Privacy policy

Last updated November 12, 2026

This policy explains what YoPak (a Discord bot for logging exercise) collects about you, why we use it, who sees it, how long we keep it, and what your rights are. A Discord server that runs YoPak is called a Pak.

Who runs YoPak

The YoPak developer team, based in the United States decides what YoPak collects and why, they are joint controllers ("we" or "us" in this policy). We can answer requests sent to our privacy email under Contact below.

What YoPak collects, and why

• Your Discord user ID, display name, and the Paks you log in, so YoPak knows which exercise logs belong to you, which server they belong to, and can update messages it posts.
• Your exercise logs, points, and standings, so each Pak can calculate scores and show leaderboards.
• Your settings (measurement units and chart color), if you choose to set them.
• Body fields, only if you give consent: your sex, height, and body weight (each optional and dated). We use these only to compare and score your sets fairly against people of a similar size. We never ask for your date of birth or exact age.
• A record of your consent and when you gave it, so we can prove we had your permission. Selecting Yes to body fields also confirms that you are 16 or older.
• Emails you send to our privacy address, so we can respond to your questions or data requests.

Legal reasons we process your data

Under the EU and UK General Data Protection Regulation (GDPR), we must have a valid legal reason for each type of data we use:

• To run the service (Contract — GDPR Article 6(1)(b)): We need your Discord ID, display name, Pak memberships, logs, points, standings, and settings to provide YoPak under our terms.
• Your permission (Explicit Consent — GDPR Articles 6(1)(a) and 9(2)(a)): We only collect and use your body fields (which count as health-related data) if you explicitly say Yes. Body fields are completely optional—without them, YoPak scores your sets using standard reference numbers and everything else works the same.
• Legal duties (Legal Obligation — GDPR Article 6(1)(c)): We keep proof of your consent and copies of your privacy emails to meet our record-keeping and compliance duties under data protection laws.

Who sees and processes your data

• Other players in a Pak can see your exercise logs, points, standings, and chart color inside that specific Pak, and nowhere else.
• Only you can see your body fields. Other players and server admins cannot see them.
• Service providers that help us run YoPak process data only on our instructions and never for their own purposes:
  • Discord, where the bot operates.
  • Oracle, which hosts YoPak and its database in the United States.
  • Backblaze B2, which stores encrypted database backups in the United States.
  • Google (Gmail), which handles emails sent to yopaksupport@gmail.com.

Cloudflare hosts this website and never sees the data YoPak stores. We never sell or rent your data, and we do not use it for advertising. Because we and our hosting providers are in the United States, your data is transferred to and stored in the US.

How long we keep your data

• Active account data: We keep your profile, settings, and logs for as long as you use YoPak.
• Backups: Our backup system copies database changes as they happen and automatically deletes each backup copy after 30 days.
• Server removal: If a server removes YoPak, that Pak's data is kept until you delete your data or the server data is cleared.
• Privacy emails: We keep emails sent to our privacy address until your request and any follow-up appeal are resolved.

Your rights

No matter where you live, you have control over your data:

• Delete your data: Open your profile panel in Discord using /profile and click Delete my data. This immediately deletes everything YoPak stores about you across every Pak. Backup copies are permanently erased within 30 days. (Messages YoPak already posted in Discord channels stay in Discord unless deleted there.)
• Withdraw consent: You can withdraw consent for body fields at any time in your /profile panel. Doing this immediately deletes your body fields, their history, and your consent record.
• Access, correct, restrict, object, or get a copy: You can ask to see what data we hold about you, fix mistakes, limit how we use it, object to its use, or request a portable file of your data by emailing us. You can also ask us to delete your data by email.

We answer all requests within 30 days. If we ever turn down a request, you can appeal by replying to our email.

If you live in the UK or the European Economic Area (EEA), you also have the right to complain to your local data protection regulator—such as the Information Commissioner's Office (ICO) in the UK, or your national supervisory authority in the EU.

Contact

Privacy email: yopaksupport@gmail.com