The short version
We hold the least we can get away with. We never sell anything about you. Your employer never sees your individual results. You can take a copy of everything and delete all of it, whenever you like.
The rest of this explains exactly what that means.
1. What we collect
Everything below is in the product because something needs it. Nothing is collected “just in case”.
You give us
| What | Why |
|---|---|
| Your name or nickname | So people know who they’re battling |
| Email or phone number | To sign you in and send battle notifications |
| A photo of yourself, if you add one | Your profile. Initials are used if you don’t |
| A line about yourself, if you write one | Shown on your profile |
| Your time zone | Decides when your day ends for streaks. Without it we’d break streaks in the wrong time zone |
| Battles you create or join | The product |
| Check-ins | Whether you did the thing that day |
| Photos and videos you post | Proof, and the fun part |
| What you write in a battle | Updates, replies, routines, how it went |
| Results you submit | Who won |
| Reports you send us | So we can act on them |
We work out
| What | Why |
|---|---|
| Your record — won, lost, best streak | Your profile and the boards |
| Who you’ve battled | So they appear when you start a new one |
| Which battles need you today | The Today screen |
| A fingerprint of each photo | To spot the same photo submitted twice as proof. Not facial recognition and not linked to anyone’s identity |
We do not collect
- Your location. No GPS, ever. If you add a venue to a battle, that’s an address you typed
- Anything from the photo file itself. GPS, camera, timestamp — stripped before it reaches our storage, and stripped again server-side
- Your contacts. We never read your address book
- What you do on other sites. No tracking pixels, no advertising networks
- Health data from any device. If a battle counts steps, you type the number or post a screenshot
We do log IP address and browser information for security and abuse prevention.
2. Photos, specifically
Photos are the part of this product people worry about, so this section is longer than the rest.
Location data is removed before the photo is stored. Twice — once by the app before it uploads, once by the server on receipt. The original file is never written to disk.
Only people in the battle can see a photo you post. Not the public, not other users, not us browsing for fun.
Photos are never used to train anything. Not our models, not anyone else’s.
You can delete any photo you’ve posted, at any time. It goes from the battle, from our storage, and from any poster it appeared on.
One limit we can’t get around. If someone already saved or screenshotted a photo, we can’t reach that copy. Nobody can. We say so rather than implying otherwise.
Photos of other people. If someone else is in your photo, you’re confirming they’re fine with it. If a photo shows a child, you’re confirming you’re their parent or guardian.
A person sees a photo only when someone reports it, or when an automatic check could not decide.
3. How long we keep things
Nothing is kept forever by default.
| What | How long |
|---|---|
| Your account | Until you delete it |
| Battles and results | Until you delete your account, then anonymised — see section 6 |
| Photos and videos | Until you delete them, or your account |
| Check-ins | 24 months, then reduced to a count |
| Reports you send | 24 months after the case closes |
| Security logs | 90 days |
| Backups | 35 days, then overwritten |
| A deleted account | Gone immediately. No 30-day holding period, nothing recoverable |
4. Who else sees your data
We do not sell your data. To anyone. Ever. There is no version of this product where that changes.
Other people in your battles see what you post there. That’s the point of a battle.
Your employer, if your company runs challenges. They see participation and totals only — how many people took part, team averages. They never see your individual results, your photos, your weight, or any personal battle you run outside work. This is built into the product, not a policy promise.
Companies that help us run it. Each one is contracted to handle your data only as we instruct, and never for their own purposes.
| What they do | Where they are |
|---|---|
| Hosting and database | United States |
| Photo storage | United States |
| Accounts and sign-in | United States |
| Sending email and text messages | United States |
| Payments, for subscriptions | Stripe |
Payments are handled by Stripe, and we name them because your card details go to them and never to us. We never see or store a card number.
Brands, only if you say yes, one photo at a time. If a brand runs a campaign you join, you choose per photo whether they can use it, and you see exactly where and for how long before you decide. Joining a campaign never requires giving anyone your photos, and a brand never gets your email or phone number from us.
Anyone we’re legally required to give it to. We’ll tell you unless we’re forbidden from doing so.
5. Where your data is
Your data is stored in the United States. BattleItOut is offered in the United States only, so we do not transfer your data to another region.
6. What you can do
All of this is in the app under Settings. None of it requires emailing us or waiting.
| Right | Where |
|---|---|
| Get a copy of everything | Settings → Download your data. A link by email, usually within minutes |
| Delete your account | Settings → Delete my account. Immediate |
| Correct your details | Settings → Edit profile |
| Delete any photo or post | Settings → Your photos, or the post itself |
| Take back photo permission from a brand | Settings → Your photos |
| Turn off notifications | Settings → Notifications, per type or per battle |
| Hide yourself from boards | Settings → Privacy. You still compete |
| Block someone | Their profile, or any report |
What happens when you delete your account. Your name, email, photo, posts and routines are deleted. Battles you were in still exist for the people still in them, and you appear as “a former member”. We can’t delete someone else’s record of a battle they ran, and we’d rather say that than imply a clean erasure.
If you’d rather ask us, write to support@battleitout.com. We answer within 30 days. If you’re not happy with the answer you can complain to the California Privacy Protection Agency.
7. California
If you live in California, you have the right to know what we collect, to delete it, to correct it, and to opt out of sale or sharing.
We do not sell or share your personal information, as those words are defined by California law. There’s nothing to opt out of, and no “Do Not Sell” link, because there’s no sale.
We don’t discriminate against anyone who exercises a privacy right.
8. Children
BattleItOut is for people 18 and over. You confirm your age when you create an account.
Children can appear in a family battle — a photo of dinner has children at the table. Their parent posts it, holds the account, and is confirming they’re the parent or guardian.
A child never has their own account, never receives a notification, and never appears anywhere public.
If we learn an account belongs to someone under 18, we delete it.
9. Keeping it safe
Encrypted in transit and at rest. Access limited to people who need it, logged when used. Photos stored with names that reveal nothing and are not guessable.
If there’s a breach affecting your data, we’ll tell you and the relevant authority within 72 hours of finding out. Our plan for that is written down before we need it, not during.
10. Cookies and similar
We use the minimum: one cookie to keep you signed in, and one to remember your settings.
No advertising cookies. No third-party trackers. No analytics service that sends your behaviour to another company. We measure how the product is used with our own database, and none of it leaves.
11. Changes
If we change something that matters, we’ll tell you in the app before it takes effect — not by quietly updating this page.
12. Contact
BattleItOut is operated by T-Invent, LLC.