RepForge legal pack

Privacy Policy

Effective Date: 14 August 2026

This Privacy Policy explains how Peasant Made Games ("Company," "we," "us," or "our") collects, uses, discloses, stores, and otherwise processes personal information when you use RepForge and related Services. This Policy should be read together with our Terms of Service.

1. Scope

This Policy applies to personal information we process through the app, related websites, support channels, events, social features, marketing communications, and third-party integrations that we control.

This Policy does not apply to third-party platforms, app stores, wearables, payment processors, social networks, or fitness services that have their own privacy notices.

2. Categories of information we collect

Account and profile information, such as username, email address, password hash, country or region, language, age band or date of birth if collected, guild or faction info, profile image, and support history.

Game activity information, such as progression, dungeons entered, raid participation, PvP records, inventory, loot, rankings, challenge outcomes, reports, moderation history, anti-cheat signals, and gameplay telemetry.

Game activity derived from exercise. When you complete an in-game workout we record what the game needs to run: the exercise selected, repetitions or duration completed, and the resulting challenge outcome. This is gameplay progression data. If you choose to connect a third-party fitness or health platform, we receive only the specific activity signals you authorize, and you may disconnect at any time.

Body measurements and movement preferences. So the game can scale encounters and choose exercises that suit you, RepForge asks for your height, your weight, and your body fat percentage. It also stores your training goals, your available equipment, and your preferences about which movements to include or avoid, such as whether you train seated, which limbs you load, and whether to avoid impact.

These three measurements stay on your device unless you switch on "Back up my measurements" in Settings. That setting is off unless you turn it on. Leave it off and they are never sent to us, are not in your account, and cannot be lost in a security incident on our side. Switch it on and they are stored with your account so they survive a change of phone. Switch it back off and we delete the copy we hold. You can view, change, or erase them at any time from within the app.

We do not ask for and do not store any medical condition, diagnosis, medication, treatment history, pregnancy status, or free-text health note. The app asks only which movements to avoid, never why.

Device, technical, and usage information, such as device identifiers, app instance identifiers, crash logs, IP address, operating system, language, approximate location inferred from IP, fraud indicators, and diagnostic information.

Payment information, which may be processed by app stores or payment processors. We typically receive transaction metadata, receipts, purchase status, and limited billing details rather than full payment card numbers.

Communications and user content, such as support tickets, survey responses, social links, screenshots, evidence submitted in disputes, messages in community features if those features exist, and content submitted during events or promotions.

3. Sources of information

We collect information directly from you when you create an account, edit your profile, log workouts, connect services, contact support, make purchases, participate in raids or events, or submit content.

We collect certain information automatically from your device and use of the Services.

We may receive information from third-party services you connect or authorize, such as health platforms, fitness trackers, wearable platforms, social media platforms, anti-fraud vendors, analytics providers, payment processors, and event partners.

4. How we use information

To provide, maintain, secure, and improve the Services.

To create and manage accounts; authenticate users; save progress; deliver raids, dungeons, PvP, guild systems, and game features; and sync gameplay state across devices.

To receive, interpret, or display connected fitness data and user-entered workout data for gameplay, fairness, and personalization.

To operate leaderboards, rankings, achievements, matchmaking, anti-cheat systems, and moderation workflows.

To process purchases, subscriptions, refunds, receipts, and event registrations.

To send transactional messages, service notices, security alerts, and support responses.

To analyze bugs, performance, retention, feature usage, conversion, safety events, and gameplay balancing.

To protect users, enforce our Terms, investigate fraud or cheating, and comply with legal obligations.

To send marketing communications where permitted by law and subject to your choices.

5. Legal bases for processing where required

Depending on your location, we may rely on one or more of the following legal bases: performance of a contract, consent, legitimate interests, legal obligation, and protection of vital interests.

Where we rely on consent, you may withdraw consent at any time, but this will not affect processing already completed before withdrawal.

6. How we disclose information

We may disclose information to service providers that help us host the Services, analyze use, detect fraud, process payments, manage customer support, send communications, run events, or provide infrastructure, subject to contractual safeguards.

We may disclose information to connected third-party platforms at your direction when you choose to link accounts or share content.

We may disclose information to other users through features you choose to use, such as usernames, guild names, rankings, leaderboards, event participation, or other visible profile fields.

We may disclose information in connection with a merger, acquisition, financing, reorganization, sale of assets, or similar corporate transaction.

We may disclose information to comply with law, respond to lawful requests, protect rights and safety, and enforce our agreements.

7. Sensitive and health-related information

RepForge asks for three body measurements: height, weight, and body fat percentage. They are used to scale the game to you. Under laws such as the Washington My Health My Data Act, the Nevada consumer health data law, and Article 9 of the UK and EU GDPR, that is health information, and we treat it accordingly. We do not receive them at all unless you switch on measurement backup in Settings, which is off by default. Until you do, they exist only on your phone.

We collect nothing else about your health. We do not ask for or store medical conditions, diagnoses, medications, treatment history, disability status, or pregnancy status. We do not calculate or display body mass index or calorie estimates. The app asks which movements to avoid, never why.

Your measurements are used only to run the game. They are never sold, never shared with advertisers, data brokers, insurers, or employers, and never shown to other players. Other players see your character and your level, not the numbers behind them.

Game activity derived from exercise, the exercises you completed and the repetitions or duration recorded, is progression data used to run the game. Depending on where you live, some of that activity data may still be treated as consumer health data under laws such as the Washington My Health My Data Act, the Nevada consumer health data law, Article 9 of the UK and EU GDPR, or state sensitive-data provisions. We process it only as described in this Policy, apply the protections those laws require, and obtain consent where consent is the applicable basis.

If you connect a third-party fitness or health platform, we receive only the signals you authorize. You may disconnect at any time, and we will stop receiving that data.

We are not a covered entity or business associate under HIPAA, and the Services do not create a doctor-patient relationship or replace medical care.

8. Children and age restrictions

The Services are not directed to children under 13 unless we expressly launch a separate compliant child experience. If we learn that we collected personal information from a child in a manner not permitted by applicable law, we will take steps to delete that information or obtain the required consent.

Parents or guardians who believe a child has provided information to us without proper authorization may contact privacy@peasantmade.games.

9. Retention

We retain information for as long as reasonably necessary for the purposes described in this Policy, including to provide the Services, maintain records, resolve disputes, prevent fraud, comply with legal obligations, and enforce our agreements.

Body measurements are a special case. If measurement backup is off, which is how it starts, we hold none of them and there is nothing to retain. If you switch it on and later switch it off, we delete the copy we hold from our live systems within 30 days and from backups within 90.

Retention periods may vary by data type, account status, legal requirements, and security needs. We may de-identify or aggregate information and keep the de-identified or aggregated data where permitted.

10. Security

We use reasonable administrative, technical, and physical safeguards designed to protect information against unauthorized access, disclosure, alteration, and destruction. No system is perfectly secure, and we cannot guarantee absolute security.

You are responsible for using a strong password, keeping your credentials confidential, and notifying us promptly if you believe your account has been compromised.

11. International transfers

We may process and store information in countries other than where you live. Where required, we use legally recognized transfer mechanisms or appropriate safeguards for cross-border transfers.

12. Your privacy rights

Depending on where you live, you may have rights to request access to, correction of, deletion of, portability of, restriction of, or objection to certain processing of your personal information, and to appeal certain privacy decisions.

You may also have the right to withdraw consent, opt out of certain targeted advertising or profiling, and request information about categories of personal information collected, used, disclosed, or sold/shared if applicable under local law.

To submit a request, contact privacy@peasantmade.games. We may verify your identity before acting on the request. You may also designate an authorized agent where permitted by law.

13. Marketing choices

You can opt out of marketing emails by using the unsubscribe link in those messages or contacting us. We may still send non-marketing service communications.

You may manage certain device-level permissions and tracking or advertising settings through your device and platform controls.

14. Cookies, SDKs, and similar technologies

Our websites and apps may use cookies, local storage, SDKs, and similar technologies for authentication, preferences, analytics, crash reporting, fraud prevention, attribution, and Service functionality.

If required by law, we will provide an appropriate consent or opt-out mechanism.

Your body measurements and movement preferences are excluded from analytics, crash reporting, and attribution. They are not written to logs and are not attached to diagnostic reports, so a crash report never carries them.

15. Region-specific disclosures

European Economic Area and United Kingdom (GDPR / UK GDPR). Our legal bases are set out in Section 5. You have the rights described in Section 12, including access, rectification, erasure, restriction, portability, and objection, and the right to lodge a complaint with your supervisory authority. Where we rely on consent, including for any data treated as special category under Article 9, you may withdraw it at any time. Cross-border transfers are covered in Section 11.

California (CCPA/CPRA). You may request to know, delete, and correct personal information, and to limit the use of sensitive personal information. We do not sell personal information and do not share it for cross-context behavioural advertising. We do not use sensitive personal information to infer characteristics. Submit requests to privacy@peasantmade.games; we will not discriminate against you for exercising these rights.

Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana and other US state privacy laws. You have rights of access, correction, deletion, and portability, and the right to opt out of targeted advertising, sale, and certain profiling. Where required, you may appeal a decision by replying to our response.

Washington My Health My Data Act and Nevada SB 370. These laws cover consumer health data held by companies that are not subject to HIPAA. Your exercise activity is within scope, and your body measurements are too if you have switched on measurement backup. We ask for your consent before collecting either, separately from the rest of sign up, and measurement backup is a distinct setting that starts off. We do not sell consumer health data and never have, so no authorisation to sell is sought. We honour deletion requests across our live systems and our backups, and we pass them on to our service providers. Washington residents may enforce these rights directly against us. Our consumer health data notice sets this out in full.

Biometric information. We do not currently collect biometric identifiers. If a future version of the Services uses a camera, motion sensors, or similar technology to identify or count movement in a way that constitutes biometric data under laws such as the Illinois Biometric Information Privacy Act, the Texas CUBI, or the Washington biometric statute, we will provide the specific notice, obtain the written consent, and publish the retention and destruction schedule those laws require before that feature is enabled.

Federal Trade Commission Health Breach Notification Rule. Where the Rule applies to health information held by an app, we will provide the notifications it requires in the event of an unauthorized disclosure.

If we ever use data for targeted advertising, for profiling with legal or similarly significant effects, or for any sale or sharing concept defined by law, this Policy and the in-app controls will be updated before that use begins.

16. Changes to this Policy

We may update this Privacy Policy from time to time. If we make material changes, we will provide appropriate notice and update the effective date.

17. Contact us

For privacy questions or rights requests, contact privacy@peasantmade.games or 5488 Patterson Dr., Troy, MI 48085, United States.