Privacy Policy

Arena Rivalry Club (the “App”) · Effective date: July 10, 2026

Arena Rivalry Club is a sports and fitness application that helps you find teammates, track workouts, join events and groups, book training sessions, and play music while you train. This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices you have. It applies to the Arena Rivalry Club mobile application and related services (together, the “Service”), operated by LMC Ventures, LLC (“we,” “us”).

1. Information We Collect

Information you provide

• Account information: your name, email address, and password, or your credentials via Sign in with Apple or Google Sign-In; your date of birth (used to verify you are at least 13 years old).
• Profile information: profile photos, bio, the sports you play and your skill levels, fitness goals, preferred training times, height, weight, sex (used only for calorie estimation), education/school, personal records, social media links you choose to add, and your general location (city/region) and hometown.
• Content you create: direct messages and group messages (including voice notes recorded with your microphone), comments, likes, events, groups, and workout posts you choose to share.
• Matching activity: profiles you connect with or pass on in Discover, and the connections you make.
• Bookings and payments: when you book a trainer or session, payment is processed by Stripe. Your card details are entered directly into Stripe’s secure payment interface — we never receive or store your full card number. We keep booking records (what you booked, amounts, and status). Trainers who accept payments complete identity and banking onboarding directly with Stripe.

Health and workout information (with your permission)

• Location / GPS: while you record an outdoor workout, we collect your precise route, distance, pace, and elevation. With the “Always” location permission, route recording can continue while the app is in the background during an active workout. You control route visibility with GPS privacy settings, and you can define privacy zones (for example, around your home) that we exclude from routes before they are stored or shared (the zone locations you define are saved to your account settings).
• Apple Health (HealthKit): with your consent we read heart rate, active energy, walking/running and cycling distance, step count, and heart-rate variability to display live workout stats, and we write your completed workouts (calories, distance) back to Apple Health. We never use Apple Health data for advertising, marketing, or data mining, and we never sell it or share it with data brokers.
• Heart-rate monitors (Bluetooth): with your consent we connect to Bluetooth heart-rate sensors to show live heart rate during workouts.
• Stored workout metrics: summaries of your workouts — including route (after privacy-zone filtering), distance, pace, elevation, average/maximum heart rate, and estimated calories — are stored on our servers so you can view your history and share workouts you choose to share.

Music services (optional)

• Spotify: if you connect Spotify, we store Spotify access tokens on your device and use them to show your playlists, display what’s playing, and control playback during workouts. We access your Spotify data solely to provide these features, we do not store your Spotify listening data on our servers, and disconnecting Spotify in the App removes its tokens from your device. Your use of Spotify is also governed by Spotify’s own terms and privacy policy.
• Apple Music: if you connect Apple Music, we access your music library and playback state on-device to provide the same features. Artwork may be fetched from Apple’s public iTunes catalog.

Collected automatically

• Device and usage basics: device push-notification tokens (so we can send notifications you enable) and basic technical information needed to operate the Service. The App does not contain advertising SDKs, does not use the Apple advertising identifier (IDFA), and does not track you across other companies’ apps or websites.

2. How We Use Information

• Provide the Service: teammate matching, workout tracking and history, events, groups, leagues, messaging, trainer bookings, and in-workout music.
• Show you relevant nearby people, events, venues, and activities.
• Process bookings and payments (via Stripe) and prevent fraud.
• Send notifications you enable (messages, events, activity).
• Keep the community safe: reviewing reported content and enforcing our Terms.
• Maintain, debug, and improve the Service.

We do not sell your personal information, and we do not share it with third parties for their own advertising.

3. Who We Share Information With

We share information only with service providers that help us operate the Service, with other users as you direct, and where required by law.

Other users: your profile is visible to other users of the Service so they can discover and connect with you. You control the visibility of each workout you share (public, friends, or private) and of your GPS routes (public, approximate, or private). Comments and messages are visible to the people or groups you send them to. When you delete your account, your direct messages are deleted; messages you sent in groups are retained but anonymized, and voice-note recordings you sent may persist in storage.

Legal: we may disclose information if required by law, or to protect the rights, safety, or security of users, the public, or the Service.

4. Your Choices and Controls

• Permissions: location, Apple Health, Bluetooth, microphone, camera, photos, music, and notifications are all optional iOS permissions you can grant or revoke anytime in Settings. Related features simply turn off.
• Privacy settings: control workout visibility, GPS route visibility, and privacy zones in the App’s settings.
• Blocking and reporting: you can block users and report content or profiles for review directly in the App.
• Music services: disconnect Spotify anytime in the App — this removes its tokens from your device. Apple Music access is managed by iOS and can be revoked in Settings.
• Notifications: disable push notifications in iOS Settings.

5. Data Retention and Deletion

We keep your information while your account is active. You can permanently delete your account in the App: Profile → Settings → Delete Account. Deletion removes your profile, profile and workout photos, workout history (including GPS route data and heart-rate data), connections, matching activity, bookings, and notification tokens from our systems. Some information may be retained where reasonably necessary: content you sent to other users (such as group messages and voice-note recordings) may be retained or anonymized rather than erased; block lists, images generated from your content (such as route map images or creator media), and safety reports about your account may be kept; and residual copies may persist briefly in encrypted backups before being purged. Payment records are retained by Stripe as required by financial regulations.

6. Your Privacy Rights

Depending on where you live (including under the GDPR in Europe or the CCPA/CPRA in California), you may have rights to access, correct, delete, or receive a copy of your personal information, and to object to or restrict certain processing. You can exercise most of these directly in the App (edit your profile; delete your account), or contact us at the address below and we will respond as required by law. We do not sell or “share” personal information as defined by the CCPA, and we honor these rights without discrimination.

7. Children

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. Creating an account requires a date of birth showing age 13 or older. If you believe a child under 13 has provided us personal information, contact us and we will delete it.

8. Security

We use industry-standard safeguards: encrypted connections (HTTPS/TLS) for our network traffic, authenticated access controls on our database, and payment handling delegated to Stripe (a PCI-DSS Level 1 provider). No system is 100% secure, but we work to protect your information and will notify you of any breach as required by law.

9. Changes to This Policy

We may update this policy as the Service evolves. We will post the updated version at this address, update the effective date above, and — for material changes — notify you in the App.

10. Contact Us