1. Controller and contact
The controller of the personal data processed through Reals is Aleix García, developer of Reals, operating from Spain (“Reals”, “we”).
For any privacy question or to exercise your rights, email us at reals.contacto@gmail.com.
2. Scope and minimum age
This policy applies to the Reals Android app (com.metta.reals) and to the reals.info website. Reals lets you create and complete goals and experiences (“Reals”), save memories, use social features (friends, groups, chats, competitions and the social feed), the virtual shop, the Reals+ subscription and the Reals AI tool.
Reals is intended exclusively for people aged 16 or over. During sign-up you are asked to declare that you meet this age; we do not store your date of birth or perform automatic document-based verification. If we learn that an account belongs to someone under 16, we will delete it.
3. Data we process
- Account and profile: email address, user ID, display name, username, avatar, friend code, language, theme and visibility and notification preferences. If you sign in with Google, we receive your email and the basic profile data Google shares.
- Reals and activity: titles, descriptions, category, difficulty, progress, habits, streaks, deadlines, reminders, completions, achievements, badges and statistics.
- Media: covers, photos and short videos (up to 10 seconds) in memories, competition evidence and group avatars.
- Social features: friendships and requests, groups, roles and invitations, followers, feed posts, likes, comments, reactions, inspirations, blocks, reports and the posts shown to you in the feed.
- Messages: direct and group chats, replies, reactions, read receipts and the temporary “typing” status.
- Location (optional): only if you add a place to a post, we store the place name, address and the coordinates you choose. If you tap “Use my current location”, the app accesses your location at that moment, in the foreground only.
- Reals AI: the text of your request, your language, the generated ideas, the date and your daily usage count.
- Purchases and subscriptions: product purchased, Google Play order ID and purchase token, status, purchase, renewal and expiry dates, subscription events, coin balance and items. We do not receive or store your card or payment method details.
- Rewarded ads: a record of each reward requested and verified (ad transaction ID, date and reward granted). Google AdMob also processes device data, as explained in section 7.
- Notifications: push token (Expo and Firebase Cloud Messaging), platform, in-app notifications and their read status.
- Suggestions and support: whatever you send us through the in-app suggestion form or by email.
- Technical data and internal analytics: user ID, event type (for example, daily app open, Real created or completed), date, platform and app version, plus our providers’ technical and security logs, which may include your IP address.
4. Purposes and legal bases
Where processing is based on your consent, you can withdraw it at any time through your device permissions or the ad privacy options in the app, without affecting the lawfulness of processing before withdrawal.
- Providing the service you request (account, Reals, memories, groups, chats, feed, competitions, shop, Reals AI, translations and notifications): performance of a contract (Art. 6(1)(b) GDPR).
- Processing and verifying purchases and subscriptions, delivering coins and activating Reals+: performance of a contract and compliance with legal obligations (Art. 6(1)(c) GDPR).
- Showing the rewarded ads you choose to watch and verifying the reward: performance of a contract. The use of identifiers and personalised advertising, where the law requires it, is based on your consent (Art. 6(1)(a) GDPR).
- Accessing location, camera or photo library: your consent, given through system permissions and only when you choose to use those features.
- Security, fraud and abuse prevention, moderation and handling reports: legitimate interests (Art. 6(1)(f) GDPR) and legal obligations, including EU digital services rules.
- Ranking the “For you” feed: performance of a contract and our legitimate interest in showing you relevant and varied content.
- Minimal internal analytics to understand and improve the app: legitimate interests.
- Handling support and data-rights requests and responding to valid requests from authorities: legal obligation.
5. Who can see your content
Your public profile (name, username, avatar, badges and cosmetic items) is visible to other Reals users. When you post to the feed you choose the audience: “Public” (any registered Reals user) or “Friends”. Comments, likes and reactions are visible to anyone who can see the post, and any location you add is shown with it.
Group content is visible to its members, and rankings and competitions to their participants. Some images (avatars, covers and group images) are served via a public URL and should be considered accessible to anyone who has that URL while the file exists.
Chats are not end-to-end encrypted. Content is stored on our infrastructure and only accessed when necessary and authorised for support, security, moderation or legal compliance.
6. “For you” feed and recommendations
To rank the “For you” section we use signals such as language, how recent a post is, categories related to your Reals, the number of inspirations, posts you have already seen and an element of variety. We record which posts have been shown to you, when and how many times, to reduce repetition.
We do not use special categories of data for this ranking and we make no automated decisions with legal effects. The “Following” section offers an alternative based only on the people you follow and your friends.
7. Advertising (Google AdMob)
Reals only shows rewarded video ads that you choose to watch (for example, to earn daily coins or unlock Discover categories). We do not show banners or interstitial ads.
Ads are served by Google AdMob (Google Ireland Limited and Google LLC). AdMob may process device identifiers, including the Android advertising ID, your IP address, approximate location derived from it, device and app information and your interactions with ads, in order to serve and measure ads, cap their frequency, prevent fraud and, if you consent, personalise them. Google acts as an independent controller for part of this processing.
In the European Economic Area, the United Kingdom and Switzerland we use Google’s consent management platform to ask for your permission before data is used for advertising. You can change your choice at any time from the Privacy screen in the app. If you do not consent, Google may show non-personalised or limited ads.
To verify that you watched the full ad, Google sends us a signed confirmation containing an internal identifier of your account and of the reward request. We do not share your email, name or content with advertisers. You can reset or delete your advertising ID in your Android settings. More information: policies.google.com/technologies/partner-sites.
8. Purchases, Reals+ and coins
Payments are processed by Google Play under its own terms; Google processes your payment data as a controller. We receive the purchase confirmation and verify it directly with Google through the Google Play Developer API. Subscription status changes (renewal, cancellation, refund, expiry) reach us through Google Play real-time developer notifications.
We use this data to deliver what you bought, keep Reals+ active, prevent fraud, handle refunds and complaints, provide support and meet our legal obligations.
9. Reals AI (artificial intelligence)
Reals AI is an optional feature that suggests Reals ideas. When you use it, we send Google (Gemini API) your request, your language and, as context, the titles and categories of up to your 30 most recent Reals and the titles of the latest ideas generated for you, to avoid repetition. We do not send your email, name, photos or messages.
We instruct the provider not to store requests, in accordance with its terms; Google may process data temporarily to prevent abuse. We do not use your data to train AI models. Generated ideas may be inaccurate or unsuitable for you: review them before acting on them. Your Reals AI history is kept in your account until you delete it.
10. Post translation
If you tap “Translate” on a post, we send its title, description and progress unit to the configured translation provider (DeepL SE or Google Cloud Translation). We store the translation so it does not have to be repeated. Machine translations may contain errors.
11. Location and maps
Adding a location to a post is optional. The map uses OpenStreetMap tiles, place and address search uses the OpenStreetMap Foundation’s Nominatim service and the map library is loaded from the unpkg content delivery network. These services receive your IP address and your search text or the coordinates of the map area in order to return results.
We do not track your location in the background or store your current location, except for the place you choose to add to a post. You can remove the location before publishing.
12. Camera, photos and videos
The app only accesses the camera and photo library when you ask it to, to add a photo or video or to scan an invitation QR code. QR scanning is processed on your device. Images and videos are compressed before upload.
13. Notifications
If you enable notifications, they are delivered via Expo Push Service and Firebase Cloud Messaging. Depending on your device settings, a message preview may appear on your lock screen. You can manage notifications in the app and in your system settings.
14. Providers and international transfers
Some providers may process data outside the European Economic Area, for example in the United States. In those cases transfers rely on adequacy decisions (such as the EU–US Data Privacy Framework for certified companies) or on standard contractual clauses approved by the European Commission.
- Supabase: authentication, database, file storage, realtime and server functions.
- Google: Sign in with Google (optional), Firebase Cloud Messaging, Google Play Billing and the Google Play Developer API, Google Cloud Pub/Sub, Google AdMob, the Gemini API and, if enabled, Google Cloud Translation.
- Expo (650 Industries): app updates and push notification service.
- DeepL SE: post translation, if enabled.
- OpenStreetMap Foundation (maps and Nominatim) and unpkg: maps and place search.
- Vercel: hosting of the reals.info website.
15. What we do not do
- We do not sell your personal data.
- We do not use Google Analytics, Meta Pixel or similar tracking tools.
- We do not access your contacts, calendar or health data.
- We do not track your location in the background.
- We do not use your photos, videos or messages to train artificial intelligence models.
- Reals does not build its own advertising profiles; advertising is governed by section 7.
16. Retention
We keep your data while your account is active and as long as it is needed for the features you use. When you delete your account we erase your profile, Reals, memories, posts, messages, Reals AI history, purchase and reward records, analytics and other associated data, as detailed on the “Delete your account” page.
We may keep, for the period required by law, information needed to meet legal obligations, resolve complaints or prevent fraud and abuse. Google keeps its own records of Google Play transactions under its policy. Provider backups and technical logs are deleted periodically.
17. Security
We apply measures such as encryption in transit (HTTPS), row-level access control in the database, server-side validation, server-side verification of purchases and ad rewards and the principle of least privilege. No system is completely infallible, but we review our measures regularly.
18. Your rights
You can request access to, rectification, erasure, restriction and portability of your data, object to processing and withdraw your consent by emailing reals.contacto@gmail.com. We may ask for reasonable identity verification. We will reply within one month, extendable where the law allows.
If you believe your data is not being handled properly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) or with the supervisory authority in your country.
19. Website and local storage
reals.info does not use analytics or advertising cookies. The language selector stores your preference in your browser’s local storage. Our hosting provider logs technical data such as your IP address for security and operational purposes. The app also stores some preferences on your device.
20. Changes to this policy
We may update this policy to reflect changes in the service or the law. We will publish the current version here with its date and, if the change is significant, let you know through the app or the website.