Your pact is yours.

01Who we are

PushPact (“we”, “us”) provides the PushPact app and this website and is responsible for the personal data described here (the “controller” under the EU and UK GDPR). Contact us at support@getpushpact.com.

02What stays on your iPhone

Most of PushPact runs entirely on your device. The following stays on your iPhone and, apart from the anonymous numbers in section 4, is not sent to us:

• Your pact: your goal, the name and signature on your pact, your sets, streaks, seals, medals and settings. The name and signature never leave your iPhone.
• Selfies: stored in the app on your iPhone. They are saved to Photos or shared only if you choose.
• Films of your sets: saved to your Photos library, and only if you choose to film a set.
• App Lock: uses Apple’s Screen Time. We can’t see which apps you choose or how you use them; that stays on your device and with Apple.
• Apple Health (Workouts beta): only if you turn on Workouts in Settings and allow it, PushPact reads the workouts saved to Apple Health (their type, time, length, distance and energy) to check them against the goals you set. They are read and used only on your iPhone, are never sent to us or anyone else, and are never used for advertising or marketing. PushPact doesn’t save anything to Health. If a workout keeps your day and you’re in a crew, your crew sees that you kept the day, as with push-ups, never the workout. You can stop it any time in Settings › Workouts, or in the Health app.
• Photos: add-only access, used only to save the films and cards you choose to keep. We can’t see your photos.
• Reminders and alarms: scheduled on your iPhone.
• Sensor logs: the movement numbers measured during your recent sets (body points in stand mode; in floor mode, the distances and angle described in section 3), kept on your iPhone for 30 days so you can choose to send a set that was counted wrong. Turn off Keep sensor logs in Settings › Privacy to stop keeping them.

03Camera and face data

PushPact counts push-ups with your iPhone’s cameras, on the device, in real time. In stand mode it detects body points such as your shoulders, elbows, wrists, hips, nose, eyes and ears. In floor mode (iPhones with Face ID) the TrueDepth camera measures how far your face and body are from the phone and which way your face is turned.

In floor mode, PushPact reads the TrueDepth camera through Apple’s ARKit face tracking. From each frame it keeps three numbers and nothing else: the distance between your face and the phone, the angle your face is turned toward the phone, and the distance to the nearest part of your body. Camera frames, images and the depth map itself are never stored and never uploaded. PushPact doesn’t use facial recognition and doesn’t create or keep a face mesh, facial features or a biometric template.

These numbers are used on your iPhone to count your reps and check each rep’s depth. They are kept in that set’s on-device sensor log for 30 days (section 2) and leave your iPhone only in a calibration log you explicitly choose to send (section 5), which is used only to improve rep counting, stored with our hosting provider Vercel in the EU and deleted within 12 months. Data from the TrueDepth camera is never used to identify you, for authentication, advertising or marketing, or to build a profile; it is never sold; and it is never sent to our analytics or crash-reporting providers or shared with anyone else.

04What we collect

Anonymous diagnostics

One switch controls both kinds below: Share anonymous diagnostics, in PushPact’s Settings › Privacy. Turn it off and the app stops sending crash reports and usage data.

• Crash reports (Sentry, EU region): device model, iOS version, app version and technical details of the error. No name, photos or video.
• Usage data (PostHog): tied to a random install identifier, shown as Install ID in Settings › Privacy, and not linked to your name, email, Apple Account or any advertising identifier. It includes fitness data about your workouts: rep counts for each set, how long each set took, your daily goal, your streak length and your answers about counting accuracy. It also includes onboarding steps and your answers in them (such as the goals you pick and, if you choose to say, your age range), your permission choices, the choices you make in Workouts (whether it’s on and the kinds of goals you set), and your device model, iOS and app version. It never includes anything measured by the camera or the TrueDepth camera, or anything read from Apple Health.

This data is anonymous, never includes your name, pact signature, photos, selfies, video or audio, and is used only to fix and improve PushPact, never for advertising. We don’t use IP addresses to identify you.

Subscriptions

If you subscribe to PushPact Pro, Apple handles the payment: we never see your name, card or Apple Account. Our subscription provider, RevenueCat, receives a random app user identifier, your PushPact purchase history (which plan, trial and renewal dates, price and storefront country), your app version and Install ID. We use this only to unlock Pro, to restore it on a new phone and to understand how many people start, keep or cancel a subscription. It is not linked to who you are and never used for advertising.

If you ask Apple for a refund, Apple may ask us about that purchase, and RevenueCat may answer for us with four things: that you agreed to this when buying (Terms, section 7), whether the purchase was delivered, that you could try the app before paying, and our preference on the refund, if any. Nothing about how you use PushPact (your sets, camera data, health data or crews) is shared. Apple makes the decision.

Crews

Crews are optional. If you start or join one, PushPact creates an anonymous crew profile for you (no email, phone number or Apple Account) and stores, with our database provider Supabase in Frankfurt, Germany: the name you choose for your crews, the crews you’re in, and for each day your push-up count, daily goal, whether you kept your pact, your streak and pact day. That is fitness data, and the people in your crews can see it, along with the sets, kept days, nudges, cheers (a fixed set of emoji), taunts (a fixed set of lines), challenges, duels, who passed whom and whether you’re doing a set right now. If you allow notifications, we also store a push token and your iPhone’s time zone, so friends’ nudges reach you and crew news stays quiet at night.

Proof shots. If you choose to post one after a set, we store that one photo (a small JPEG) so the people in your crews can see it. It is deleted after 24 hours. Nothing is posted unless you take the photo and tap Post, and anyone in your crew can report a photo; reported photos disappear for them at once and we review reports within 24 hours. Your workout camera, films, other selfies and location are never shared.

Anyone with your crew’s invite link can see the crew’s name and the first few members’ names. You can leave a crew any time, and Settings › Crews › Delete my crew profile erases all of it.

Codes, friends and coaches

Codes. We give codes to some people and groups (for example a coach and their trainees). If you take one, we store which code you took, when, and a random identifier for your iPhone (so a code works once per iPhone), and the app adds the code’s free days of Pro on your iPhone. A code that comes with a team also puts you in that team’s crew, as described above.

Coaches. When a code belongs to a coach, the coach sees the team the way crewmates see each other, plus totals: how many people joined with their code, how many were active this week, and how many are on Pro. If you came in through a coach’s code, the app tells us your RevenueCat app user identifier, and our server asks RevenueCat whether you subscribe (plan, trial, price and renewal dates), so we can pay the coach their share. The coach never sees who pays, only how many and the total. RevenueCat also records which code you came through, to report revenue by code.

Friends. When someone joins their first crew through your crew’s link or your dare, we note that you brought them in. Once they pay for Pro (their first payment, after any free trial), you earn a free month of Pro, and we tell you it was earned. To know, the app tells us your RevenueCat app user identifier while you have a crew profile, and our server asks RevenueCat whether you subscribe (plan, trial, payments and renewal dates). You see your friends’ names and whether each one earned you a month, never what they pay or their numbers beyond what your crew already shows. Friends who joined before 24 October 2026 earn the month as they did then, by keeping their pact on a few days.

This is kept while you have a crew profile. Deleting it removes your link to any code, friend or coach; we keep only the anonymous fact that a code was used on an iPhone, and the payment totals coaches are owed.

Ad measurement (Meta)

We advertise PushPact on Instagram and Facebook. To learn which ads bring people who stay, the app uses Meta’s software development kit, and RevenueCat reports subscriptions to Meta. Meta receives:

• that the app was installed and opened, and three moments: finishing onboarding, your first set, and seeing the PushPact Pro offer (which screen showed it);
• from RevenueCat, when a free trial starts and when a subscription is bought or renewed: the plan, price and currency;
• a random identifier Meta’s kit creates for this install, your device model, iOS and app version, and your IP address.

Apple’s advertising identifier only if you allow it. The app asks once, with Apple’s own prompt, whether PushPact may track you across other companies’ apps and websites. If you allow it, Meta also receives the advertising identifier and can match these events to the ad you saw. If you don’t, it doesn’t, and Meta reports to us only in aggregate. Saying no changes nothing in the app, and you can change it later in iOS Settings › Privacy & Security › Tracking.

Meta never receives anything the cameras measured, your rep counts, your pact, your name, your crews, selfies or proof shots. The Share anonymous diagnostics switch (Settings › Privacy) turns this off too. Meta handles this data under its Business Tools Terms and privacy policy.

Feedback and support emails

If you email us, we receive your email address and your message, and use them to reply. The email that Send feedback (Settings › Help) prepares also includes your app version, device model, iOS version and the first 8 characters of your Install ID. You can edit it before sending.

05Calibration logs (only if you agree)

A calibration log is sent only in these two cases, both your choice:

• One set: after some sets, the app asks “Did I count right?”. If you say you did more or fewer, you can turn on “Send this set’s sensor data” and tap Send.
• Every set: if you turn on Help improve counting (Settings › Privacy, off unless you turn it on), the app sends each set’s calibration log when the set ends. Turn it off any time and nothing more is sent.

Nothing is sent otherwise.

A calibration log contains numbers only:

• Stand mode: body-pose joint positions over time (including the nose, eye and ear points), with timestamps and motion flags.
• Floor mode: the face’s distance from the phone, the angle it’s facing and the distance to the nearest part of the body, as measured by the TrueDepth camera, with timestamps and motion flags.
• The report: how many reps the app counted and, if you told us, how many you did; the app’s own events during the set (reps counted or turned down, and the coach’s spoken lines); the placement, strictness and voice settings; your device model, iOS and app version, and your Install ID.

It never contains images, video or audio, a face mesh or a biometric template. It is never used to identify anyone, is used only to improve rep counting, and is stored with Vercel in the EU.

06What we never do

• Require an account, or ask for your email or phone number in the app.
• Show ads in the app.
• Track you across other companies’ apps or websites, or use Apple’s advertising identifier, unless you allow it in Apple’s prompt (ad measurement).
• Sell your personal information.
• Send Meta, or any advertiser, anything the cameras measured, your workouts, your crews or your photos.
• Send anything read from Apple Health to our servers, analytics or anyone else, or use it for advertising or marketing.
• Upload or store your workout camera frames or films. Selfies stay on your iPhone, except a proof shot you choose to post to your crew (deleted after 24 hours).

07Legal bases

Where the GDPR or similar laws apply:

• Crash reports and usage data: our legitimate interest in keeping PushPact working and improving it. You can object at any time with the Share anonymous diagnostics switch.
• Calibration logs: your consent, given each time you send one. You can withdraw it by emailing us.
• Ad measurement: your consent, through Apple’s tracking prompt, for the advertising identifier; otherwise our legitimate interest in measuring our own ads, which you can object to with the Share anonymous diagnostics switch.
• Support emails: our legitimate interest in answering you.
• Subscriptions: performing our contract with you (giving you the Pro features you paid for), including answering Apple about a refund you ask it for.
• Crews: performing our contract with you (showing your crew your day and theirs to you), and your explicit consent for the fitness data you share, given when you start or join a crew. You can withdraw it by leaving your crews or deleting your crew profile.

08Service providers

These providers process data on our behalf, under contracts that require them to protect it:

• Sentry (Functional Software, Inc.): crash reporting, EU region.
• PostHog (PostHog, Inc.): anonymous usage analytics.
• RevenueCat (RevenueCat, Inc.): managing PushPact Pro subscriptions, and telling us whether people with a crew profile subscribe (for coaches’ shares and friends’ free months).
• Supabase (Supabase, Inc.): the database behind Crews, hosted in Frankfurt, Germany.
• Vercel (Vercel Inc.): hosting this website, its cookieless visitor counts, and storing calibration logs in the EU.
• Apple (Apple Inc.): App Store distribution, any payments and refunds, and Screen Time.
• Meta (Meta Platforms Ireland Ltd. and Meta Platforms, Inc.): measuring our ads on Instagram and Facebook (section 4). For ad measurement Meta also uses the data for its own purposes as described in its privacy policy.

We may also disclose information where the law requires it.

09Retention

• On-device data: until you delete it or the app.
• Sensor logs on your iPhone: 30 days.
• Crash reports: no longer than necessary, and at most 90 days.
• Usage data: no longer than necessary, and at most 24 months.
• Calibration logs: no longer than necessary, and at most 12 months.
• Ad measurement: Meta keeps it under its own policy; we see only ad reports.
• Support emails: as long as needed to help you, and at most 24 months.
• Crews: while you use them. Proof shots are deleted after 24 hours. Deleting your crew profile erases it at once; feed items older than 14 days are no longer shown, and daily counts of profiles unused for 12 months are deleted.

10Your rights

Depending on where you live, you can ask to access, correct, delete or receive a copy of your personal data, object to or restrict its use, and withdraw consent. You can also complain to your data protection authority. To make a request, email support@getpushpact.com with your Install ID (Settings › Privacy, tap to copy), since we can’t otherwise link data to you. We’ll respond within one month.

11Deleting your data

There’s no account, so deleting the app deletes its data from your iPhone. Films and cards you saved to Photos stay there until you delete them. If you used Crews, delete your crew profile first in Settings › Crews; it erases your name, crew memberships and daily counts from our server. To delete diagnostics or calibration logs, email support@getpushpact.com with your Install ID before you delete the app, because a new install gets a new ID.

12Children

PushPact is not directed to children under 13, and we don’t knowingly collect personal data from them. If you believe a child has sent us personal data, contact us and we’ll delete it.

13International transfers

Some providers may process data outside your country, including in the United States. Where required, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses or the EU–US Data Privacy Framework.

14US state privacy rights

If you live in California or another US state with a privacy law, you can ask to know, correct or delete your personal information. We collect the categories described above: identifiers (a random install identifier), app activity, fitness activity (anonymous workout numbers), device information and, only if you choose, sensor measurements. We do not sell personal information. Measuring our own ads with Meta (section 4) may count as “sharing” for cross-context behavioural advertising under some state laws; to opt out, turn off Share anonymous diagnostics in Settings › Privacy, or don’t allow tracking when Apple asks. We won’t discriminate against you for using your rights. Email support@getpushpact.com to make a request.

15This website

This website uses no cookies and no advertising trackers. We use Vercel Web Analytics and Speed Insights to count page views, clicks on the App Store and email links, plays of the demo videos, and page load speed. They work without cookies, don’t follow you to other sites and don’t identify you: we see totals such as how many people visited, from which country and type of device, never who you are. Our host also processes standard request data to deliver the site.

16Changes

If this policy changes, we’ll update the date above, and tell you in the app if the change is significant.

17Contact

support@getpushpact.com. See also our Terms of Use and Support.

PushPact · Effective 7 November 2026