TriboFit

Privacy Policy

Last updated September 6, 2026

TriboFit is a social sports app that helps you find and organize local events, join groups, and connect with friends who want to train or play. This page explains what information we collect to make that work, why we collect it, and the choices you have.

Information we collect

Account information

When you register, we collect your email address, password (stored as a salted hash — we never see or store it in plain text), first and last name, and date of birth. If you sign in with Google instead, Google shares your name and email address with us; we never see your Google password.

Profile information

You can optionally add a bio, phone number, location (as free text, e.g. a city), and a profile photo. Your profile has its own privacy toggles that let you hide specific fields, your groups, your events, or your friends list from other users.

Content you create

Events, groups, comments, likes, and friend connections you create or join are stored so the app can show them to you and to other relevant users (e.g. other members of an event or group). Photos you attach to an event or upload as an avatar are stored with our image hosting provider (Cloudinary).

Location

If you allow it, we use your device's precise location, only while the app is open, to show events near you and sort them by distance. Your coordinates are sent to our server for that request but are not stored as part of your permanent profile.

Device and push notification data

If you enable notifications, we store a device push token (issued by Firebase Cloud Messaging) so we can deliver notifications about your events, groups, and friend activity. You can mute individual notification types from Settings.

How we use your information

We do not use your data for advertising, and we do not sell your personal information to anyone.

Who we share it with

We use a small number of service providers to run TriboFit. Each only receives the data it needs to do its job:

ProviderWhat they receive & why
CloudinaryPhotos you upload (avatars, event images) — image hosting.
ResendYour email address — to deliver verification codes and password-reset emails.
Firebase Cloud Messaging (Google)Your device's push token — to deliver notifications. We do not use Google Analytics or any tracking SDK.
Google Sign-InOnly if you choose to sign in with Google — your name and email, to authenticate you.
OpenStreetMap & Open-MeteoEvent coordinates (no account information) — to show a place name and weather forecast for an event.
RailwayHosts our database and server infrastructure.

We don't share your information with anyone else, except where required by law.

How long we keep your data

We keep your account data for as long as your account is active. You can delete your account at any time from Settings → Delete Account: this anonymizes your account and removes your personal details from our records.

Your choices

Children's privacy

TriboFit is not directed at children, and registration requires a date of birth. We do not knowingly collect information from children under 13. If you believe a child has provided us with personal information, contact us and we'll remove it.

Security

We use industry-standard measures to protect your information, including encrypted connections (HTTPS) between the app and our servers and salted password hashing. No method of transmission or storage is 100% secure, but we work to protect your data appropriately.

Changes to this policy

If we make material changes to this policy, we'll update the date at the top of this page. Continuing to use TriboFit after a change means you accept the updated policy.

Contact us

Questions about this policy or your data? Reach us at [email protected].

TriboFit · tribo.devanforge.com