jolt Club with it, and your name carries over.
Health and activity data (only if you allow it)
With your permission, the App reads the following from Apple Health (iPhone) or Health Connect (Android), for the last 8 days at each sync:
- Steps, walking/running and cycling distance, exercise minutes and active calories burned, stored as daily totals.
- Workouts: type (for example walk, run, ride, gym), start time, duration, distance, and the name of the device or app that recorded it.
The App never writes to Apple Health or Health Connect, and reads nothing else (no heart rate, sleep, weight or medical records). You can turn access off at any time in the Health app or in Health Connect settings.
Things you add
- Activities you log by hand: type, date, duration, distance, steps or calories, and an optional note.
- Photos you choose to add to an activity (optional, never required). Taken with the camera or picked from your library, resized, and stored privately.
- Challenges you create or join, team choice, chat messages, emoji reactions and cheers.
From your activity we also work out your streak, badges and weekly totals. Jolt Club does not ask for your contacts or location, and only accesses your camera or photo library when you tap to add a photo.
Device and usage data
- A push notification token, if you allow notifications.
- App usage events (for example “challenge created”), device model, OS and app version, linked to a random account ID, not your email.
- Crash reports and error logs.
- Subscription status (trial, active, expired). Payment details stay with Apple or Google; we never see your card.
2. How we use it
- To score challenges, show leaderboards and the activity feed, and run chat.
- To send notifications you can switch off: a friend joined, chat messages and reactions, a halfway standings check-in, final results and a Sunday weekly recap.
- To show your streak, badges and profile to the people in your challenges, and to post streak milestones and results in a challenge's chat.
- To send account emails such as sign-up confirmation and password resets.
- To check whether you have Jolt Club Pro.
- To fix crashes and understand which features are used, so we can improve the App.
Health data from Apple Health and Health Connect is used only to score your challenges and show your activity to you and the members of your challenges. It is not used for advertising or marketing, not sold, not used to build profiles, and not used to train AI models.
3. Who can see what
| Who | What they see |
|---|---|
| Members of a challenge you join | Your first name, your score and rank, the activities that counted during that challenge (type, date, time, duration, distance, source device and any note), and your messages, reactions and cheers in it. They can also open your profile: your first name, streak, badges, wins, last 7 days' totals and recent activities, including any photos you added. |
| Anyone with a challenge's invite link | The challenge name, type and dates, how many people joined, and up to 8 members' first names. No scores or activity. |
| Everyone else | Nothing. There are no public profiles or public challenges. |
Challenges are private and invite-only. The host can remove members, and you can leave a challenge at any time.
4. Service providers
We use these providers only to run the App. Each processes data on our behalf and may not use it for its own purposes.
| Provider | Purpose | Data |
|---|---|---|
| Supabase | Database, file storage, sign-in, server functions | Account, activity, photos you add, challenges, chat |
| Expo (push service) | Delivering notifications | Push token and notification text |
| RevenueCat | Managing the Pro subscription | Random account ID, purchase status |
| Apple App Store, Google Play | Downloads and payments | Purchase records (handled by them) |
| PostHog | Product analytics | Usage events, device and app version, random account ID. No health data, no email. |
| Sentry | Crash reporting | Crash logs, device and app version, random account ID. No health data. |
| Email delivery provider | Account emails | Email address |
We may also disclose data if the law requires it, or to a successor if VirtualBeans LLC or the App is sold, under the same protections as this policy.
5. How long we keep it, and deleting it
We keep your data while your account exists. You can delete your account in the App: Settings → Delete account. That permanently deletes your profile, activity, health data, challenge memberships, messages and reactions straight away. Copies in encrypted backups are gone within 30 days.
Because the account system is shared, deleting your account also removes any data you have in other VirtualBeans apps. Cancel any active subscription in the App Store or Google Play first; deleting the account does not cancel billing.
More detail, and how to ask by email: delete your Jolt Club account.
6. Your rights
You can ask for a copy of your data, ask us to correct or delete it, or object to how we use it, by emailing [email protected]. We reply within 30 days. You can change your name in the App and revoke health access in the Health app or Health Connect at any time.
California (CCPA/CPRA): you have the right to know, delete and correct your personal information, and not to be treated differently for using these rights. We do not sell or share personal information for cross-context behavioural advertising.
EEA and UK (GDPR): we process data to provide the service you asked for (contract), with your consent for health data and notifications (which you can withdraw), and for our legitimate interest in keeping the App secure and working. Your data is stored in the United States. You may complain to your local data protection authority.
7. Security
Data is encrypted in transit (HTTPS) and at rest. Database rules let each person read only their own data and the challenges they belong to. No system is perfectly secure, but we work to protect your data and will tell you about any breach that affects you as the law requires.
8. Children
Jolt Club is not meant for children under 13, and we do not knowingly collect data from them. If you believe a child under 13 has an account, email us and we will delete it.
9. Changes
If we change this policy, we will update the date at the top. For important changes we will tell you in the App or by email before they take effect.
VirtualBeans LLC, Marietta, GA 30066, United States · [email protected]