OPERATED BY SING AND CLAP (com.singandclap.gm) • LAST UPDATED: OCTOBER 2026
Welcome to gm ("the App", "we", "us", or "our"), operated by singandclap.com (com.singandclap.gm). This Privacy Policy explains how your information is collected, used, and protected when you use our mobile application across iOS and Android.
1. Information We Collect
We believe in radical data minimalism. We only collect data required for the core game loop:
Account & Profile: Handle / display name, avatar configuration, and anonymized account identifiers (managed securely via Supabase Auth).
Wake-up & Activity: Exact timestamp of your daily "gm" clock-in, squad ranking, and consecutive daily streak counts.
Motion Verification (Anti-Cheat): Device pedometer deltas (verified on-device to confirm physical motion after wake-up). Raw motion sensors are evaluated locally and never uploaded.
Health & Sleep Metrics (Optional): If you grant permission, anonymized sleep duration from Apple Health or Health Connect is ingested solely to calculate your daily sleep quality efficiency.
Telemetry & Diagnostics: Performance latency and anonymized crash analytics collected via PostHog to ensure high availability and sub-second leaderboard updates.
2. How We Use Your Information
To compute the daily squad leaderboard (Dawn King to Sloth).
To verify genuine wake-up events against TrueTime NTP servers and deter timezone tampering.
To transmit curated, haptic morning alarms and audio wake-up reactions between mutual friends.
To maintain reliable service operations and prevent abuse.
3. Data Sharing & Infrastructure
We never sell, monetize, or broker your personal data.
We work exclusively with ISO 27001 / SOC 2 compliant infrastructure:
Supabase: Encrypted PostgreSQL database and real-time WebSocket replication for squad state.
PostHog EU: Privacy-first product analytics hosted in the European Union.
4. Health Data Policy
Health and pedometer data are accessed strictly with your explicit operating system permission. In strict compliance with Apple HealthKit and Google Health Connect guidelines, health data is never sold, shared with advertising brokers, or used for marketing purposes.
5. Data Retention & Deletion
All data in transit is encrypted using industry-standard TLS 1.3 / HTTPS. You retain full control over your data. You may request the permanent deletion of your account, leaderboards, and streak records at any time by contacting us.
6. Contact Us
For any privacy requests, questions, or account deletion: