Loser Buys privacy policy

Last updated September 23, 2026

Loser Buys is a step challenge app for friends, run by Aman (amankumar.ai). This page says what the app stores, why, who can see it, and how to delete it.

What we store and why

• Your display name and emoji, so friends and group members know who you are.
• A profile photo, only if you add one. We re-encode it and strip its metadata before storing it.
• If you sign in with Apple or Google: the account identifier they give us and, when they share it, your email address. This lets you get your account back on a new phone. You can use the app with just a name instead.
• Your step total for each day, and how many of those steps were typed in by hand, read from Apple Health or Health Connect. This is how the challenge is scored.
• Your time zone and language, so days, deadlines and messages match where you are, plus your step goals and notification choices.
• A push notification token from your phone, so we can send results, reminders and alerts. It is removed when your phone says it is no longer valid.
• A one-way, salted hash of your IP address when you open an invite link or create an account without signing in. It matches an invite to your new install and limits abuse. We do not store the IP address itself.
• The groups you are in, the results of finished challenges, sick days, voided days, friendships and what each group owes.

Who can see your data

Your friends see your steps for today, this week, this month and the last 14 days. People in a group with you see your steps for that group's challenges. Your profile is visible only to friends and group members. Nobody else can look you up.

Health data

Step data is used only to run challenges and show your progress. It is never used for advertising, never sold, and never shared with anyone other than your friends and the groups you join. The app has no ads.

Services we use

RevenueCat processes Pro purchases and receives your Loser Buys account identifier. Expo's push service delivers notifications and receives your push token and the message text. Apple and Google handle sign-in and payments under their own policies. Our server runs on a cloud host that stores the database.

How long we keep it

We keep your data until you delete your account. Invite matching records are deleted after 24 hours, and the IP hashes used to limit new accounts after one hour. Server error logs may briefly contain account identifiers.

Deleting your account

You can delete your account in the app under Settings. This removes your profile, photo, sign-in links, steps, memberships, sick days, friendships, push token and the debts you owe. Groups you own pass to another member, or are archived if nobody is left. In results of challenges that already finished, your entry is replaced by "Deleted user" with no photo, and the numbers stay so the group's history still adds up.

Contact

Questions or requests: [email protected]