Privacy Policy

1. Who we are

PRBot ("we", "our", "us") is a Discord-native workout tracking bot available at prbot.fit. This Privacy Policy explains what data we collect, how we use it, and your rights around it.

By using PRBot — through Discord commands or the web dashboard — you agree to the practices described here.

2. What data we collect

We only collect data that is necessary for the bot to function. This includes:

Discord User ID and username — to identify your account and associate your data.
Workout data you log — exercises, sets, reps, weights, and session dates that you submit via Discord commands.
Bodyweight entries — if you choose to log bodyweight via the bot.
Session metadata — timestamps of when workouts are logged.

We do not collect your email address, real name, phone number, IP address, or any payment information.

3. How we use your data

Your data is used solely to power PRBot features:

Displaying your workout history, PRs, streaks, and progress in Discord and on the dashboard.
Calculating training load, muscle recovery estimates, and balance scores.
Powering leaderboards within Discord servers where you have opted in.
Generating personalised suggestions in the dashboard welcome message.

We do not sell, rent, or share your personal data with third parties for marketing or advertising purposes.

4. Data storage

Your data is stored in a MongoDB database. We take reasonable technical measures to protect your data against unauthorised access, including secure connections (TLS) and access controls.

Data is stored for as long as your account is active. If you request deletion, we will remove your data within 30 days.

5. Leaderboards and public data

If you are a member of a Discord server that has PRBot installed, your username and workout statistics may appear on server leaderboards. Leaderboard participation is inherent to using the bot in a server context.

Server administrators cannot access your raw workout logs — they only see aggregated leaderboard data.

6. Authentication

The PRBot dashboard uses Discord OAuth2 for login. We receive a session token from Discord that confirms your identity. We do not store your Discord password or access token beyond the session.

Session cookies are used to keep you logged in on the dashboard. These are cleared when you log out or when the session expires.

7. Third-party services

PRBot uses the following third-party services:

Discord — for bot interaction and OAuth2 login. Subject to Discord's Privacy Policy.
MongoDB Atlas — for data storage. Subject to MongoDB's Privacy Policy.
Vercel — for hosting the website and API. Subject to Vercel's Privacy Policy.

8. Your rights

You have the right to:

Access your data — ask us what we store about you.
Correct your data — if something is inaccurate.
Delete your data — request full erasure of your account and all associated workout logs.
Export your data — we can provide a copy of your stored workout history on request.

To exercise any of these rights, contact us via the Discord support server or email listed below.

9. Children

PRBot is not directed at children under the age of 13. We do not knowingly collect data from users under 13. Discord itself requires users to be at least 13 years old.

10. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top. Continued use of PRBot after changes constitutes acceptance of the updated policy.

11. Contact

Questions about this policy? Reach us in the PRBot Discord support server or via the dashboard contact page.