This Privacy Policy explains what Kylan Hill, an individual doing business as TrekBattles ("we", "us") collects when you use the TrekBattles app and website (the "Service"), how we use and share it, and your choices. Effective November 14, 2026. By creating an account you agree to it.
Account details: your name, email, birth date (it cannot be changed), username or random alias, and your password (stored securely by our login provider).
Activity and health data: daily steps and distance, workouts (type, time, length, distance and the steps in them), and streaks. When you connect Health Connect (Android) or Apple Health (iPhone), we read only the activity data you allow: steps, distance and exercise sessions. Entries you type in by hand are ignored. We read it from the day you created your account onward, including in the background when the app is closed, and never anything from before that day. We do not collect heart rate, location, sleep or medical records.
Game data: your creature, its name, level, stats, badges, cards and deck, collected cards, battles and results, groups and rankings, coins, purchases, backgrounds, friends, and the invite codes you share or use (who invited whom, and whether the invite counted).
Photos: the selfie you take with your camera for the back of a card. The app asks permission to use the camera only for this.
Purchase information: you can buy change tokens with real money. Google Play (Android) handles the payment, and we never see or keep your card number or payment details. We keep a record of each purchase: your account ID, what you bought, how many tokens it gave, the date and the store order number, so we can add the tokens, handle refunds and keep our accounting records.
Technical data: we do not use advertising or analytics tools, we do not collect advertising IDs, and we have no crash reporter. Our providers (Google Firebase for the app and its servers, and Cloudflare for the website) automatically keep standard server logs, such as IP addresses and request times, to keep the Service running and secure, and Firebase gives each app install a random installation ID so its services work. We do not use these logs for advertising or to build profiles of players. We also count, for the whole game and without looking at any one person, things like how many players were active each day, to understand how the Service is used.
The activity data you share from Health Connect or Apple Health (steps, distance and exercise sessions; entries you type in by hand are ignored) is sent to our servers and used only to run the game for you: working out stats, levels, coins, badges, groups, battles and events, showing your progress to you in the app and on our website, and finding cheating. We do not sell it, we do not use it for advertising, and we do not share it with data brokers or advertisers. We do not use it to decide credit, jobs, insurance or anything like that. Our people look at an individual's activity data only when needed to give you support, keep the Service secure or follow the law. You can disconnect at any time in the app or in your phone settings; we then stop reading new data, and data already received stays until you delete your account. Our use of information received from Health Connect follows the Google Play User Data Policy, including its Limited Use requirements.
To run the game: place you in groups, run battles and events, award badges and rewards, and show your cards. To keep the Service safe: find cheating, filter offensive names, enforce our Terms and review reports. To support you and improve TrekBattles. To tell you what happened while you were away (for example a reward, a badge, or, once deck battles open, when a copy of your deck was battled), we keep a list of notifications that you see inside the app (the bell). We do not send push notifications or messages outside the app for this. The only emails we send are account emails, such as a password reset or the account deletion confirmation link. To process purchases, add the tokens you bought, handle refunds and keep records. We do not sell your personal information and we do not use it for third-party advertising.
Players you play with can see your public name (a random alias if you are 13), username, creature, level, streaks, your total step count, cards, deck, battle record, badges and group results. Your profile is public by default. You can switch it to private in Settings, and then only friends see your cards and details; accounts for players aged 13 are always private. Friends and players in your groups see the same information. Players who collect your card can see its photo, even if your profile is private, but only if they are 14 or older. By default nobody else sees your photo. If you turn on "Show my card photo" in Settings, other players who can see your cards (your friends, or everyone if your profile is public) can see it too, again only if they are 14 or older, and you can turn this off at any time. We never show your birth date or email to other players. Group leaderboards show each member's weekly score (steps or kilometres) to the other members of that group. Other players cannot see your card's stats until they battle it. A private profile does not hide your card from everyone: TrekBattles is a public card game that works with copies. Your friends, and anyone who holds a copy of your card (in their deck, in battles and in battle history), can still see your card, with your public name, even when your profile is private. Players in your groups see your public name, level and weekly score. Copies that others already hold stay in the game if you go private or delete your account, without your name or photo. Deck battles are not open yet. When they open, playing one will put a copy of your deck (your cards as they were, with your public name) in a pool for up to 6 hours or 10 battles so other players can battle it, and those players will see its cards and stats during the battle. You will be able to take it out of the pool in the app.
TrekBattles also has a website. It uses the same account and the same data as the app, so the activity and health data we receive from the app is shown to you there when you sign in, and the information that is public in the app (section 5) may also appear on the website, including card photos where section 7 says so. Data from the website and the app is stored together and handled under this policy.
The app uses your camera only when you choose to take the selfie for the back of a card. Your photo is stored in our database. It is shown to you and to every player aged 14 or older who collects that card, even if your profile is private. If you turn on "Show my card photo" in Settings, it is also shown to other players aged 14 or older who can see your cards (friends, or everyone if your profile is public). This is off by default and you can turn it off at any time. It may also appear on the website. You can add one photo per card, and it cannot be changed or deleted in the app; email us to have it removed. Players can report photos. Our staff (administrators and moderators) can see every photo, including photos on private profiles, to review reports and keep the game safe, and we may hide or remove any photo. Players aged 13 cannot add or see photos. Our own artwork is made with AI tools; we do not use your card photos or other personal information to create that artwork or to train AI models.
Coins are only earned by playing and are never sold. Change tokens can be bought with real money, and they are only used for things with a fixed price (see the Terms); they never buy a random result. On Android the payment goes through Google Play under Google's terms and privacy policy; purchases on iPhone are not available yet and will go through the Apple App Store. We record your coin balance, your change token balance and the purchases behind it, what you spend in the shop and the items you hold. To check a purchase, our server sends the purchase token and product ID to Google Play, not your name or email. Coins, change tokens and items are virtual and have no cash or other tangible value (see the Terms).
We use Google Firebase (Google Cloud) to run the login, database, photo storage, game servers and the account emails we send you (a password reset or the account deletion confirmation link), Cloudflare to host our website, and the Apple and Google app stores to deliver the app and to take and check payments (Google Play checks and confirms each purchase with our servers). These providers handle data for us and only for the Service. We may also share data when the law requires it, to protect someone's safety, or if our business is sold or merged (we would tell you). We do not share your data with advertisers.
We keep your data while your account is active. When you delete your account (in the app under Settings, then Delete account, or yourself on the website at trekbattles.com/delete-account; we email a one-time confirmation link to the address on your account first, to make sure it is you) we delete or anonymise your personal data, including the activity totals we kept from Health Connect or Apple Health, except what we must keep for legal, safety or accounting reasons. If we ban or delete an account for breaking the rules, we may keep the minimum needed (for example the email and the reason) to stop it coming back and to protect other players. Cards and results that other players collected may stay in the game without your name or photo. We keep a record of each purchase (your account ID, what was bought, the date and the store order number) for accounting, tax, fraud and refund purposes even after you delete your account; it does not contain your name or email. Once deck battles open, your deck copy in the deck battle pool is removed after 6 hours or 10 battles, or when you delete your account, and we keep a record of each deck battle (who played, the cards drawn and the result), and your in-app notifications, for as long as your account is active.
You can see and change most of your details in the app, switch your profile to private, turn off friend requests, and stop sharing health data in the app or in your phone settings. Depending on where you live you may also ask us to access, correct, export or delete your data, or object to some uses. Email support@trekbattles.com and we will respond within a reasonable time. You may also complain to your local data protection authority.
TrekBattles is for people 13 and older. We do not knowingly collect information from anyone under 13 and will delete it if we learn we have. Accounts for players aged 13 are restricted: random public name, no photos, private profile. Parents and guardians can contact us to review or delete a child's data. In some countries a parent or guardian must agree for a young person to use online services; if that applies to you, please have them agree before you sign up.
We protect data with access controls, encryption in transit, and limits on who can read it. No system is perfectly secure. Your data may be processed in the United States and other countries where our providers operate.
We may update this policy. If a change is important we will tell you in the app and ask you to accept it again. Questions or requests: support@trekbattles.com.