Push Up RPGPrivacy Policy
LAST UPDATED: SEPTEMBER 13, 2026
The camera counts your reps on the phone, and no video or photo of you is stored, uploaded or seen by us. The one exception is the closed beta: if you take part and leave "Help improve counting" switched on, recordings of your sets go to us, see the beta section. If you create an account, our server keeps your profile and your sets (exercise, reps, day) so that leagues and duels work. We show no ads and do not sell or rent your data. You can delete the account and everything attached to it from Settings in the app.
Who we are
Push Up RPG ("the app", "we") is made by SupafastTech LLC. This policy explains what the app collects, why, where it goes, and what you can do about it. It applies to the iPhone and Android versions of the app and to this website.
Camera
The app uses the front camera to count push-ups, squats, crunches and plank. The camera image is processed on your phone by a pose model that turns each frame into 33 body points. Those points are what the counter reads.
- Frames are processed in memory and discarded. The app does not save photos or video of you.
- No camera image, and no body points, are sent to our servers or to anyone else.
- The camera is active only on the workout screen and stops when you leave it. You can revoke camera access in your phone settings at any time; the app will then not be able to count.
What we collect
You can play without an account. In that case your game lives on your phone and we receive nothing except the crash reports described below.
If you sign in, we collect the following.
| Data | Where it comes from | Why |
|---|---|---|
| Account: an email address, or the identifier and name provided by Sign in with Apple or Google | You, when you sign in | To create your account and let you sign in on a new phone |
| Profile: the name you choose, hero class, chosen exercises, level, rank, streak, best results, worn gear, language and time zone | The app, as you play | To show you to friends and rivals, and to send reminders at a sensible local hour |
| Sets: exercise, number of reps, and the day | The counter, after each set | Leagues, duels and the weekly norm are built from this |
| Friends and duels: who you added, invites, fights and their results, league seats | You and the people you play with | To run the social part of the game |
| Push token: a device token from Apple or Google | Your phone, if you allow notifications | To deliver reminders and duel calls |
| Subscription status: whether Premium is active | The App Store or Google Play | To unlock Premium features on every phone you sign in on |
| Crash reports: app version, phone model, operating system version and the technical stack trace of the failure | The app, when it crashes | To find and fix bugs. Crash reports contain no camera data |
We never receive your password when you use Sign in with Apple or Google. Payment details stay with Apple or Google; we only learn that a subscription exists.
How we use it
- To run the game: count sets, move you up the tower, rank you in the league, pair you in duels.
- To keep your progress when you change phones.
- To send notifications you asked for: a streak reminder, a duel call from a friend, the league result. Notifications are held between 22:00 and 08:00 in your time zone.
- To keep the service working and to fix bugs.
We do not use your data for advertising, we do not build profiles for third parties, and we do not sell or rent personal data.
Service providers
We share the minimum needed with the companies that run parts of the service:
- Apple and Google: sign-in, app distribution, and subscriptions.
- Firebase Cloud Messaging (Google) and Apple Push Notification service: delivering notifications. They receive the push token and the notification text.
- MediaPipe (Google): the pose model that runs inside the app. It runs entirely on your phone and sends nothing to Google.
Our own servers are operated by SupafastTech LLC. Data is transmitted over encrypted connections.
App lock and screen time
The app can lock other apps you choose and open them for minutes you earn by exercising. This feature is optional.
- The list of apps you lock is stored only on your phone. We do not receive it.
- On Android the feature needs the usage access and display over other apps permissions. They are used only to notice when a locked app opens and to show the shield. Usage data is not collected or transmitted.
- On iPhone the feature uses Apple's Screen Time framework. The app receives opaque tokens for the apps you select and never learns their names. Tokens stay on the device.
- The only thing our server stores is whether the feature is switched on.
Closed beta
Before the app reaches the stores it is tested by a small group of people we invited. Test builds differ from the store version in two ways.
- Set recordings. A test build can record your set: the video from the front camera and the body points the counter saw. The recording is uploaded to our server and to a Google Drive folder that belongs to us. We use it for one purpose: to replay the set through the counter and find where it counted wrong. Only the team sees the recordings. The switch Help improve counting in Settings turns this off; you can still play with it off. The app tells you about the recording before your first measurement.
- Usage analytics. Test builds send us what happens in the app: which screens open, when a set starts and ends, whether the camera was allowed, and errors. This is collected on a server we run ourselves (PostHog), not by a third party, and is used to see where people get stuck.
Recordings and analytics from the beta are deleted when the beta ends, or earlier if you ask. The store version records no video and sends no body points, as described above.
Retention and deletion
We keep your data while your account exists. You can delete the account at any time from Settings in the app. Deletion removes your account, profile, sets, friends, duel history, push token and league records, and there is no way to undo it.
Records of duels and league weeks that other players took part in may keep an anonymous placeholder so their history still adds up. Crash reports are kept for up to 90 days.
If you cannot open the app, email us and we will delete the account for you.
Children
Push Up RPG is not directed to children under 13, or under the minimum age in your country, and we do not knowingly collect their data. If you believe a child has created an account, contact us and we will remove it.
Your rights
You can see, correct and delete your data. Most of it is visible in the app, and deletion is one button in Settings. For anything else, email us. Depending on where you live you may have further rights under laws such as the GDPR or the CCPA, including the right to complain to a supervisory authority. We will answer within 30 days.
Changes
When this policy changes we update the date at the top. If a change affects what we collect or how we use it, we tell you in the app before it takes effect.
Contact
Questions about this policy or your data: support@supafast.tech.
SupafastTech LLC