This Privacy Policy explains how SUNG, Inc. ("SUNG", "we") collects, uses, and shares information when you use the Sung app and related services (the "Service"). We built Sung around community verification, which means some of what you share is inherently visible to other users — this policy is explicit about exactly what is and is not.
• Account information: username, email address, password (stored only as a secure hash), full name, and date of birth (required, to enforce our 13+ minimum age and to place you in fair age cohorts for rankings).
• Optional profile information: bio, profile photo, gender, bodyweight, and height. Bodyweight and height are health-related information — you choose whether to provide them; they improve ranking fairness (for example, relative-strength comparisons).
• Content: posts, photos, videos, stories, comments, direct messages, workout proof submissions, and bodyweight verification (weigh-in) videos.
• Search history: your recent in-app searches, kept so you can quickly repeat them (you can clear them in the app).
• Reports and feedback you send us, including the device model and OS version attached to feedback.
• Device and app information: device type and name, operating system, app version, and a push notification token if you enable notifications.
• Usage events: pseudonymous analytics about how the app is used (for example, that a proof was submitted or a screen was viewed). These events are tied to a random account identifier — not to your email, name, or measurements — and we do not use session recording.
• Network information: the IP address you sign up from, kept for abuse and ban-evasion prevention.
With your permission, the app uses your device’s location to show gyms near you on the map and to confirm you are physically at a gym when you join it (you must be within a short distance of the gym).
We use your precise location transiently for these checks — we do not store your precise location on our servers, we do not track your location in the background, and we never share your location with other users. Gym locations themselves are public map data.
• To provide the Service: feeds, profiles, messaging, maps, leaderboards, notifications, and community verification.
• To keep rankings fair: your date of birth (and, if provided, bodyweight) place you in comparison cohorts.
• Safety and moderation: automated systems and human reviewers screen content for violations; signup IP addresses help block banned users from returning.
• Communications: service emails (like verification codes and password resets) and push notifications you can control in settings.
• Analytics and improvement: pseudonymous usage data tells us which features work.
• Legal: to comply with law and enforce our Terms.
• Your profile (username, name, photo, bio, rank, gym) is visible to other users; if you set your account to private, your posts are visible only to approved followers.
• Leaderboard entries and the workout proof videos behind them are visible to other users — community review is how results get verified on Sung. Do not submit a proof you would not want other members to watch.
• Bodyweight verification (weigh-in) videos are the exception: they are reviewed privately by our staff only and are never shown to other users. Your verified status may be visible; your weigh-in footage is not.
• Direct messages are visible to their recipients.
We share information with processors that help us run the Service, under agreements limiting their use of it:
• Amazon Web Services (United States): hosts our infrastructure, stores media, sends our emails, and provides automated image/video content screening.
• OpenAI: provides automated review of text content and of running-app screenshots submitted for verification. Content is sent without your name, username, or email attached.
• Expo: delivers push notifications to your device via Apple and Google push services.
• PostHog (United States): analytics, limited to the pseudonymous usage events described above — no session recording.
We may also disclose information if required by law, to protect safety and prevent abuse, in connection with a merger or acquisition, or with your consent. We do not sell your personal information, and we do not share it for cross-context behavioral advertising.
We keep your information while your account exists. When you delete your account (Settings → Delete Account):
• Your profile is permanently anonymized: username, email, name, photo, bio, date of birth, gender, weight, and height are removed or replaced immediately.
• Your posts and comments are hidden, and your likes and follows are removed.
• Messages you sent remain in your recipients’ conversations, attributed to "Deleted User" — like other messaging services, deleting your account does not unsend your messages.
• Settled leaderboard results are kept as anonymized competition records.
• Moderation and legal records (for example, ban records and copyright notices) are kept as needed for safety and legal compliance.
Some data ages out on its own: notifications are deleted after 90 days, and inactive push notification tokens after 30 days.
• Edit your profile and remove optional information at any time.
• Make your account private, block users, and control notifications in settings.
• Control camera, photo, and location access in your device’s OS settings.
• Delete your account in the app.
Depending on where you live (including the EEA/UK under GDPR, California under the CCPA, and Virginia under the VCDPA), you may have rights to access, correct, delete, or receive a copy of your personal information, and to object to or restrict certain processing. To exercise any of these rights, contact us at support@gym-social.com. We will not discriminate against you for exercising them. If you are in the EEA/UK, you may also lodge a complaint with your supervisory authority.
Sung is not for children under 13 (or the higher minimum age your country requires for consent to data processing). We do not knowingly collect personal information from children under that age, and we delete accounts that violate this rule. If you believe a child is using the Service, contact us at support@gym-social.com.
We protect your information with encryption in transit, hashed passwords, access controls, and content security measures. No system is perfectly secure — please use a strong, unique password.
The Service is operated from the United States, and your information is processed and stored there. By using the Service you understand your information will be transferred to the United States, which may have different data protection laws than your country.
We may update this policy as the Service evolves. If a change is material, we will notify you in the app or by email before it takes effect. The "Last updated" date above always reflects the current version.
SUNG, Inc. — support@gym-social.com