This policy explains what Pushup Pro collects, why, and how you control it. Pushup Pro uses the same account as WOD Tracker: the WOD Tracker privacy policy covers what you do in that app.
1. Who we are
Pushup Pro is published by Alpicode (EURL), Embrun, France, the data controller. Contact: contact@alpicode.fr.
2. The camera
The front camera is only used on the counting screen. Each image is analysed on the phone by face detection (Google ML Kit, running on the device) to see your face go down and up, then dropped. No image, video or face data is recorded, stored or sent to us or anyone. Only the number of reps of the set is saved.
3. Data collected
- Account: name, username, email address, profile picture and the character you chose. If you sign in with Apple or Google, we receive your name and email from them.
- Country: the one you chose, or your phone's region, for the country ranking.
- Push-ups: each set (number of reps, date and time), your records, your daily goal and streak, your jokers, your 6-week program and your badges.
- Social: the athletes you follow, your challenges (participants, scores, invitation codes).
- Notifications: your device's push token, whether you allowed notifications, your reminder time and your time zone offset.
- Subscription: your Pushup Pro status and its renewal date. Payment is handled by Apple or Google: we never see your card.
- Usage data: technical information on how the app is used (screens, taps, errors), with no image from the camera.
4. Why we use it
- Count, save and show your push-ups, records, goal, streak and program.
- Compute the rankings (world, country, friends) and run the challenges.
- Send the reminders you turned on and your challenge news.
- Manage your subscription (through RevenueCat).
- Understand how the app is used, to fix and improve it.
5. What other athletes see
In the rankings and challenges, other athletes see your name, profile picture, character, country and push-up totals. Your email, your notifications and your subscription are never shown.
6. Storage and retention
Your data is stored on Convex servers (United States), which also handle authentication. Transfers outside the EU rely on the European Commission's standard contractual clauses.
Your data is kept while your account is active. A guest account that never signed up is deleted after 90 days of inactivity. A registered account inactive for 2 years is deleted, after a warning sent 30 days before. Deleting your account erases all your data.
7. Your rights
Under the GDPR you may access, rectify, erase and port your data, and object to or restrict its use. Write to contact@alpicode.fr. You may also lodge a complaint with the CNIL (www.cnil.fr).
8. Service providers
- Convex: authentication, database and storage.
- Vercel: website hosting.
- RevenueCat: subscription management.
- Apple and Google: sign-in, in-app payments and app distribution.
- PostHog: usage analytics.
- Expo: push notifications to your device.
- Resend: account emails (password reset code).
9. Changes
We will update this page when the app changes what it collects, and tell you in the app when a change matters.