Who we are
Pushgard ("the app", "we") is made by SupafastTech LLC. This policy explains what the app collects, why, where it goes, and what you can do about it. It applies to the iPhone and Android versions of the app and to this website.
Camera
The app uses the front camera to count push-ups, squats, crunches and plank. The camera image is processed on your phone by a pose model that turns each frame into 33 body points. Those points are what the counter reads.
- Frames are processed in memory and discarded. The app does not save photos or video of you, and no camera image ever leaves the phone.
- Body points are sent to us. After each set the app uploads the sequence of those 33 points with timestamps, the exercise, and the number the counter reached. From the points one can see a stick figure moving, not a person: no face, no clothes, no room. We use them for one purpose: to replay the set through the counter and find where it counted wrong. The upload is attached to your account, or to a random install identifier if you have no account.
- Body points are kept for 30 days and then deleted automatically. Deleting your account deletes them at once. If you would rather we did not keep them at all, email us and we will remove them and stop collecting from your account.
- The camera is active only on the workout screen and stops when you leave it. You can revoke camera access in your phone settings at any time; the app will then not be able to count.
What we collect
You can play without an account. In that case your game lives on your phone, and what reaches us is tied to a random install identifier rather than to you: body points after a set, usage analytics and crash reports, all described below.
If you sign in, we collect the following.
| Data | Where it comes from | Why |
|---|---|---|
| Account: an email address, or the identifier and name provided by Sign in with Apple or Google | You, when you sign in | To create your account and let you sign in on a new phone |
| Profile: the name you choose, hero class, chosen exercises, level, rank, streak, best results, worn gear, language and time zone | The app, as you play | To show you to friends and rivals, and to send reminders at a sensible local hour |
| Sets: exercise, number of reps, and the day | The counter, after each set | Leagues, duels and the weekly norm are built from this |
| Friends and duels: who you added, invites, fights and their results, league seats | You and the people you play with | To run the social part of the game |
| Push token: a device token from Apple or Google | Your phone, if you allow notifications | To deliver reminders and duel calls |
| Subscription status: whether Premium is active | The App Store or Google Play | To unlock Premium features on every phone you sign in on |
| Body points: 33 points per frame with timestamps, the exercise and the counted number, no image | The counter, after each set | To replay the set and fix counting mistakes. Kept 30 days |
| Usage analytics: which screens open, when a set starts and ends, whether the camera was allowed, errors, app version and phone model | The app, as you use it | To see where people get stuck. Collected on a server we run ourselves (PostHog), not by a third party |
| Crash reports: app version, phone model, operating system version and the technical stack trace of the failure | The app, when it crashes | To find and fix bugs. Crash reports contain no camera data |
We never receive your password when you use Sign in with Apple or Google. Payment details stay with Apple or Google; we only learn that a subscription exists.
How we use it
- To run the game: count sets, move you up the tower, rank you in the league, pair you in duels.
- To keep your progress when you change phones.
- To send notifications you asked for: a streak reminder, a duel call from a friend, the league result. Notifications are held between 22:00 and 08:00 in your time zone.
- To keep the service working and to fix bugs.
We do not use your data for advertising, we do not build profiles for third parties, and we do not sell or rent personal data.
Service providers
We share the minimum needed with the companies that run parts of the service:
- Apple and Google: sign-in, app distribution, and subscriptions.
- Firebase Cloud Messaging (Google) and Apple Push Notification service: delivering notifications. They receive the push token and the notification text.
- MediaPipe (Google): the pose model that runs inside the app. It runs entirely on your phone and sends nothing to Google.
Our own servers are operated by SupafastTech LLC. Data is transmitted over encrypted connections.
App lock and screen time
The app can lock other apps you choose and open them for minutes you earn by exercising. This feature is optional.
- The list of apps you lock is stored only on your phone. We do not receive it.
- On Android the feature needs the usage access and display over other apps permissions. They are used only to notice when a locked app opens and to show the shield. Usage data is not collected or transmitted.
- On iPhone the feature uses Apple's Screen Time framework. The app receives opaque tokens for the apps you select and never learns their names. Tokens stay on the device.
- The only thing our server stores is whether the feature is switched on.
This website
pushgard.com uses no cookies for analytics. It sends two kinds of events to the PostHog server we run for the app: a page view, and a click on an App Store or Google Play button.
- An event carries the page address without the query string, the domain of the site you came from (not its full address), and, for a store click, which button and which store.
- Every page load gets a new random identifier. Visits are not linked to each other and no profile of you is created.
- PostHog receives your IP address with each request, uses it to estimate your country and stores it with the event. The same is true for usage analytics from the app.
- There is no session recording, no automatic click tracking and no advertising or third-party trackers.
- Two things stay in your own browser and are never sent to us: the days you mark done in a program plan, and a note that you have already seen the intro animation in this tab.
Retention and deletion
We keep your data while your account exists. You can delete the account at any time from Settings in the app, or without the app as described on the account deletion page. Deletion removes your account, profile, sets, friends, duel history, push token and league records, and there is no way to undo it.
Records of duels and league weeks that other players took part in may keep an anonymous placeholder so their history still adds up. Body points are kept for 30 days, crash reports for 90 days and usage analytics for 180 days; all three are deleted automatically after that.
If you cannot open the app, email us and we will delete the account for you.
Children
Pushgard is not directed to children under 13, or under the minimum age in your country, and we do not knowingly collect their data. If you believe a child has created an account, contact us and we will remove it.
Your rights
You can see, correct and delete your data. Most of it is visible in the app, and deletion is one button in Settings. For anything else, email us. Depending on where you live you may have further rights under laws such as the GDPR or the CCPA, including the right to complain to a supervisory authority. We will answer within 30 days.
Changes
When this policy changes we update the date at the top. If a change affects what we collect or how we use it, we tell you in the app before it takes effect.
Contact
Questions about this policy or your data: [email protected].
SupafastTech LLC