Heavy Bag Privacy Policy

Heavy Bag is made by Fhusster, an independent studio in Ottawa, Canada. This policy explains what the app stores, what it sends to the game server, and what it never touches. The short version: there is no account to create, no email or password, no analytics, and no advertising trackers. The game keeps a small amount of data so your progress, your fighter, and your place on the leaderboard survive between sessions.

Your anonymous player identity

The first time Heavy Bag goes online it creates an anonymous player record for you on the game server (hosted by Supabase). This record has a random identifier and no personal details. The identifier is stored in your device's keychain and syncs through iCloud Keychain, so a reinstall or a new phone signed into the same Apple ID keeps the same fighter. I never ask for your name, email address, phone number, or location.

What is stored on the server

• Your fighter profile: the display name you chose (or the one the game generated), your avatar, skin tone, glove and shorts colours, experience points, level, and rating.
• Offline runs: your score, the run's seed and duration, a count of perfect, good, normal, and missed strikes, a score-over-time curve, and whether a continue was used. These feed the Hall of Fame and let me spot impossible scores.
• Online matches: for Sparring, Fight Night, Undisputed, and Call Outs, the server holds the match seed, both players' live score, hearts, streak and state during the round, the result, and the resulting rating, fight point, and experience changes. Your recent opponents are kept so matchmaking can vary who you meet.
• Call Out settings: whether you have blocked call outs from other players.
• Reports: if you report another player's name, the server stores which player was reported and by whom.

Other players can see your display name, avatar, kit, level, rating band, scores, and fight points wherever the game shows them: the Hall of Fame, opponent bars, brackets, and call-out lists. Choose a display name you are comfortable showing publicly. Names are checked against a blocklist and may be reset if reported.

What is stored on your device only

• Your token balance, revives, owned cosmetics, and daily offer state, kept as a local ledger.
• Control preferences such as the position of the Line and the music setting.
• A short diagnostic trail written by the game's crash reporter. It stays on the device. It is never uploaded automatically; in beta builds you can choose to share it with me.

iCloud

Career progress (which levels you have completed and your best star rating on each) is mirrored to iCloud key-value storage tied to your Apple ID, so it follows you to a new device. Apple handles that data under Apple's privacy policy. Nothing in iCloud is visible to me.

Purchases

Token packs are sold as in-app purchases processed entirely by Apple through the App Store. The game receives a transaction identifier and the product purchased so it can credit your tokens, and nothing else. I never see your payment details. Refunds and receipts are handled by Apple.

Ads

Heavy Bag offers optional rewarded video ads for tokens. Ads are served by Google AdMob. Before any personalised ad is shown, the app asks for your permission through Apple's App Tracking Transparency prompt and, where required, a consent form; if you decline, ads are non-personalised. AdMob may collect your device's advertising identifier, IP address, and coarse device information to serve and measure ads. See how Google uses data from advertising. You can reset or limit your advertising identifier in iOS Settings under Privacy & Security.

What I do not do

• No analytics SDKs, no behavioural tracking, no fingerprinting.
• No selling of data, and no sharing with anyone beyond the service providers named above (Apple, Supabase, and Google AdMob for ads).
• No access to your contacts, photos, camera, microphone, or precise location.

Children

Heavy Bag is not directed at children under 13, and I do not knowingly collect personal information from them. The only player-provided text in the game is a display name.

Retention and deletion

Your player record, scores, and match history are kept for as long as your anonymous identity exists so that the leaderboard and your rating stay consistent. To delete everything held about you, email fhussterdev@gmail.com from the device with the game installed, or include your display name, and I will erase the record within 30 days. Deleting the app removes the on-device data; the iCloud copy of your career progress can be cleared from iOS Settings under your Apple ID's iCloud storage.

Security

All traffic between the app and the server is encrypted in transit. Server access is limited to the studio.

Changes

If what the game collects changes, I will update this page and its effective date. Material changes will also be noted in the app's release notes.

Contact

Questions about this policy: fhussterdev@gmail.com. Fhusster, Ottawa, Canada.