Privacy
Policy.

The Girlfriend Challenge (the “App”) is operated by M Hardy Apps (“we,” “us,” or “our”).

Where privacy law assigns responsibility for personal data to an operator, M Hardy Apps is responsible for the processing described in this policy.

Contact for privacy questions:

M Hardy Apps
mzhardyapps@gmail.com

The App is intended for people aged 16 and older and is not directed to children under 16.

The onboarding age gate prevents anyone who selects “Under 16” from continuing. Users aged 16–17 can continue with age-sensitive wording enabled.

During onboarding, the App asks for an age band. If an answer indicates that age-sensitive or appearance-sensitive wording should be used, the App creates a sensitivity setting on the device. This setting changes certain wording from appearance-comparison framing to strength, habit, confidence, and grooming framing.

The sensitivity setting itself remains on the device and is not transmitted. However, the selected age band and first-listed blocker may be sent to RevenueCat as pseudonymous cohort labels, as explained in sections 3.1 and 3.4.

The App does not create accounts and does not connect an age band to a real name, email address, Apple ID, or other direct identity.

If you are a parent or guardian with a concern, contact mzhardyapps@gmail.com.

3.1 Onboarding information

The App collects answers during onboarding to personalize the program. Most information is stored only on the device. A limited selection of category values is also sent pseudonymously to RevenueCat.

RevenueCat receives these limited cohort labels with a randomly generated App User ID. RevenueCat does not receive the first name or nickname entered in the App.

These cohort labels help us understand, in aggregate, which categories of users subscribe. They are not used for advertising or to make decisions affecting access to the App.

Where applicable, our legal bases are providing the App’s requested functionality, performing our agreement with you, and our legitimate interest in understanding and improving subscription performance.

3.2 Progress and program data

The App contains five 30-day programs. Each program may locally store:

• Tasks marked complete and the associated completion day.
• Whether the short version of a task was selected.
• Current day and longest streak.
• Final confidence rating.
• Optional physical baseline and final measurements.
• Which program is currently selected.
• Completed program reports.

This information remains in the App’s private storage on the device. It is not sent to RevenueCat, PostHog, Apple, or our servers.

Switching programs does not erase another program’s locally stored progress.

Progress is separate from the subscription entitlement. If a subscription lapses, locally stored progress remains on the device, although paid features may be unavailable until access is restored.

Deleting the App removes its locally stored progress from the device. Reinstalling the App starts the program again at Day 1. Restore Purchases can restore an eligible subscription entitlement, but it cannot restore deleted progress.

3.3 Progress photos

After subscribing, you may optionally take or select Day 1 and Day 30 progress photos.

Progress photos:

• Are stored in the App’s private on-device storage.
• Are not uploaded to us, RevenueCat, PostHog, or any other analytics service.
• Are not used for facial recognition, facial geometry analysis, or attractiveness scoring.
• Are not used to train an artificial-intelligence or machine-learning model.
• Are not shared with advertisers or data brokers.
• Can be deleted individually from within the App.
• Are removed from the installed App when all App data is erased or the App is deleted.

The App only requests camera or photo-library access when you choose to use a photo feature. You may deny or later revoke this permission in iOS Settings.

The App does not intentionally extract or transmit location metadata or other camera metadata from a selected photo.

The legal basis for processing an optional photo is your consent and your request to use the photo feature.

3.4 Subscription and purchase information

Subscriptions are purchased through the Apple App Store and managed for the App using RevenueCat.

Apple processes the payment transaction. We do not receive or store:

• Your payment-card number.
• Your complete billing address.
• Your Apple Account password.
• Your Apple ID email address.

RevenueCat may process:

• A randomly generated App User ID.
• Subscription product identifier.
• Purchase and renewal status.
• Trial status.
• Expiration date.
• Auto-renewal status.
• Cancellation status.
• Billing-issue or grace-period status.
• Promotional-offer eligibility and redemption information.
• The cohort labels described in section 3.1.

RevenueCat uses this information to validate purchases, restore eligible subscriptions, determine whether premium access is active, and support Apple promotional subscription offers.

Restore Purchases restores the subscription entitlement associated with the applicable Apple account. It does not restore locally deleted answers, progress, measurements, or photos.

Our legal bases are performing our agreement with you, administering purchases, complying with financial and legal obligations, and our legitimate interest in understanding subscription performance.

3.5 Usage analytics and diagnostics

We use PostHog to record limited pseudonymous product and diagnostic events. These events are associated with a random identifier rather than a name or email address.

Events may include:

• Which onboarding screens were viewed or completed.
• Whether the health and safety notice was acknowledged, with the acknowledgment time.
• Permission outcomes, such as whether notifications were allowed.
• Paywall views and subscription-plan selections.
• Purchase attempts and outcomes.
• Restore Purchases outcomes.
• Subscription-management and retention-offer outcomes.
• Diagnostic events when an on-device save fails.
• App lifecycle events such as installed, updated, opened, active, and backgrounded, together with app version, build, app identifier, and operating-system name.
• A bare count that the App requested the iOS review prompt. The streak that triggered the request is not sent.
• Whether an end-of-program report was reached, shared, or dismissed.

We deliberately do not send PostHog:

• Task completion details.
• Streak information.
• The specific days completed.
• Final confidence ratings.
• Physical measurements.
• Photo contents or photo metadata.
• The number of photos stored.
• The name or nickname entered in the App.

The starting-confidence cohort label described in section 3.1 is sent to RevenueCat, not as a PostHog progress event.

PostHog session replay is disabled. Server-side geographic lookup is disabled in our PostHog configuration. Service providers may still process basic network information, such as an IP address, as technically necessary to receive and secure a request.

We do not use advertising SDKs, do not request App Tracking Transparency permission, and do not share analytics for cross-app advertising.

Where applicable, our legal basis is our legitimate interest in maintaining, securing, and improving the App.

3.6 Notifications

If permission is granted, the App schedules one daily reminder at 7:00 PM. If a free trial begins while reminders are enabled, the App also schedules one notice for the day before the trial renews.

These reminders are scheduled locally on the device. We do not operate a push-notification marketing list, receive a push token for these reminders, or receive their contents.

Notification permission can be changed at any time in iOS Settings.

Settings → Erase All My Data cancels the reminders scheduled by the App.

3.7 No App account

The App has no registration, login, password, or user profile.

We do not ask for an email address to use the App. The randomly generated identifiers used by RevenueCat and PostHog are not an App login.

An eligible subscription can be restored through Apple and RevenueCat. Locally deleted answers, progress, measurements, and photos cannot be restored by us.

3.8 Support correspondence

If you contact us by email, we receive the email address, message contents, and any information you choose to provide.

We use this information only to respond to the request, maintain appropriate support records, and protect the App and its users.

Do not email sensitive photos, health information, payment-card details, or Apple account credentials.

Except for information you voluntarily provide in a support email:

• We do not collect the name or nickname entered in the App.
• We do not upload or remotely store progress photos.
• We do not perform facial recognition or facial-geometry analysis.
• We do not calculate an attractiveness score.
• We do not collect precise location.
• We do not collect contacts.
• We do not scan the camera roll at large.
• We do not access Apple Health or other health-app records.
• We do not access or record microphone audio.
• We do not collect payment-card information.
• We do not sell personal information.
• We do not share personal information for cross-context behavioral advertising.

M Hardy Apps does not operate a cloud database containing user names, progress, measurements, or photos. The limited pseudonymous information processed by Apple, RevenueCat, and PostHog is described in this policy.

We use the following recipients to operate the App:

Apple, RevenueCat, and PostHog handle information under their respective contractual, security, and privacy obligations.

Their privacy information is available at:

• Apple: https://www.apple.com/legal/privacy/
• RevenueCat: https://www.revenuecat.com/privacy/
• PostHog: https://posthog.com/privacy

We may also disclose information when legally required, to protect rights or safety, or in connection with a merger, acquisition, financing, or sale of the business. If ownership changes, information will remain subject to this policy until you are notified otherwise.

Names or nicknames entered in the App, detailed progress, measurements, and photos remain in the App’s private on-device storage.

This on-device information may be included in an iCloud or computer backup if device-backup features are enabled. Those backups are controlled by you and Apple, not by M Hardy Apps.

Subscription information and pseudonymous cohort labels may be processed by RevenueCat. Limited product and diagnostic events may be processed by PostHog. Apple processes App Store transactions.

These providers may process information in the United States or other countries where they or their service providers operate.

Where required, international transfers are protected through recognized legal mechanisms used by the applicable provider, such as Standard Contractual Clauses or an adequacy decision.

• Name or nickname, detailed onboarding information, progress, measurements, and photos: Stored on the device while the App remains installed or until erased through the App. Device backups may retain copies according to the user’s Apple backup settings.
• RevenueCat subscription information: Retained as necessary to validate and administer subscriptions, respond to support requests, prevent fraud, and comply with financial or legal obligations.
• RevenueCat cohort labels: Retained while reasonably necessary for subscription analysis or until an applicable deletion request is completed, subject to records we must retain by law.
• Apple transaction records: Retained by Apple according to Apple’s policies and legal obligations.
• PostHog analytics and diagnostic events: Retained for up to 24 months.
• Support correspondence: Retained for up to 24 months after the support matter is closed, unless a longer period is required for security or legal purposes.

We may retain aggregated or de-identified information that can no longer reasonably be associated with a device or individual.

We use reasonable technical and organizational safeguards appropriate to the information processed.

These safeguards include:

• Keeping detailed progress, measurements, and photos in the App’s private on-device container.
• Using encrypted HTTPS/TLS connections when communicating with RevenueCat and PostHog.
• Not operating a user password database.
• Not uploading progress photos.
• Limiting analytics to an approved list of product and diagnostic events.
• Disabling PostHog session replay and geographic IP enrichment in our configuration.

No storage or transmission system can be guaranteed to be completely secure.

Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or receive a copy of personal information.

On-device information

You can control most locally stored information yourself:

• Use Settings → Erase All My Data to remove the App’s locally stored answers, progress, measurements, and photos.
• Delete individual progress photos within the App.
• Delete the App to remove its installed local data.
• Revoke camera, photo-library, or notification permissions through iOS Settings.

The current version does not include an editor for completed onboarding answers. Settings → Erase All My Data removes those answers. For correction of limited information held by RevenueCat or PostHog, contact us using the address below.

Erasing App data does not cancel a subscription. Subscriptions must be managed through Apple.

Subscription and analytics information

For questions or requests concerning the limited information associated with RevenueCat or PostHog, email mzhardyapps@gmail.com.

We may need limited information to locate a pseudonymous record. We will not ask for an Apple password or payment-card number.

Apple controls Apple Account and App Store transaction information. Requests concerning Apple’s records may need to be submitted directly to Apple.

We generally respond to verifiable privacy requests within 30 days or within the period required by applicable law.

European Economic Area, United Kingdom, and Switzerland

Where applicable, you may have rights to:

• Access personal data.
• Correct inaccurate personal data.
• Request deletion.
• Restrict or object to processing.
• Receive portable data.
• Withdraw consent where processing is based on consent.
• Complain to your local data-protection authority.

Our legal bases for relevant processing are described in section 3.

California

California residents may have rights to know, access, correct, and delete personal information and to opt out of its sale or sharing.

We do not sell personal information and do not share personal information for cross-context behavioral advertising.

Categories that may be processed include:

• Identifiers, consisting of randomly generated App and analytics identifiers.
• Commercial information, consisting of subscription and purchase status.
• Internet or electronic activity, consisting of limited App events.
• Inferences or cohort categories derived from selected onboarding answers.

We do not discriminate against users for exercising applicable privacy rights.

Canada, Australia, Brazil, and other locations

We honor applicable rights under laws such as PIPEDA, Australia’s Privacy Act 1988, Brazil’s LGPD, and comparable privacy laws through the contact process described above.

We may update this policy when App features, service providers, legal requirements, or privacy practices change.

When we make a change, we will update the “Last updated” date at the beginning of the policy. Where required, we will provide additional notice through the App, website, or another appropriate method.

For privacy questions or requests:

M Hardy Apps
Email: mzhardyapps@gmail.com

Email is the support and privacy channel we monitor. We generally respond within 30 days.