PRIVACY POLICY

This Privacy Policy describes how Gainz Gym ("we", "us", or "the Game") collects, uses, and protects information when you use our game and website.

1. Information We Collect

We collect minimal information, focused on what is needed to run the Game:

• Solana wallet address. When you connect a wallet, we store your public wallet address to track game progress, assets, and balances.
• On-chain transaction data. Transactions you make (gym purchases, RR purchases, token withdrawals) are recorded on the Solana blockchain, which is public.
• Gameplay data. Game state such as owned athletes, gym levels, trainer assignments, leaderboard rank, and claim history.
• Referral relationships. If you use a referral code, we record which wallet referred you so the referrer receives credit.
• Technical data. Server logs may include IP addresses, browser type, and request timestamps for security and performance monitoring.
• Early access contact (optional). If you opt in to launch notifications via the early access page, we may store your email address until launch.

2. What We Do NOT Collect

• We do not collect your private keys, seed phrases, or passwords.
• We do not collect government-issued ID, SSN, or similar identity documents.
• We do not collect payment card information.
• We do not sell or share your data with third-party advertisers.

3. How We Use Your Information

• To operate the Game: manage gym state, process claims, distribute rewards.
• To verify on-chain transactions (gym purchases, RR top-ups, withdrawals).
• To calculate leaderboard standings and distribute competition prizes.
• To detect and prevent abuse, fraud, exploits, and security threats.
• To communicate important announcements via in-game notifications, Discord, or X.
• To comply with legal obligations when required.

4. Data Storage and Security

Game state is stored in a managed PostgreSQL database (Supabase). On-chain data lives on the Solana blockchain. We use industry-standard security practices:

• HTTPS/TLS encryption for all client-server communication.
• Row-level security and authenticated API access.
• Admin actions protected by wallet signature verification.
• Rate limiting and circuit breakers to mitigate abuse.

No system is 100% secure. You are responsible for protecting your own wallet and seed phrase — we cannot recover those on your behalf.

5. Public Blockchain Data

Your wallet address and all transactions are recorded on the Solana blockchain, which is a public, transparent ledger. Anyone can view these transactions using a block explorer. This data is permanent and cannot be deleted.

6. Third-Party Services

We use the following third-party services to operate the Game:

• Solana RPC providers (e.g., Helius) to read/write blockchain data.
• Supabase for off-chain game state storage.
• Vercel for web hosting and edge functions.
• Meteora and other DEXes for $GAINZ token liquidity (indirectly — we do not process trades directly).
• Wallet providers (Phantom, Solflare, etc.) — their own privacy policies apply to your use of their wallets.

7. Cookies

We use a minimal set of cookies, including authentication cookies (to keep you logged in) and functional cookies (to remember settings like music volume). We do not use tracking or advertising cookies.

8. Your Rights

You have the right to:

• Stop using the Game at any time — simply disconnect your wallet.
• Request that we delete your off-chain game state (on-chain data cannot be deleted).
• Ask questions about what data we hold about you.

Requests can be sent via our Discord.

9. Children's Privacy

Gainz Gym is not intended for users under the age of 18 (or the legal age of majority in your jurisdiction). We do not knowingly collect information from minors.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be announced via Discord, X, or in-game notifications. Continued use of the Game after changes constitutes acceptance.

11. Contact

Questions about this Privacy Policy? Reach us on Discord or X.