Privacy Policy — Group Challenge (אתגר קבוצתי)

Last updated: 2026-10-25

Group Challenge (אתגר קבוצתי) is made by Magmanet. This policy explains what the app does with your information. The short version: the only things that leave your phone are the nickname you choose and the daily numbers you send to your own challenges, and only the members of each challenge see them. Steps are counted on your phone. You need no account, e-mail or phone number. The app also sends anonymous usage statistics, which you can turn off.

What is sent to the server, precisely

• Your nickname (2–16 characters; no real name needed), shown to the members of the challenges you are in.
• The challenges you create or join: the title, what is measured (e.g. steps or pages, or your own unit), competition or team goal, the daily target or team goal, and the dates.
• One number per day per challenge that you send – for example "8,240" steps or "20" pages – with the date and whether you typed it or took it from the phone's step counter. Sending again for the same day replaces the number. Nothing is sent by itself: you press Send.
• Your choices inside a challenge: whether you hide your numbers, and the emoji cheers (👏 🔥 ❤️ 💪 🎉) you give to items in the feed.
• Anonymous usage statistics (see below), which you can turn off. They never contain your numbers, steps, titles or nickname.

The app does not send your step history, minute-by-minute steps, location, health records, contacts, e-mail address or phone number. It does not use Health Connect or HealthKit. There is no advertising and no tracking. We never sell or share your data.

Steps from your phone (optional)

If you turn on "Count steps automatically" for a steps challenge, the app first explains what it does and then your phone asks for permission ("Physical activity" on Android, "Motion & Fitness" on iPhone). The app then reads the phone's own step counter to show you today's steps. The running count and today's total are kept only on your phone. When you tap "Use these steps" and Send, that single daily total is sent to the challenge – the same as if you typed it. You can turn this off at any time (Settings or the challenge screen), or never turn it on and type your numbers.

Who sees what

• Members of a challenge (people who joined with its invite code) see its title, the members' nicknames, the leaderboard or team progress, the daily numbers, streaks and the feed of achievements and cheers.
• Hide my numbers (challenge menu): the other members see only your rank and your progress percent, not your numbers; your numbers still count. You always see your own.
• Nobody outside a challenge can see it. Cheers show who cheered only to you (your own) and as counts to others.

Where your data is stored

• On your phone: your nickname and settings, a copy of your challenges (so they open offline), numbers waiting to be sent when you were offline, and – if automatic steps is on – today's step counter values, in the app's private storage. They are removed when you uninstall the app. The Copy backup feature (Settings → Your data) copies this to your clipboard as text; where you paste it is up to you.
• On the Magmanet server: the data listed above under "What is sent", run by Magmanet on a server hosted in the European Union (by Contabo). It is not sent to Google or any other third party and is not used for advertising or profiling. Data is encrypted in transit (HTTPS). The server keeps no access log with your IP address for these requests; the address is used in memory only, to limit abuse.

The account is anonymous: the server creates a random user id and access tokens, stored on your phone. The app also stores a random number made at install time (not a device identifier), which it sends once when the account is created so the server can limit abuse. Other users never see these ids; inside a challenge members are numbered 1, 2, 3…

How long, and how to delete

• Leave a challenge (challenge menu): you are removed with all your numbers, feed items and cheers in it. The organizer can also remove a member, with the same effect, or delete the challenge for everyone.
• Delete my data (Settings): you leave every challenge (your numbers go with you), and your nickname and anonymous account are deleted from the server.
• Challenges are deleted automatically 180 days after their last day.
• Uninstalling the app does not delete your data on the server (the anonymous account can't be reached any more), so use "Delete my data" first, or contact us (below).

Reminders

The optional daily check-in reminder is a notification scheduled on your phone at the time you choose. Nothing is sent to a server for it. Turning it on asks for the notification permission.

Internet use

The app connects to the Magmanet server for your challenges. Once a day it also checks for a newer version by asking the Magmanet server (EU, Contabo) — the request contains only the app name, its version number and how it was installed (site/Google Play); the server counts checks per app and version in aggregate, stores no identifiers and no IP address; if the server is unavailable the app downloads the public version file from GitHub Pages instead (GitHub may see your IP address). If a newer version exists, the app shows a notice and you choose whether to open the download link. You can turn this off in Settings ("Check for updates automatically").

When you share an invite or a certificate, the text (or image) is created on your phone and contains the challenge title, the invite code or results and a link to the app's page on the Magmanet apps site (GitHub Pages). It only goes where you send it.

Anonymous usage statistics

Group Challenge sends anonymous usage statistics over HTTPS (a short ping once a day; usage events a few times a day at most, batched) to Magmanet's own server, hosted in the EU (Contabo), not to Google or any other third party. It sends the app name and version, your Android version, your phone's manufacturer and model (such as Samsung SM-S911B; never the name you gave the phone), your language, how the app was installed (from Google Play, the website or elsewhere), a random install ID, and anonymous usage events (which screens and features are used and for how long, for example that a number was sent or an invite shared). The random ID is made by the app when it is installed; it is not a device identifier. No personal content and no health or activity numbers are sent with the statistics: no steps or other numbers, challenge titles or nicknames.

On the server the ID is hashed and no IP address is stored. Raw data is deleted after 400 days. It is used only to count active users and improve the app, never for advertising or profiling, and it is never sold or shared.

This is on by default. You can turn it off in Settings ("Share anonymous usage statistics"). Turning it off stops sending immediately and deletes the random ID and any unsent usage events from your phone.

Permissions

• Internet: your challenges on the Magmanet server, the daily update check and the anonymous usage statistics.
• Physical activity (Android) / Motion & Fitness (iPhone): only if you turn on automatic steps; reads the phone's step counter on the phone.
• Notifications (and starting after a restart): only for the optional daily reminder.

The app has no access to your contacts, photos, camera, microphone, location or health records.

Children

Group Challenge is a general-audience app and is not directed at children.

Changes

If this policy changes, we'll update the date above and publish the new version at the same address.

Contact

Questions, or a request to delete your data? Open an issue at https://github.com/Shauls/magmanet-apps/issues