Figgy Privacy Policy

Last updated: 8 November 2026

This privacy policy explains which personal data the Figgy app processes, why we do so, who we share data with, how long we keep it and what your rights are. We have tried to explain this as clearly as possible.

1. Who are we?

Figgy is made by Get Figgy (sole proprietorship), registered with the Dutch Chamber of Commerce (KvK) under number 72785284, located at Boerhoorn 54, 9481 HE Vries, the Netherlands ("we" or "Get Figgy").

Get Figgy is the controller for the personal data processed through Figgy.

Privacy questions? Email [email protected].

2. In short

3. What data do we process, why, and on what legal basis?

3.1 Account and signing in

DataPurposeLegal basis
Email address (when signing in with a code by email)Creating an account, signing in, sending the sign-in codePerformance of the contract
The name you choose yourself (display name)Your profile; visible to other users (see section 4)Performance of the contract
Confirmation that you are 16 or older, date you accepted the terms, date of your consent for health data, account creation dateShowing that you agreed and consented; age limitLegal obligation / legitimate interest

3.2 Health, nutrition and progress (special category data)

DataPurposeLegal basis
Weight and weight history, height, age, sex, goal weight, what you eat and drink (calories, protein, water), steps, your daily goals. If you enter them yourself: body measurements (such as waist and hips), how you feel (check-in), whether you are menstruating, your habits, own goals and winsCalculating your daily goal, showing your progress, and a backup in your account so your data is not lost and comes back on a new phoneYour explicit consent (Article 9(2)(a) GDPR). You give it in the app when creating your profile. Without this consent you cannot create an account, so we do not store this data in an account either.
Steps per dayYour own backup and progressYour explicit consent
Data from Apple Health (only if you connect it yourself): steps, weight and sleep. Figgy also writes the weight you enter in Figgy back to Apple Health.Tracking your steps and weight automaticallyYour explicit consent (via Apple's prompt). We never use Apple Health data for advertising and do not share it with others.

Your health data is not visible to other users.

3.3 Location

DataPurposeLegal basis
Your location while you use the app ("While Using" permission; we never ask for "Always"). Only during a walk you start yourself, Figgy also uses your location in the background, for example when your screen is locked. Your phone then shows a blue bar or pill at the top. As soon as you stop the walk or close the walk screen, this stops. Outside a walk, Figgy never uses your location in the background.Your position on the map, routes, the acorn game and the forest; during a walk, recording your walked route and distance accurately. The game (acorns, trees, bonuses) only uses your location while the app is open.Consent (via your phone)
Your walked route (the places of a walk)Showing your route on the map and in the summary after your walk. The route is stored on your phone only: it is not sent to our server and is not part of your backup. Only the distance and duration of the walk (without places) are part of your backup.Consent (via your phone)
Your starting point when requesting a walking routeWe send your starting point and the desired distance via our server to OpenRouteService. We do not send your name or account.Consent
Places where you plant a tree yourself (Figgy forest)Part of your own backup; nobody else sees themYour explicit consent (backup)
The starting point and, if added, the coordinates of a walk round you organiseOrganising the round; only visible to participants (see section 4)Performance of the contract

Important:

3.4 Walk rounds

DataPurposeLegal basis
Rounds you organise: title, description, country, city, date and time, time zone, distance, maximum number of participants, starting point, status (planned/cancelled)Walking togetherPerformance of the contract
Your participation in a round, whether you join visibly or invisibly, and when you signed upWalking togetherPerformance of the contract
Whether an organiser removed you from a roundPreventing you from signing up againLegitimate interest (safety)

3.5 Chat

DataPurposeLegal basis
Chat requests (from whom, to whom, accepted or not, through which round), your messages, and whether you both chose "Stay in touch"Contact between walkersPerformance of the contract

You can send a chat request to visible fellow walkers of a round, to members of your groups, to people you find through "Find people" (only those who turned on "Findable by name" themselves) and to walking buddies (see 3.15). A conversation only starts once the other person accepts the request.

We do not read your private conversations, unless someone reports a conversation (see 3.7). For group messages and the Support chat, see 3.15 and 3.16. Swear words are automatically replaced with asterisks. To prevent abuse we automatically check for certain links (see 3.7).

3.6 Push notifications

DataPurposeLegal basis
Your phone's push tokenSending you a notification for a new message (including in your groups and the Support chat), a chat request or a request to join your private groupConsent (via your phone)

A push notification about a new message contains the sender's name and the message text (for a group message also the group's name). The notification goes via Expo and Apple to your phone and may be visible on your lock screen. You can change or turn this off in your phone's settings.

Reminders the app sends you (for example to log your food) are scheduled on your phone itself and do not go through our server.

3.7 Reporting, blocking and moderation

DataPurposeLegal basis
Reports you make: what you report (a round, message, conversation, group or person), the category, your explanation, the time. For a reported conversation a copy of the latest messages (at most 30); for a reported group message a copy of that message; for a reported round a copy of that round's details.Reviewing the reportLegitimate interest (safety of users)
Who you have blockedPreventing someone from contacting or seeing youLegitimate interest
Moderation measures (see below) and their reasonSafety in the app, accountabilityLegitimate interest
In case of a ban: an irreversible code (hash with a secret key) of the email addressPreventing someone from returning with the same address or Apple ID. We do not keep the address itself for this.Legitimate interest

How moderation works:

3.8 Subscriptions

DataPurposeLegal basis
Whether you have a subscription, which one, start and end date, trial period, and your account IDChecking whether you have Figgy Premium, also on another phonePerformance of the contract

Payment is handled by Apple. We never see your payment details. We use RevenueCat to keep track of subscriptions (see section 5).

3.9 Looking up food products

When you scan a barcode or search for a product, your phone requests the product details directly from Open Food Facts. The barcode or search term is sent, and Open Food Facts sees your phone's IP address. Your name or account is not sent.

3.10 Map

The map in the app is loaded from OpenFreeMap. Your phone downloads map tiles for this. The service sees your IP address and which area you are viewing, not who you are.

3.11 Photos and camera

Progress photos you take or choose stay on your phone only and never go to us, to your account or to others. Only a photo you add to a forum post yourself goes to our server (see 3.18). You also use the camera to scan barcodes and for the game's camera mode; those images are not stored or sent.

3.12 Technical data

To run and secure the service, our providers process technical data such as your IP address, times and the type of request (for example in server logs). For route requests we keep track per account per day of how often you request a route (to limit abuse). Legal basis: legitimate interest (security and proper functioning).

Figgy uses no advertising or tracking tools and no third-party analytics services.

3.13 Figgy Rewards

DataPurposeLegal basis
Your steps per day (up to 60,000 per day count)Calculating on our server how many vouchers you have earned (one voucher per 100,000 steps), so nobody can claim a reward twiceYour explicit consent (these steps are already part of your backup, see 3.2)
Which reward you choose, the code you receive, the partner, the validity and the timeShowing your chosen rewards and codes under "My rewards"; preventing you from choosing the same reward twice; limiting abuse (at most 5 per week)Performance of the contract

3.14 Sharing your walk and the lock screen

3.15 Groups, group chat, group walks and the weekly challenge

DataPurposeLegal basis
Groups you create: name, description, open or private, who the group owner is, creation dateOffering a group and making it findablePerformance of the contract
Your membership: which groups you belong to, whether your request is still pending, your role and since whenMaking groups work (who may read along and take part)Performance of the contract
Your messages in the group chatContact within the groupPerformance of the contract
Group walks: title, meeting point, date and time, distance, who is goingWalking together with your groupPerformance of the contract
Weekly challenge: your steps per day (already part of your backup, see 3.2) and whether you chose "Join"Showing the weekly total (from Monday) of participants to the members of your groupsYour explicit consent: only if you tap "Join" yourself; you can stop at any time
"Findable by name" (off by default)Others can find your name under "Find people" and send you a chat requestConsent (you turn it on yourself)
Looking for a walking buddy (off by default): your area (free text), pace, preferred times and a short noteShowing other people who are looking with whom they can walkConsent (you turn it on yourself)

3.16 Figgy Support chat

DataPurposeLegal basis
Your messages with Figgy Support and our repliesAnswering your question, helping with problemsPerformance of the contract

The Support chat is a conversation between you and the Figgy administrator (Get Figgy). Only you and the administrator can read it. The administrator receives a push notification for each new message. Please do not share health data or other sensitive data we do not need in the Support chat. Instead of the chat you can also email [email protected].

3.17 Sharing your live location (off by default)

DataPurposeLegal basis
Your current position (latitude and longitude) and the time, only while you walk with Figgy and have turned sharing onShowing members of your private group, or participants of the same group walk, where you are walking (as a squirrel with your name on the map); the "walking together" bonus in the gameYour consent (Article 6(1)(a) GDPR). We ask for it in the app before you turn sharing on for the first time.
Your choices: for which groups you share (or all private groups), per group walk whether you share, and when you gave consentKeeping track of whom you want to share withYour consent

How it works:

3.18 Forum

DataPurposeLegal basis
Topics and replies you post: title, text, category, time, whether you posted anonymously, whether you edited or deleted itRunning the forumPerformance of the contract
Photos you add to a post (at most 4 for a topic, 1 for a reply)Showing them with your postPerformance of the contract
"Support" (hearts) you give, topics you follow, writers you hideCounting support, push notifications for new replies, hiding posts you don't want to seePerformance of the contract
When you accepted the forum house rules; any forum ban (until when and why)Showing that you know the rules; moderationPerformance of the contract; legitimate interest (a safe forum)
Signals for the administrator: if a post contains words or numbers that may indicate concern (for example eating very little, laxatives, vomiting after eating, self-harm or suicide), the word found and an excerpt of the textThe administrator can check whether someone needs help and, if needed, send a message with helplines. Nothing is ever blocked or deleted automatically.Legitimate interest (user safety) and, in case of immediate danger, the vital interest of the person concerned.

4. What do other users see?

Visible to other signed-in users:

Never visible to other users: your email address, your health and nutrition data, your steps per day and your weight, your walked routes, your private zones, your location (unless you turn on live location sharing yourself, see 3.17), your subscription, your chosen rewards and codes, your reports, who you have blocked, and moderation data.

Internal only (Figgy administrator): who wrote an anonymous forum post, signals on forum posts, reports and their copies, the moderation log, the Support chat, and for administration the data needed to handle a report. The administrator can read group messages; private conversations between users only if they have been reported.

5. Who do we share data with?

We work with these service providers (processors or independent parties). Processors have agreed to use your data only for Figgy.

PartyWhatWhere
SupabaseDatabase, accounts, sign-in, server functions, storage of forum photosServers in the EU (Ireland). Supabase is a US company.
ApplePayments and subscriptions (App Store), push notifications, Apple Health (on your phone)Worldwide; Apple is an independent controller for the App Store and your Apple ID
RevenueCatKeeping track of your subscription (account ID and purchase data, no health data)United States
ExpoDelivering push notifications (push token, sender name and message text)United States
ResendSending sign-in codes by email (your email address and the code). Resend keeps email and log data for at most 30 days.United States
OpenRouteService (HeiGIT)Calculating walking routes (starting point and distance, without name)Germany
Open Food FactsProduct details for a barcode or search term (without name)France
OpenFreeMap (Hyperknot Software Kft.)Map tiles. Access logs are anonymised without IP addresses; in case of a server error the IP address may appear in an error log, which is deleted after 7 days. Traffic runs through Cloudflare.Hungary (EU)

We do not sell your data. We may disclose data if the law requires us to, for example under a court order, or where necessary in case of immediate danger to someone's life or safety.

6. Transfers outside the European Economic Area

Your account data is stored with Supabase in the EU (Ireland). Some providers (also) process data outside the European Economic Area, mainly in the United States. Appropriate safeguards apply:

7. How long do we keep data?

DataRetention period
Account, profile, backup, steps per day, participations, rounds, chat messages, group messages, memberships, Support chat, your choices for findable, walking buddy and location sharingFor as long as you have an account. They are deleted immediately when you delete your account.
Live location (only if you turn sharing on)Only your latest position; overwritten each time, deleted as soon as you stop, go invisible or enter a private zone, and otherwise automatically within about 15 minutes. No history.
Groups and group walksUntil the group owner deletes the group. If you delete your account while you own a group, the group is transferred to the Figgy administrator.
Reports (including copies)At most 12 months; then deleted automatically. When you delete your account, your name in copies is replaced with "Deleted account".
Moderation logAt most 2 years; then deleted automatically. When you delete your account we remove your name and texts; what happened and why stays.
Ban codes (hashes)For as long as the ban applies
Route counts per day30 days
Walked routes (on your phone only, not with us)The last 50 walks; deleted when you log out, delete your account or delete the app
Chosen rewards (Figgy Rewards)As long as you have an account. They are deleted when you delete your account; issued codes stay marked as "issued", without any link to you.
Forum posts and photosUntil you delete them yourself, and as long as you have an account. If you delete a post, the text and photos disappear immediately; only its place in the conversation remains ("This message has been deleted"). Loose photos that were never attached to a post are cleaned up by the administrator.
Support, follows, hidden writers, acceptance of house rules, forum banAs long as you have an account
Forum signals for the administratorUntil the administrator has handled the signal, and at the latest until your account is deleted
Push tokenUntil you sign out, remove the app or delete your account
Database backups at SupabaseAt most 7 days; then overwritten automatically

8. Deleting your account

You can delete your account in the app (Account → Delete account). This is what happens:

  1. We ask RevenueCat to erase your subscription data.
  2. We delete your forum photos from storage.
  3. We delete your account, profile, backup, participations, rounds, chat messages (including in groups and the Support chat), conversations, group memberships, your location sharing choices and any latest position, blocks and chosen rewards. From your forum posts the title, text, photos and the link to your account are removed; only their place in the conversation remains ("This message has been deleted"), so other people's replies are not lost. Your support, followed topics and hidden writers are deleted.

If one of these steps fails, we do not half-delete your account: you get a message and can try again or email us.

Please note:

9. Your rights

You have the right to:

Email your request to [email protected]. We respond within one month. We may ask you to confirm your identity.

10. Complaints

If you disagree with how we handle your data, please let us know. You can also file a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl), or with the supervisory authority in your own country.

11. Security

Data travels encrypted over the internet. In the database each user can only see their own data, apart from what you share on walk rounds, in groups and in chats. The server checks who may see whose live location on every request. Secret keys are only stored on the server. We check security with automated tests.

12. Age

Figgy is only intended for people aged 16 and over. If you are 16 or 17, be extra careful with meeting up and with sharing your live location, and only share your location with people you really know and trust. We recommend discussing this with your parents or carers first.

13. Changes

If we change this privacy policy, you will see this from the date at the top. For important changes we will let you know in the app.