Privacy Policy
This page explains what data SOVA Challenges collects, how it is used, how we handle connected social accounts, and the boundaries of coach, challenger, and platform visibility.
Last updated · August 3, 2026
1. Who We Are
SOVA Challenges is a platform operated by Marzena Bortnowska Zavala - Limitless Studio ("Limitless Studio", "we", "us"). This Privacy Policy explains how we collect, use, and protect your information when you use SOVA Challenges at sovachallenges.com.
2. Information We Collect
We collect information you provide directly such as email, name, and profile details, plus information generated by your use of the platform such as challenge progress, purchases, referrals, and streak data. We also collect basic technical data like device type, IP address, and browser information.
3. How We Use Your Information
We use your information to operate the platform, process payments, send transactional emails, support challenge access, and improve product quality. We do not sell your personal data to third parties.
4. Payment Data
Payments are processed by Stripe. We do not store credit card numbers. Stripe's own privacy policy governs payment handling. Refunds update your purchase record for accounting purposes and remove access immediately when applicable.
5. Connected Social Accounts (Instagram, TikTok)
If you connect a social account such as Instagram or TikTok to publish promotional clips, we store only what is needed to post on your behalf: an encrypted access token, your account username, and your account id. We never store or access your posts, media, followers, direct messages, or comments. We publish only the specific clip you created and explicitly chose to post, using a caption you provide, and only when you tap Post. Tokens are used solely to publish at your request. You can disconnect the account at any time in Settings, which immediately and permanently deletes the stored token; removing SOVA Challenges from the platform's connected apps (which triggers our deauthorization and data-deletion callbacks) does the same.
6. Data Sharing
We share data only with service providers that help us run the platform, including Stripe for payments, Supabase for database infrastructure, Resend for email delivery, and Vercel for hosting. When you connect a social account, we interact with that platform's API (for example Meta / Instagram and TikTok) solely to publish the content you authorize.
7. Coach and Challenger Visibility
Coaches can see enrollment counts and referral activity for their own challenges. Challengers can choose public display names for reviews. Email addresses are never shown publicly, and referral rewards remain tied to individual accounts.
8. Data Retention
We retain your information while your account is active and for the limited periods required for accounting, support, fraud prevention, and compliance. Connected-account tokens are retained only while the account remains connected.
9. Cookies and Analytics
We use essential authentication cookies for Supabase sessions and Vercel Analytics for anonymous aggregated usage data. These tools are used to operate and improve the platform and are not used for advertising resale.
10. Your Rights and Data Deletion
Depending on your jurisdiction, you may have rights to access, correct, export, or delete your personal information. You can disconnect any social account in Settings to delete its stored token immediately. To request deletion of your data, email privacy@sovachallenges.com or visit sovachallenges.com/data-deletion.
11. Children's Privacy
The platform is not intended for users under 18, and we do not knowingly collect personal data from minors.
12. Changes to This Policy
We may update this policy from time to time. Material changes will be reflected here and, where appropriate, communicated by email.
13. Contact
For privacy questions or data requests, email privacy@sovachallenges.com or open a support ticket inside the platform.