Privacy Policy

Effective October 13, 2026

IRLXP is a personal progress tracker made by Zach Gaccione. This page explains what the app stores, where, and how you stay in control of it. The short version: the app keeps your own activity log so it can show your levels, it never sells or shares that information, and you can delete everything at any time.

What the app stores

• Your progress: the character name you choose, the categories and activities you set up, each activity you log with its time and XP, coin purchases, and your appearance settings.
• Your account, if you create one: your email address and a scrambled (hashed) form of your password. The password itself is never stored.
• Widgets (iPhone and iPad, iOS 17 or later): if you add an IRLXP widget, a copy of your level, skills and habits is kept on that device only, in its keychain, so the widget can show them. Habits you tap on a widget are added to your game the next time you open IRLXP.

The app does not collect your contacts, location, photos or anything else from your phone, and it reads Apple Health only if you turn that on (below). It contains no advertising and no third-party analytics or tracking.

Apple Health (iPhone and iPad app, optional)

If you switch on Settings → Apple Health in the app, IRLXP reads your workouts (type, start, end and length), your step counts (only to work out the minutes you spent walking) and your sleep from Apple Health, from the day you switch it on. It turns them into XP entries in your game: a workout's type and minutes, one "Walking" entry a day with its minutes, and "Slept 7+ hours" with the hours slept. IRLXP never writes anything to Apple Health and does not keep your raw step counts or sleep stages. These XP entries are saved and synced like anything else you log (on this device, and on irl-xp.com if you have an account). Their XP counts toward your level, your weekly XP and duels, which your friends can see. The entries themselves (name, XP and the day, never the time) are seen only by friends you turn on activity sharing for. Apple Health data is never used for advertising, marketing or data mining, never sold, never stored in iCloud and never shared with anyone else, and Apple Health entries are left out of any counts of the most-logged habits. You can switch it off in the app at any time, delete any entry, or delete your account to remove them from our server. You can choose what IRLXP may read in the Settings app → Privacy & Security → Health → IRLXP.

Where it is kept

• Without an account ("Continue without an account"), your game stays on your device only. The only thing sent is the anonymous daily count described below.
• With an account, a copy of your progress is stored on the IRLXP server at irl-xp.com, hosted by Hostinger, so it can be backed up and synced to your other devices. A copy is also kept on each device you sign in on so the app works offline.

How it is used

Your information is used only to run the app for you: showing your levels, syncing between your devices, sending a password-reset email if you ask for one, and emailing you when a friend challenges you to a duel (at most once a day; you can turn these emails off in Menu → Settings or with the link in each email). It is not used for marketing and is not shared with or sold to anyone.

To know how many people use IRLXP, the app tells our server once a day that it was opened. That message contains a random number created on your device (kept on the server only in scrambled form), whether you use the iPhone app or the website, the app version, which link first brought you here (if any), whether you are signed in and have finished setup, how many activities you have logged so far (a count only), and, in the iPhone app, whether the daily reminder is switched on and whether you have logged a habit from a widget (yes or no only; nothing about Apple Health). It never says which activities you logged and is not shared with anyone. Our download page counts visits per link in the same way, without cookies.

The person who runs IRLXP can see account email addresses, character names and usage totals (such as how many activities were logged and when the app was last opened), and a list of the most-logged activity names across all players (without saying who logged them), in order to keep the service working and to improve it.

Deleting your data

• In the app, open Menu → Settings → Delete Account. This permanently removes your account and all progress stored on the server, including your friendships, duels and any prize card picture you sent. Safety reports are kept for review: ones you made lose any link to your account, and ones other players made about you stay, and a prize claim keeps only its claim number and a scrambled form of the email (so the same email can’t claim twice), without your name.
• Deleting the app from your phone removes the copy kept on that device.
• You can also email contact@irl-xp.com and your account will be deleted for you.

Backups

Menu → Backup & Restore lets you save a file containing your progress. That file is yours; it is saved wherever you choose to put it and is not sent to the IRLXP server.

Children

IRLXP is not directed at children under 13 and does not knowingly collect information from them.

Friends

If you use Friends, each account gets a random friend code. Anyone who has your friend code can add you as a friend right away. Someone who knows the email you signed up with can only send you a friend request, which you accept or decline, and they are never told whether that email has an account. Friends can see your character name, level, Skill Levels, the date you started, total XP, gear and bonus items, this week's XP total and whether you were active recently, plus your best streak and how many duels you've won if you turn those on in Settings → Player card. They never see your email or your notes, and they see your activity log only if you turn on activity sharing for them (explained below). Either side can remove the friendship at any time, and deleting your account removes your code, your friendships and your profile card.

If you invite someone by email, we store only a scrambled version of that address and a masked form such as a***@example.com, so they receive your friend request when they sign up; the invite is deleted when that happens, when you cancel it, or after 90 days. If the address already belongs to a player, you become friends right away and see their character name; otherwise they get an invite. Either way, the other person sees only your character, not your email.

Activity sharing is off by default. If you turn it on for a particular friend, that friend can see the names, XP and times of the activities you logged in the last 7 days (and the amount, if you entered one). Each side decides separately, and you can turn it off at any time.

Any friend can challenge you to a duel. A duel uses how much XP you earned in each skill on each of the last 7 days, including XP lost to bad habits, and shows your skill names and the day of the week for each move. Each move is also named after the biggest activity in it: you always see your own, and your friend sees yours only if you have turned on activity sharing for them. A duel never shows the time you logged anything. The duel's result is stored on the server so both of you can watch it again, and it is deleted with your account.

You can block a friend, which removes them and stops them from adding you again, and you can report a player. A report sends the reported character's name, your reason and both account numbers to the developer, who reviews it and may rename or remove the reported account. Offensive character names are replaced with "Adventurer" before anyone else sees them.

Changes and contact

Level 25 prize card. If you claim the free printed card, the app sends a picture of your character card, your character name, level and account email to the developer, along with a summary of your logged activity so the level can be checked. The picture is kept on the server until your account is deleted, and a copy arrives in the developer’s email inbox. Your mailing address is only what you choose to email us; it is used to mail your card and nothing else.

If this policy changes, the new version will be posted at this address with a new effective date. Questions, bug reports and data requests: contact@irl-xp.com.