Last updated October 27, 2026. Applies to Challengrs 2.0.1 and later.
Mekina Software LLC provides Challengrs. This policy describes our handling of fitness information that may qualify as consumer health data, including under Washington’s My Health My Data Act. It supplements our Privacy Policy.
What we collect and why
When you use workout challenges, we collect the photos you submit, exercise dates, workout classifications, training goals and onboarding answers, challenge participation, and the points, streaks and progress calculated from them. These records are associated with your account. We collect them from you and from the app’s calculations and on-device image classifier.
We use this information to provide the challenges you request, verify check-ins, calculate results and show your contributions to your squad. We also handle reports to protect users and investigate misuse. You choose whether to submit photos or join a squad. Photos you submit are visible to the members of the squad you check in to. Do not include bystanders or information you do not want those members to see.
We do not collect clinical records, heart-rate readings, or HealthKit records. We do not infer diagnoses from workout photos. We do not use geofencing to identify visits to health-care facilities.
Who receives it
Convex provides the database, file storage and server functions for these records. Members of your squads receive the workout contributions you share. People authorized by Mekina Software LLC may review reported content and handle support or privacy requests. Other service providers receive the account, purchase, notification or device information described in our main Privacy Policy. They do not receive workout photos or classifications for advertising.
We do not sell consumer health data. We do not use or share it for targeted advertising. Optional product analytics and our diagnostic uploads are disabled in 2.0.1. We may disclose limited information when the law requires it, subject to the protections that apply.
Your choices and rights
You may request confirmation of collection, access, a copy, correction, deletion, or withdrawal of consent by emailing privacy@mekina.io. You may also delete your account in Profile, then Settings, then Delete account. You do not need to send a second request to initiate deletion with our account service providers. Some processing is necessary to provide photo-based workout challenges; withdrawing permission for that processing can require ending your account.
We verify requests using information already associated with the account. Where the law provides these rights, you may ask for the categories of recipients and information about recipients of your consumer health data. We respond within the applicable legal period, generally 45 days for Washington consumer health data requests, subject to lawful extensions. If we deny your request, appeal to the same email address with the subject “Privacy appeal”. We will explain the outcome and any right to complain to the appropriate regulator. Washington residents may contact the Washington Attorney General. We do not penalize people for exercising their privacy rights.
Account deletion ends access immediately. Background jobs remove your photos, exercise history, classifications, weekly progress and recorded results. We queue deletion requests to our account service providers and retry failures. Providers may process requests asynchronously. Backups follow the applicable deletion process and legally permitted retention. We retain only limited security, moderation and deletion records where necessary for those purposes or to meet legal obligations.
Contact
Mekina Software LLC, 18611 Eddy St, Northridge, CA 91324, United States.
Email privacy@mekina.io.