Privacy Policy

DOTSS360

Last updated: June 8, 2026

This Privacy Policy explains what personal information the DOTSS360 mobile app ("DOTSS360", "the app", "we") collects, how we use it, who we share it with, and the rights you have. DOTSS360 is a step-tracking and walking-competition app: it reads your daily step count and lets you take part in individual and team step competitions.

Unlike a simple offline game, DOTSS360 requires an account and processes some personal and health-related data to work. Please read this policy carefully.

Who is responsible for your data

The app is operated by the DOTSS360 team. For any privacy question or to exercise your rights, contact us at exylonteam@gmail.com.

Information we collect

Account information. You sign in with your phone number, which we verify with a one-time SMS code (via Firebase Authentication). We store your phone number to identify your account.
Profile information. The name or nickname you choose, your preferred language, and any profile details you add during onboarding.
Activity / health data. With your explicit permission, the app reads your daily step count from Apple Health (HealthKit) on iOS or Health Connect on Android. Access is read-only — the app never writes data to Apple Health or Health Connect. Step data is used only to show your activity and to run the competitions you join.
Competition data. When you join a competition, your display name and step totals are shown to the other participants of that competition (for example, on leaderboards).
Device & diagnostic data. Device model, operating system and app version, a push-notification token, crash reports and performance diagnostics, and anonymous usage analytics (which screens are used, app launches). Analytics identifiers are pseudonymized.

How we use your information

To create and manage your account and let you sign in.
To read your step count and display your daily activity and statistics.
To run individual and team step competitions, including leaderboards.
To send notifications you have enabled (for example, competition updates).
To keep the app secure, diagnose crashes, and improve stability and features.

Health data — specific commitments

We treat your activity/health data with particular care. We do not sell it, we do not use it for advertising, and we do not share it with third parties for their own purposes. It is read only with your permission, used solely for the app's activity and competition features, and stored securely. You can revoke health access at any time in your device's Health/Health Connect settings, and you can delete your account from within the app.

Legal bases (GDPR)

Where the EU/UK General Data Protection Regulation applies, we rely on: your consent (health data access and push notifications), performance of a contract (creating and operating your account and the competition service), and our legitimate interests (keeping the service secure and reliable). You can withdraw consent at any time.

Who we share data with

We do not sell your personal data. We share it only with:

Google / Firebase, which provides our backend (authentication, database, push notifications, analytics, crash reporting) as a data processor on our behalf. See the Google Privacy Policy and Firebase Privacy.
Other participants of a competition you join (your display name and step totals, as described above).
Authorities, only where required by law.

Storage and international transfers

Your data is stored on Google Cloud infrastructure, primarily in the European Union (europe-west1). Where data is processed outside the European Economic Area, it is protected by appropriate safeguards such as the European Commission's Standard Contractual Clauses.

Data retention

We keep your account and profile data for as long as your account exists. When you delete your account, your personal data is deleted. Limited diagnostic and aggregated analytics data may be retained for a short period for security and to understand overall usage.

Your rights

You have the right to access, correct, delete, restrict or object to the processing of your personal data, and to data portability. To exercise any of these rights, contact exylonteam@gmail.com. You also have the right to lodge a complaint with your data protection authority — in Spain, the Agencia Española de Protección de Datos (AEPD), or in Catalonia, the Autoritat Catalana de Protecció de Dades (APDCAT).

Deleting your account

You can delete your account at any time from within the app (Settings → Delete account). This removes your profile and personal data from our systems and stops all further processing.

Children

DOTSS360 is not directed to children under 16, and we do not knowingly collect data from them. If you believe a child has provided us with personal data, please contact us and we will delete it.

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date above. We encourage you to review this page periodically.

Contact

For any question about this Privacy Policy or your data, contact us at exylonteam@gmail.com.