Privacy Policy

At ChallengeU2, we are committed to protecting your privacy. This Privacy Policy describes how we collect, use, share, and protect your personal information when you use our online platform for participating in challenges, creating accounts, and interacting with our services. By using ChallengeU2, you consent to the practices described in this policy.

1. Information We Collect

We collect information you provide directly to us, such as when you create an account, register for challenges, submit progress updates, or contact us for support. This may include:

• Your email address, username, and profile information (e.g., name, photo).
• Challenge-related data, such as submissions, progress tracking, and performance metrics.
• Communication data, including messages, feedback, and support inquiries.
• Payment information processed through third-party providers like Stripe (we do not store full payment details).

We also collect information automatically through cookies, device data, and analytics tools when you interact with our platform. For online challenges, this includes timestamps of challenge participation, IP addresses for security, and usage patterns to improve challenge design.

If you participate in AI-enhanced challenges, we may process your inputs (e.g., text or media submissions) using third-party AI services like OpenAI to generate feedback or content.

2. How We Use Your Information

We use your information to:

• Provide and personalize our services, including facilitating challenge participation, tracking progress, and delivering notifications.
• Improve our platform, such as analyzing challenge completion rates and user engagement to refine challenge experiences.
• Communicate with you about your account, challenges, updates, and promotional offers (you can opt out at any time).
• Ensure security and prevent fraud, including monitoring for unauthorized access to challenge data.
• Process payments and manage subscriptions for premium challenges or features.
• Comply with legal obligations and enforce our terms of service.

For AI features, user inputs may be temporarily processed by external providers to generate responses, but we do not retain AI training data from your interactions unless explicitly consented.

3. Data Sharing and Disclosure

We do not sell your personal data. We may share your information with trusted third parties who help us operate our platform, including:

• Supabase for secure database storage and authentication of user and challenge data.
• OpenAI or similar AI providers for processing challenge-related inputs (data is not used for their model training).
• Stripe for payment processing.
• Analytics providers (e.g., Google Analytics) for aggregated, anonymized insights.
• Legal authorities if required by law, such as to protect against fraud in challenge competitions.

In the event of a merger, acquisition, or sale, your data may be transferred as part of our assets, but we will notify you beforehand.

4. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience, such as remembering your challenge preferences and analyzing site usage. You can manage cookie preferences through your browser settings. For detailed information, please see our Cookie Policy.

Essential cookies are required for core functionality, like maintaining your session during challenge participation. Analytics cookies help us understand how users engage with challenges.

5. International Data Transfers

ChallengeU2 operates globally, and your data may be transferred to and processed in countries outside your residence, including the United States. We ensure appropriate safeguards, such as Standard Contractual Clauses, are in place for transfers to comply with GDPR and other regulations.

6. Your Rights and Choices

Depending on your location, you may have rights under laws like GDPR (EU) or CCPA (California), including:

• Access, update, or delete your personal information.
• Withdraw consent for data processing (e.g., opting out of AI feedback).
• Object to or restrict certain uses, such as marketing emails.
• Request data portability for challenge progress.
• Lodge a complaint with a supervisory authority.

To exercise these rights, log in to your account settings or contact us at support@challengeu2.com. We will respond within 30 days. For CCPA, you can also opt out of the sale of personal information (though we do not sell data).

7. Children's Privacy

Our services are not intended for children under 13 (or 16 in some jurisdictions). We do not knowingly collect personal information from children. If we become aware of such collection, we will delete it promptly. Parents or guardians can contact us to review or delete a child's data.

8. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this policy, such as completing challenges or complying with legal requirements. Account data is kept while active; inactive accounts may be deleted after 2 years. Challenge submissions are retained for 1 year post-completion unless you request deletion.

9. Security

We implement robust security measures, including encryption (TLS for transit, AES-256 at rest), access controls, and regular audits to protect your data against unauthorized access, especially sensitive challenge progress and submissions. However, no system is completely secure, and we cannot guarantee absolute security.

10. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. We will notify you via email or in-app notifications for material changes. Your continued use of ChallengeU2 after updates constitutes acceptance. Please review periodically.