Privacy Policy

Last updated: October 22, 2026 · XP Tracker Inc.

XPTracker is a real-life RPG game. This policy explains what data we collect, why we collect it, who we share it with, how long we keep it, and what rights you have. We keep it plain. If something isn't clear, email us at support@xptrackerapp.com.

    The short version. We collect your email and a display name to run your account, your gameplay data to run the game, and usage and crash data to fix bugs and improve the app. We share install events and, for each verified purchase, the purchase value with a pseudonymous account ID with AppsFlyer and Meta to measure our own ads. If you allow notifications, we keep a push token for your phone. We do not sell your data, we do not show ads inside the app, and we never see your card details. You can delete your account and its data yourself in Settings.
  

1. Who We Are

XPTracker is operated by XP Tracker Inc., a corporation incorporated in Ontario, Canada. References to "we," "us," or "our" mean XP Tracker Inc. We are the data controller for the personal data described here. The app is available on iOS (App Store), Android (Google Play), and web (xptrackerapp.com). By using XPTracker you agree to this policy. Privacy questions: support@xptrackerapp.com.

2. Age Requirement

XPTracker is intended for users who are 13 years of age or older. We do not knowingly collect personal data from children under 13. If you live somewhere that sets a higher age for consenting to data processing on your own (for example, 16 in some EU countries), a parent or guardian must consent for you. The same applies if you are under the age of majority where you live and local law requires a parent's consent (for example, under 18 in India and South Africa, or under 20 in Thailand): by using the app you confirm that a parent or guardian has agreed. If you believe a child under 13 has created an account, contact us immediately at support@xptrackerapp.com and we will delete the account and all associated data.

3. Data We Collect

Account data (when you sign in):

Email address and the name your sign-in provider gives us (Google Sign-In or Apple Sign-In; with Apple you can choose to hide your real email)
Display name (chosen by you)
Date account was created
Which sign-in provider you used

Guest profiles (no longer offered - this covers profiles created in earlier versions of the app):

A random device-generated ID, your chosen display name, class, level and XP. Guest progress can appear on leaderboards under your display name. Signing in links the guest profile to your account. You can delete a guest profile in Settings at any time. New players create an account before playing, so no new guest profiles are created.

Game data (automatically, as you play):

Character class, level, XP, day count, prestige
Quests completed (count and type)
Boss defeats, items collected, panels unlocked, pets and equipment
Guild membership and role
Timestamps of saves and logins, and a history of recent saves so we can restore lost progress
Notes and reflections you write inside the app (journal entries, quest reflections, weekly and monthly commitments, custom quest text). This content is stored privately under your account and synced to your devices. It is never shown on leaderboards, the Hall of Heroes, or to other users, and we do not read it except to investigate a support request, abuse report, or legal notice.

Public profile data (visible to other users):

Display name, character class, level, XP, prestige, leaderboard rank
Guild name and rank, and your guild's guild pet
The pets you choose to show on your profile (your pet showcase) and the pet you have equipped
Hall of Heroes entry, including the quote you submit (only if you choose to immortalize - see Section 7)

Payment data (when you start a trial or buy a plan):

Which plan you have (Full Journey Pass, Monthly subscription, Guild Master Lifetime, an earlier pass, Annual or lifetime purchase, or a free grant), whether you are in a free trial or on a first-month offer, which paywall your account was shown (new accounts are split between two versions of it so we can compare them), purchase and renewal dates, and the store transaction ID Apple or Google gives us so we can verify the purchase
We do NOT store credit card numbers. Payment processing is handled by Apple (App Store) and Google (Google Play) - see Section 5.

Things you send us:

Support emails and in-app support tickets, including anything you write in them
Reports you file about other players, and reports other players file about you
Survey answers, if you take part in a survey (for example the "Founding 500" survey)
Guild Master Partner applications, if you apply
Guild pet requests, if you bought Guild Master Lifetime: the description you write of the pet you want, with your guild, language and platform. The description is also recorded in our usage events so a request is never lost

Usage analytics and diagnostics (automatically, on all platforms):

Screens visited, buttons tapped, features used, time in app, and funnel events (e.g., sign-up started, paywall viewed, trial started, purchase completed). We store these events in our own database linked to your account ID, and send a copy to PostHog linked only to a random device ID (Section 5)
Error and crash reports (error messages, stack traces, app version, your account ID so we can see how many players a bug affects - never your email or name)
Install and marketing-measurement events (app installed, app opened, key milestones, purchase) - see AppsFlyer and Meta in Section 5

Device data (automatically):

Device type and model, OS version, app version, language, time zone
Device identifiers used for analytics and marketing measurement: a random ID our analytics tool generates, Apple's vendor identifier (IDFV) on iOS, and the Google Advertising ID on Android. We do not ask for App Tracking Transparency permission on iOS, so we never receive the IDFA.
Approximate country, worked out from your IP address when your device talks to our servers (country only - never your city, street, or GPS location). We use it to understand where players come from and for regional pricing and content
IP address (used for abuse prevention and rate limiting - retained for up to 30 days, then deleted; also seen by the service providers in Section 5 as part of normal internet traffic)

What we do not collect: your precise location (we only keep your approximate country, above), contacts, photos, microphone, or health data (the optional step count below is read on your device and never sent to us).

Push notifications: if you allow notifications, the app stores a push token for your device (a random address Apple or Google gives the app so it can receive notifications), together with your account ID, the device's language, time zone, platform and app version. We use it to send notifications such as a reminder before a free trial ends and quest notices. Notifications are delivered through Apple Push Notification service (iOS) and Firebase Cloud Messaging (Google, Android). You can turn notifications off in your phone's settings at any time; tokens that stop working are deleted, and all of yours are deleted with your account. Reminders you set yourself are scheduled on your device.

App Lock (optional feature): if you turn on App Lock, the app locks other apps until you finish your quests for the day. On Android it uses the Usage Access permission to see which app is currently open, so it can lock the apps you picked. On iPhone it uses Apple's Screen Time framework to lock every app except XP Tracker until you finish the number of quests you set; Apple does not tell us which apps you use. All of this happens entirely on your device. The apps you pick, your app usage and your Screen Time data are never sent to us or stored on our servers.

Step count (optional, Walk quest): if you add the Walk quest and choose Connect, the app reads today's step count from Apple Health (iOS) or Health Connect (Android) while the app is open. Steps are read on the device only to show your progress and complete your Walk quest; they are never stored on our servers, never included in analytics, never used for advertising or marketing, and never shared or sold. The app asks for step count only, reads no other health data, and writes nothing to Apple Health or Health Connect. You can turn this off at any time in the app (Settings, Track steps) or in your phone's Health or Health Connect settings. Use of information received from Health Connect adheres to the Health Connect Permissions policy, including the Limited Use requirements.

Website visitors (xptrackerapp.com): our website records page views, how far you scroll, which buttons you click, the page you came from, and ad-campaign tags in the link (UTM tags), tied to a random ID that only lasts for your visit (stored in your browser's session storage and cleared when you close the tab). If you pick a language on the website, your browser remembers that choice (local storage, never sent to us). The website does not set tracking cookies. It is hosted by Netlify (Section 5).

4. How We Use Your Data

To run the game (save progress, sync across devices, display leaderboards and the Hall of Heroes)
To provide customer support and respond to reports and legal notices
To detect and prevent cheating, fraud, and abuse, and to protect payments, leaderboards, guilds, and admin tools
To improve the app (usage analytics, crash reports, surveys)
To measure our own advertising - whether an install or purchase came from an ad we ran (AppsFlyer and Meta, Section 5). We do not show ads inside the app and we do not use your data to target you with ads elsewhere.
To send email, in three kinds:
- Transactional emails - account, security, purchase, and subscription notices (for example, a trial reminder). These are part of running your account and are sent regardless of your email preferences.
- Account and product emails - occasional reminders about your own account and progress (for example, a note that your first quest is waiting), news about features added to the app you use, in-game items or rewards added to your account, and feedback requests. We send these because you have an XPTracker account.
- Promotional emails - offers, discounts, or prices. We send these only if you have agreed to receive them (for example, by ticking the email option in the app), or where the law allows us to contact existing customers about our own similar products.
Every email other than a transactional one identifies us, includes our mailing address, and includes a one-click unsubscribe link. You can opt out at any time by using that link, replying to the email, or contacting support@xptrackerapp.com; we act on it right away and in any case within 10 business days.
To fulfill purchases, verify receipts, and manage subscriptions and free grants
To operate the Partner Program (see Section 6)
To comply with the law and enforce our Terms

We do not sell your personal data. We do not use your data to train AI models, and we do not send your data to any AI service.

AI-generated content: XPTracker contains artwork, illustrations, and some written content created with or assisted by generative AI tools, including the comic story panels, the quest and boss imagery, and certain in-app text. None of it is generated from your data.

5. Third-Party Services

We share data with the following services only as necessary to operate, improve, and market the app. Each one is bound by its own privacy policy and, where applicable, a data-processing agreement with us:

Supabase - database, authentication, file storage, and the server functions that run the game. All account and game data lives here, on servers operated by Supabase Inc. in the United States. Supabase Privacy Policy
Apple (App Store) - processes iOS in-app purchases and Apple Sign-In. Apple receives purchase receipt data. Apple Privacy Policy
Google (Google Play) - processes Android in-app purchases and Google Sign-In. Google Privacy Policy
Sentry - crash and error reporting. Receives diagnostic data (error messages, stack traces, device and app version) plus your account ID, so we can fix bugs and see how many players each bug affects. We scrub emails and access tokens before anything is sent. Operated by Functional Software, Inc. (US). Sentry Privacy Policy
PostHog - product analytics and error tracking, so we can understand how the app is used and improve it. Receives usage events tied to a random device identifier, not your name or email. PostHog also records a replay of the screens during a new player's first sessions in the iOS and Android apps - from first launch until shortly after their first completed quest - so we can see where new players get confused. All typed input is masked, recording never continues past that point, and replays are deleted after 30 days. The web version of the app may also be recorded on the same terms. Operated by PostHog Inc. (US). PostHog Privacy Policy
AppsFlyer - mobile attribution. Receives device identifiers (IDFV on iOS, Google Advertising ID on Android), IP address, device info, and app-install and milestone events (for example, install, character created, purchase) so we can tell which ad campaign led to an install. Operated by AppsFlyer Ltd. (Israel/US). AppsFlyer Privacy Policy
Meta Platforms (Facebook/Instagram) - app install, app open, and purchase events, so we can measure and run advertising campaigns on Meta's platforms. We do not request App Tracking Transparency permission on iOS, so Meta does not receive your device's advertising identifier (IDFA) - only install and event signals. For each verified purchase, our server also sends Meta the purchase value, currency and product, together with a pseudonymous account ID (a random ID we create for your account, not your name or email) and basic device details (device model, screen size, time zone and language), so we can measure which of our ads lead to purchases. On Android, advertising-ID collection by the Meta SDK is turned off. Operated by Meta Platforms, Inc. (US). Meta Privacy Policy
Resend - sends our emails (account, purchase and subscription notices, support replies, and the occasional reminder or update described in Section 4). Receives your email address, your display name, and the content of the email. Operated by Resend, Inc. (US). Resend Privacy Policy
Netlify - hosts our website, xptrackerapp.com. Sees the normal information any website host sees (IP address, browser type, pages requested). Operated by Netlify, Inc. (US). Netlify Privacy Policy

We do not share your data with advertisers, ad networks, or data brokers for their own use, and we do not share it with any third party not listed above, except when the law requires it, to protect our rights or someone's safety, or as part of a sale or merger of our business (in which case we will tell you).

Partners see aggregate counts and, for each purchase made by a player who joined with their code, a customer number and the first letter of that player's display name (Section 6). Other players see only your public profile data (Section 3).

6. Partner Program

We work with a small number of approved partners (creators and community leaders) who introduce new players to XPTracker. Each partner has a personal code or link (for example xptrackerapp.com/join/CODE). If you join through a partner's code or link, we associate your account with that partner so we can pay them a share of what you spend in the app. This association is:

Set by the first partner code you use - it is permanent and a later code cannot replace it
Used only to calculate what we owe the partner - it is never shown to other users, and it never changes your prices, your gameplay, or your data
Not a "sale" of your personal data under CCPA - partners never receive your name, email or contact details

Partners see in their dashboard how many players joined with their code, how many have an active paid plan, and their earnings. For each purchase or refund by a player who joined with their code, they see the date, the plan, the amount, a customer number and the first letter of that player's display name. They never see your full display name, your email, or your contact details. Joining through a partner's code may also unlock a cosmetic reward, such as that partner's exclusive pet.

If you are a partner, we collect the details we need to pay you and meet our tax obligations: your name, email, and payout details (such as your PayPal address or Interac e-Transfer details). We keep these while you are a partner and then for the period tax law requires.

7. Hall of Heroes - Permanent Data

    Special notice: If you choose to "Immortalize" your character and enter the Hall of Heroes, your display name, character class and artwork, the quote you submit, level, XP, day count, prestige, and achievement data become a permanent public record. This record is retained even if you later delete your account; deletion only removes the link between the entry and your account. Before immortalizing, you will be asked to give explicit consent to this permanent retention and to our use of this data as described in our Terms of Service (including for physical merchandise). Do not immortalize if you do not consent.
  

8. Data Retention

Push tokens: Kept while they work; deleted when Apple or Google report them invalid, and with your account.
Account and game data: Kept until you delete your account. In-app deletion removes it right away; email requests are completed within 30 days. Copies in our database backups expire within 30 days after that.
Guest profiles: Kept until you delete the guest profile in Settings. If you linked it to an account and later delete that account, the link is removed; email us if you also want the guest profile itself removed and you no longer have the device.
Guild pet requests: Deleted with your account.
Notes and journal entries: Deleted with your account.
Support emails, tickets, and player reports: Deleted with your account, or up to 2 years after the matter is closed if they were never linked to an account.
Survey answers: Kept in aggregate; the link to your account is removed when you delete your account.
Usage analytics (PostHog): Up to 12 months, then automatically purged. Session replays: 30 days.
Usage events in our own database: 120 days, then automatically deleted.
Crash and error logs (Sentry): Up to 90 days, then automatically purged.
Marketing-measurement events (AppsFlyer, Meta): Kept by those providers under their own retention rules; we keep only campaign-level reports.
IP addresses in security logs: Up to 30 days.
Payment and entitlement records: Retained for 7 years (tax and legal compliance), along with the minimum security, fraud-prevention, and audit records we need to defend against cheating, chargebacks, and legal claims.
Hall of Heroes entries: Permanent - see Section 7.

9. Your Rights

Depending on where you live, you may have the following rights regarding your personal data. Everyone can use them, wherever they live:

Access: Request a copy of the data we hold about you.
Correction: Request that we correct inaccurate data. You can change your display name in the app.
Deletion: Delete your account and data yourself in the app (Settings → Delete Account), follow xptrackerapp.com/delete-account, or email us. Note: Hall of Heroes entries cannot be deleted after immortalization (you consented at that moment), and we keep the records listed in Section 8 that the law requires.
Portability: Request your game data in a machine-readable format.
Restriction and objection: Ask us to limit how we use your data, or object to processing based on our legitimate interests (including analytics and marketing measurement).
Withdraw consent and unsubscribe: Where we rely on your consent (promotional emails, Hall of Heroes), you can withdraw it at any time, and you can unsubscribe from account and product emails at any time; neither undoes what happened before.
Opt out of analytics and marketing measurement: Email support@xptrackerapp.com and we will exclude your account and device from analytics and attribution. Opting out does not affect gameplay. On Android you can also reset or delete your Advertising ID in your device settings.
Complain: You can complain to your local data-protection authority. We would rather hear from you first.

EU/EEA and UK users (GDPR and UK GDPR): Our lawful bases are (a) performance of our contract with you for running the game, your account, and purchases; (b) our legitimate interests for analytics, crash reporting, abuse prevention, measuring our own advertising, and account and product emails (Section 4) - you can object or unsubscribe at any time; (c) your consent for promotional emails and for the Hall of Heroes' permanent retention; and (d) legal obligation for tax and payment records. Your data is transferred to the United States (Supabase, Sentry, PostHog, Meta, Resend, Netlify) and to Israel (AppsFlyer). We rely on the European Commission's Standard Contractual Clauses, the EU-US Data Privacy Framework where the provider is certified, and the EU adequacy decision for Israel. Email us for details of the safeguards used.

Canadian users (PIPEDA and Canada's Anti-Spam Legislation): We handle your personal information under PIPEDA. We send account and product emails based on our existing relationship with you through your XPTracker account and these terms, and promotional emails only with your consent. Every such email identifies XP Tracker Inc., includes our mailing address, and has a working unsubscribe link that we honour within 10 business days.

California users (CCPA/CPRA): In the past 12 months we have collected the categories of personal information described in Section 3 (identifiers, account and commercial information, internet activity, and the content you write), for the purposes in Section 4, and disclosed them to the service providers in Section 5. We do not sell your personal information. Sending install and purchase events to AppsFlyer and Meta to measure our own advertising may count as "sharing" under California law; you can opt out by emailing support@xptrackerapp.com with the subject "Do Not Sell or Share." We do not knowingly sell or share the personal information of anyone under 16. You have the right to know, delete, correct, and opt out, and we will not discriminate against you for using these rights. An authorized agent can make a request for you if they show us they have your permission.

Canadian users (PIPEDA): XP Tracker Inc. is based in Ontario, Canada. Your personal information is governed by the Personal Information Protection and Electronic Documents Act (PIPEDA) and the federal laws of Canada. We collect only the information necessary to provide the service, with your knowledge and consent. You have the right to access the personal information we hold about you and to request corrections. To make a request, email support@xptrackerapp.com. If you have an unresolved privacy concern, you may contact the Office of the Privacy Commissioner of Canada at priv.gc.ca.

Quebec users (Law 25): The person in charge of protecting personal information at XP Tracker Inc. is our Privacy Officer, reachable at support@xptrackerapp.com. You can ask what information we hold about you, have it corrected, withdraw consent, or ask us to stop disseminating it.

Brazil users (LGPD): We process your data on the legal bases of performing our contract with you, our legitimate interests (analytics, security, measuring our own ads), your consent (marketing emails, Hall of Heroes), and legal obligations. You have the rights in Article 18 of the LGPD, including confirmation, access, correction, anonymization, portability, deletion, information about sharing, and withdrawal of consent. Our data protection contact (encarregado) is our Privacy Officer at support@xptrackerapp.com. You can also complain to the ANPD.

India users (Digital Personal Data Protection Act, 2023): We process your personal data to provide the app, with the consent you give when you sign in and use it, and you can withdraw consent at any time by deleting your account or emailing us. You have the right to access, correct, and erase your data, to nominate someone to act for you, and to have grievances addressed. Our grievance contact is our Privacy Officer at support@xptrackerapp.com; we respond within 30 days. If you are under 18, a parent or guardian must agree before you use the app (Section 2).

South Africa users (POPIA): XP Tracker Inc. is the responsible party for your personal information. Our Information Officer is our Privacy Officer at support@xptrackerapp.com. You may access, correct, or object to the processing of your information, and complain to the Information Regulator of South Africa.

Philippines, Thailand, and other Asia-Pacific users: You have the rights your local law gives you - including under the Philippine Data Privacy Act of 2012, Thailand's Personal Data Protection Act, Malaysia's PDPA, Australia's Privacy Act, New Zealand's Privacy Act 2020, and South Korea's PIPA - such as the right to be informed, to access, correct, and delete your data, to object, and to complain to your local data-protection authority.

Latin America, the Middle East, Africa, the rest of Europe, and everywhere else: Wherever you live - including Mexico, Chile, Peru, Ecuador, the Dominican Republic, Morocco, Algeria, Iraq, Pakistan, Bangladesh, Turkey, Ukraine, and Norway - you can use every right in this section, plus any additional rights your local data-protection law gives you. If your law requires a specific notice or contact person, our Privacy Officer at support@xptrackerapp.com fills that role.

Other US states: If you live in a US state with its own privacy law (for example Virginia, Colorado, Connecticut, Utah, Texas, or Oregon), you have the rights that law provides, including access, correction, deletion, and opting out of targeted advertising or "sharing". Email us to use them; if we decline a request you can appeal by replying to our answer.

To exercise any of these rights, email support@xptrackerapp.com from the email address on your account. We will verify it is you and respond within 30 days.

10. Security and Breach Notification

All data travels over HTTPS. We use Supabase Row Level Security (RLS) to ensure that users can only access their own data. Payment processing is handled entirely by Apple and Google - we never transmit or store payment card data. Financial data (partner earnings, payout records) is accessible only via server-side Edge Functions using restricted keys - no direct client access.

No security system is perfect. If you discover a security vulnerability, please report it responsibly to support@xptrackerapp.com.

In the event of a breach of security safeguards involving your personal information that creates a real risk of significant harm, we will notify you and the Office of the Privacy Commissioner of Canada as required by PIPEDA's breach of security safeguards regulations, and any other regulator the law requires (for example, within 72 hours under the GDPR). We maintain a record of all security breaches, whether or not notification is required.

11. Changes to This Policy

We may update this policy as the app evolves. If we make material changes to how we collect, use, or share your personal information, we will notify you via in-app notice or email at least 14 days before the change takes effect, and we will seek your consent where required by applicable law. Non-material changes (such as clarifications or corrections) take effect immediately. The "Last updated" date at the top of this page always reflects the current version.

12. Contact

Questions about this privacy policy:
Email: support@xptrackerapp.com
Website: xptrackerapp.com
XP Tracker Inc., Ontario, Canada
Privacy Officer: support@xptrackerapp.com (subject line "Privacy")