RupertG Accounts
Effective Date: 3 October 2026
This Privacy Policy explains how RupertG Interactive ("RupertG", "we", "us" or "our") collects, uses, stores and protects your personal data when you use your RupertG Account and the apps, websites and services that use it (the "Services").
The Services currently include:
We are the data controller for the personal data described here. By using the Services you acknowledge this Policy. If you do not agree with it, please do not use the Services. We may change this Policy at any time, as explained in section 12.
When you create a RupertG Account we collect your email address, username and password, and a profile picture if you choose to add one. Your password is stored in a protected (hashed) form, and we cannot see it. If you sign in with Google, we receive basic profile details from Google, such as your name, email address and profile picture.
We store what you put into the Services so that it can sync across your devices, for example notes, budgets, recipes, wishlists, saved passwords and workout records. Notes and other sensitive content are encrypted. We do not sell this content or use it for advertising.
RupertG Fitness uses your device's location to record activities such as the route, distance, pace and duration of a workout. Location is only collected if you give permission in your device settings, and only while you are using the relevant feature. If a feature needs location while the app is in the background, such as an activity that is still being recorded, we will ask for that permission separately and clearly explain why. You can turn location off at any time in your device settings, though some fitness features will then stop working.
RupertG Fitness may also store information you choose to record or connect, such as workout history, weight, steps or heart rate. This information is only collected if you enter it or give permission, and is used only to provide the Fitness features to you.
If you buy a premium subscription, we receive confirmation of your subscription status and the dates it covers. Payments are processed by Stripe, or by an app store such as Google Play if you subscribe through one. We do not receive or store your full card details.
We use Plausible Analytics, which we host ourselves on our own servers, to understand how the Services are used, such as which pages or features are visited and from what type of device. Plausible does not use cookies, does not build profiles of individual people, does not track you across other websites, and does not share data with third parties. Because it is self-hosted, this data stays on our own infrastructure.
Our servers record standard technical information, such as IP address, device and app version, and request logs. We use this to keep the Services secure, to prevent abuse and to fix problems.
If you email us, we keep your message and our reply so we can help you and keep a record of the conversation.
| What we do | Legal basis (UK GDPR) |
|---|---|
| Create and run your account, sync your content, provide the Services and premium features | Contract (we need this to provide the Services to you) |
| Collect your location while using RupertG Fitness, and handle any health information | Consent (you can withdraw it at any time in your device settings or by deleting your account) |
| Keep the Services secure, prevent fraud and abuse, fix bugs | Legitimate interests |
| Understand how the Services are used through privacy-friendly analytics | Legitimate interests |
| Respond to your messages and support requests | Legitimate interests, and contract |
| Comply with the law, and handle legal claims | Legal obligation, and legitimate interests |
We do not sell your personal data, and we do not use it to profile you for advertising.
We use only the cookies and local storage that are strictly necessary, for example to keep you signed in and to keep your account secure. Our analytics do not use cookies.
We only share personal data where it is needed to run the Services or where the law requires it:
Our email and analytics systems are self-hosted on our own servers, so they do not involve another company.
Your data is stored on servers in Germany. Germany is in the European Economic Area, and the UK recognises it as providing adequate protection for personal data. Some providers we use, such as Stripe and Google, may process data in other countries, including the United States. Where personal data is transferred to a country without UK recognition, we rely on appropriate safeguards as required by law.
We take reasonable technical and organisational steps to protect your data, including encrypted connections (HTTPS), hashed passwords, encryption of sensitive content, access controls and regular updates to our systems. No system is completely secure, so please use a strong, unique password and keep your devices up to date. If a data breach puts your rights at risk, we will notify you and the Information Commissioner's Office where the law requires.
You can delete your RupertG Account and the data linked to it at any time from the accounts page. This removes your access to every Service that uses your account. If you cannot access your account, email legal@rupertg.co.uk from the address registered to it and we will delete it for you. Deletion cannot be undone. Deleting an app from your device does not delete your account.
Please cancel any active premium subscription before you delete your account. If you subscribed through an app store such as Google Play, cancel it in your account with that store, as deleting your RupertG Account does not cancel it for you.
Under UK data protection law you have the right to:
To use any of these rights, email legal@rupertg.co.uk. We will respond within one month. You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk, although we would appreciate the chance to put things right first.
The Services are not intended for children under 13, and we do not knowingly collect personal data from them. If you are under 18, please use the Services with a parent or guardian's permission. If you believe a child under 13 has created an account, contact us at legal@rupertg.co.uk and we will delete it.
The Services may link to third-party websites or services. We are not responsible for their privacy practices, so please read their policies.
We may change this Privacy Policy at any time, for example when we add a new Service or a new feature that uses your data in a different way, or when the law changes. Updated versions take effect when they are published on this page, and the effective date at the top will show when they were last changed. For significant changes we will also give you notice, for example by email or in the app. If a change needs your consent, we will ask for it.
Please review this Policy regularly. By continuing to use the Services after changes take effect, you accept the updated Policy.
If you have any questions, complaints or requests about this Privacy Policy or your personal data, please contact us:
RupertG Interactive
Email: legal@rupertg.co.uk
Website: www.rupertg.co.uk