1. Scope and responsible company
SweatFam is a Vaquero Labs product operated by Yeetum LLC, 600 Bryan Ave Ste 220, Fort Worth, TX, 76104, United States, to promote family and community health. This policy covers our website, apps, and related support. Contact support@sweatfam.app for privacy requests.
Yeetum LLC determines the purposes and means of processing for the ordinary consumer service. Organizing a family or friend group does not itself make you our business customer or authorize you to exercise another member’s privacy rights. Separately agreed business processing is described in our Data Processing Agreement.
2. Information we collect and where it comes from
From you: name, email, profile image, timezone, account settings, eligibility information and acceptance records; photos, captions, comments, reactions, goals, agreements, reviews, reports, and support or feature requests. Community membership and activity can reveal fitness interests or other sensitive information you choose to share.
From other members and services: invitations, community roles, interactions and reports involving you; account identifiers and profile information from a sign-in provider you choose; and purchase, renewal, entitlement, and transaction information from billing providers. Payment providers collect payment credentials; SweatFam does not store full card numbers.
From devices and use: device and push identifiers, app/browser and operating-system information, connection and error logs, IP addresses handled by our infrastructure, security events, and limited product activity described below. Optional health syncing supplies daily step totals only after permission. We do not use photos for facial recognition or request precise GPS location for check-ins.
3. How we use information
We use information to authenticate accounts, check eligibility, operate communities and check-ins, calculate progress, honor sharing choices, deliver requested reminders, manage subscriptions, provide support, investigate abuse and fraud, secure the service, comply with legal obligations, and improve usability through limited analytics and voluntary feedback.
We do not sell personal information, share it for cross-context behavioral advertising, or use it for targeted advertising. We do not use health data or private content for advertising, AI model training, or decisions about employment, insurance, credit, or access to healthcare. We do not operate automated decision-making that produces legal or similarly significant effects about members.
4. Optional Apple Health and Health Connect data
If you connect Apple Health on iPhone or Health Connect on Android, SweatFam reads step counts to calculate and sync daily totals for the most recent 35 days in your profile and selected community timezones. Android may request history access to read that period. Raw health samples and heart rate are not uploaded. SweatFam does not write to or modify your health store.
You can separately allow background step syncing on supported Android devices. This lets Android periodically permit a read and upload while the app is closed; timing is controlled by Android. Step counts and related connection/sharing records are used to provide your requested health feature, not sent as product analytics or used for advertising or profiling.
Sharing is off until you enable it for a community. Current authorized members can then see your shared daily totals and last sync time, including recent days before joining, subject to membership and blocking controls. You can stop sharing for a community, revoke system read/background permissions, or use Disconnect and delete steps. Revoking system permission stops future reads but does not itself delete totals already synced; the in-app disconnect/delete control removes stored totals and sharing grants. Account deletion also removes them from active storage.
Daily step totals are limited to a rolling 35-day window and pruned through syncing and scheduled cleanup. Backup limitations are described below. We do not sell consumer health data or use it for advertising. Health information may still be subject to privacy and breach-notification laws even though SweatFam is not a healthcare provider or a service offered under a HIPAA business associate agreement.
5. What other people can see
Communities are invite-only. Current authorized members can see permitted photos, profile details, progress, goals, agreements, and interactions, including history from before they joined. Invitation previews do not disclose a private roster or feed. Review evidence and safety reports have restricted audiences; organizers do not get unrestricted access to private safety reports or eligibility records.
A Story disappears from its Story view after 24 hours but remains a memory until deleted. Leaving a community does not remove your posts. Members may save or screenshot material, and a share card you export can be shared outside SweatFam. We cannot delete copies independently held by recipients. Device notifications and home-screen widgets may also be visible to people who can see your device; use device controls to manage previews.
6. Providers and other disclosures
Cloudflare provides hosting, network protection, image processing, and media storage; PlanetScale provides managed PostgreSQL storage. They process application data needed for those functions, including optional synced totals. Resend delivers email using recipient addresses and message content. PostHog receives limited analytics and explicitly submitted feedback as described below.
RevenueCat manages subscriptions; Stripe processes web payments; Apple App Store and Google Play handle native purchases. They receive the identifiers and purchase information needed for billing. Apple or Google sign-in receives authentication requests when you choose it. Expo and Apple Push Notification service or Firebase Cloud Messaging deliver notifications using push tokens and notification contents. Some of these providers also act independently under their own privacy policies, particularly for payments, stores, and sign-in.
Authorized support personnel may access relevant data to resolve a request or investigate abuse. We may disclose information when required by law, to protect rights or safety, or as part of a merger, financing, acquisition, or asset transfer with appropriate confidentiality protections and any legally required notice or choice. We do not publish private content simply because a request is made.
7. Analytics, cookies, and local storage
PostHog helps us measure visits, screens and features used, active sessions, mobile screen time, sign-in, and organizer checkout. Signed-in analytics uses an internal account ID, display name, community roles and counts, plan, and subscription status. Mobile time measurement pauses when the app is inactive or in the background. Infrastructure providers still handle network connection information when receiving a request.
Our analytics event filter excludes photos, captions, comments, step totals, invitation codes, eligibility evidence, email addresses, and full page URLs from automatic product events. Session replay and automatic interaction capture are not used. An exception is feedback you deliberately submit: feature-request text, account ID, and email are stored by SweatFam and sent to PostHog so we can review and respond. Do not include private health details, passwords, or other people’s confidential information in feedback.
Authentication and language choices use cookies or device storage. The web app uses session storage for analytics continuity and local storage for settings and account-scoped drafts; native apps also keep local settings, drafts, and permitted cached data. Clearing browser/app storage can remove these copies but does not delete server data. Browser controls can block storage or requests, although essential features may then stop working. We do not use advertising cookies; there is no sale or targeted-advertising processing to opt out of.
8. Retention and deletion
We retain account information while needed to provide your account and content while you keep it in the service. Photo originals are temporary processing inputs; processed memories remain until deleted. Deletion revokes access and queues cleanup of media and related content. Minimal identifiers and historical membership, agreement, review, billing, security, or audit records may remain where needed for shared history, disputes, fraud prevention, accounting, or legal obligations; not every database row is immediately erased.
Retention depends on the data’s purpose, account activity, legal requirements, dispute or security needs, and provider backup cycles. Limited backup copies may remain until overwritten or expired; a fixed maximum backup-erasure period has not yet been verified. Account deletion does not automatically erase every record held independently by stores, payment providers, or other members. Contact us for the retention or deletion status of a particular record, including provider-held analytics or feedback.
Use You to export your information, delete your own check-ins, or request account deletion. Disconnect and delete steps removes active health totals and sharing grants. If you cannot sign in, email support@sweatfam.app for assistance. Cancel subscriptions with the original provider separately before deleting your account.
9. Your rights and requests
Depending on applicable law, you may request confirmation of processing, access, a portable copy, correction, deletion, withdrawal of consent, and limits on certain processing. You may have rights to opt out of sale, targeted advertising, or consequential profiling; we do not perform those activities. We do not discriminate against you for exercising privacy rights, though a feature cannot work without the information necessary for it.
Use the in-app controls or email support@sweatfam.app with the subject Privacy request. Identify your account and the request; do not send passwords, payment credentials, or unnecessary identity documents. We verify identity proportionately and may request proof of authority for an authorized agent. We respond within the period required by applicable law and explain any lawful denial or extension.
Where the Texas Data Privacy and Security Act applies, the ordinary response period is 45 days, with a further 45 days when reasonably necessary and with notice. To appeal a denial, email support@sweatfam.app with the subject Privacy appeal and reference the request. We will explain the appeal decision within the applicable deadline, including 60 days under that Act. You may also complain to the Texas Attorney General or your relevant privacy regulator; a complaint is not conditional on accepting our Terms.
10. Children and teens
The current service is for adults age 18 or older in the United States and is not directed to children under 13. We do not knowingly permit child or teen accounts. If you believe a minor has provided personal information through an account, contact support@sweatfam.app so we can investigate and take appropriate deletion or restriction steps. An adult’s invitation is not parental consent. Adults should avoid sharing unnecessary personal information about children in photos or captions.
11. Security, location, and policy changes
We use measures such as encrypted network transport, authenticated access, membership checks for private media, and restricted reporting access. No system is completely secure. The service and its providers may process information in the United States and other countries where they operate; this policy is not a promise of U.S.-only storage or a certification of compliance with another country’s laws.
We will investigate suspected security incidents and provide notices required by applicable law, including health-data breach notices where applicable. For a privacy or security concern, contact support@sweatfam.app. You may contact us to record a preference for postal notices where available or required by law.
We will date policy revisions and give notice of material changes through email or the service, obtaining consent before new processing where required. Contact support@sweatfam.app or Yeetum LLC, 600 Bryan Ave Ste 220, Fort Worth, TX, 76104, United States.