Privacy Policy

Last updated September 22, 2026.

pushpact does not sell personal information, show targeted advertising, or track you across other companies' apps or websites.

Information we collect

We process account information, including your email address, optional public display name, anonymous Player number, sign-in-code and session records, and request IP address used for short-lived abuse prevention.

We process pact and fitness activity, including your target, stake, timezone, pact dates and states, credited pushups, set and per-rep measurements, claims, disputes, day flags, and Stripe transaction and customer identifiers. Stripe collects card details in its payment sheet; pushpact does not receive the full card number or CVC.

For pacts started in test mode: those pacts used Stripe TEST card setup and simulated charges. No real funds moved, and their records are kept on the same basis as the records above.

Optional actual-count reports, available in TestFlight builds only, are evaluation-only. They contain compact count and device/build fields, not video, coordinates, free text, email, or payment information.

Under the terms you accept when you save a card, pushpact receives compact placement diagnostics such as detection counts, timing, app/build, device model, operating-system version, and camera-engine configuration, and setup reports you choose to send from the camera screen. Raw numerical pose data is included only with a claim or a setup report you send. It is body-landmark measurements and timing, never images or video.

The app sends PostHog an installation identifier that is linked to your opaque account number once you sign in, bounded product-interaction events about starting the camera and counting flow, which set-your-pact steps you viewed, the counts each set ended with, app, build and operating-system details, closed-category operational errors, and native crash diagnostics.

Our servers also send PostHog an opaque account number and pact-lifecycle events: when a pact is created, scheduled and started, its target, daily stake and your pact's time zone, each set's credited count, each day's outcome, whether a charge succeeded, was declined or was refunded, when you request or fail a sign-in code, file a claim or flag a day, when a card save fails, our servers also record whether a sign-in email, reminder, or account notice was prepared, attempted, accepted by a provider, failed, or suppressed, with bounded reasons and timing, and, if enabled, whether the email provider reported delivery to your mail server (not whether you read it); and when a pact is quit, finished or an account is deleted. We do not send PostHog your email, display name, payment details, Stripe identifiers, messages, camera images, video, audio, or pose landmarks, and we do not use it for advertising or tracking across other companies' apps or websites. These analytics records are retained after account deletion on the same basis as pact, daily-result and charge records.

If you contact support, we process the message, your contact address, and any attachments you choose to send. Feedback and crash data you submit through Apple are processed by Apple under Apple's terms.

How we use and share information

We use this information only to authenticate you, run and secure your pact, count and review pushups, make and refund payments, operate the leaderboard and moderation tools, answer support, diagnose the service, and meet legal obligations. We do not use it for third-party advertising or cross-company tracking.

Service providers process information for these purposes: Apple for App Store and TestFlight distribution and submitted feedback; Railway for application and database hosting; Stripe for card setup, payments, refunds and disputes; Resend for transactional email; Cloudflare Email Routing plus Google/Gmail for the feedback inbox; and PostHog for product analytics and crash reporting. Each provider also applies its own terms and retention practices.

All-time leaderboard

The all-time leaderboard ranks lifetime credited pushups and the total stake protected on days finalized as hit. It never shows your email address, payment identifiers, individual daily stake, or account details.

You appear as an anonymous Player number unless you explicitly publish a leaderboard name. You can hide from the rankings at any time and still view them.

If you add a profile photo it appears on your leaderboard row only while you are visible, and you can remove it at any time. Photos are stored with our hosting provider, can be reported like a name, and are deleted with your account.

Signed-in players can report a name or block a Player number. A block is private to the person who created it. Reports store the reporting and reported accounts, the exact public-name snapshot that was reported, an enumerated reason, and an optional note of up to 200 characters for human moderation. Public responses never expose report authorship, email, internal user IDs, or payment data.

Deleting your account removes reports you authored and block relationships involving your account. Reports about your prior public activity and audited moderation actions may be retained with the account identity anonymized when needed to document and defend enforcement.

Retention and choices

We retain account, payment, and audit records only as needed to operate and secure the service, comply with legal obligations, and resolve claims or disputes.

Sign-in codes expire after 10 minutes. Sign-in-request IP records are pruned after one day. Placement diagnostics, optional actual-count reports, raw numerical pose streams, and derived per-rep measurements are purged no later than 30 days after collection unless they were already deleted with your account as described below.

You can hide your leaderboard profile, clear its public name, block or unblock players, withdraw future optional evidence collection, quit a pact, or delete your account from inside the app.

Deleting your account

You can delete your account from inside the app at any time. Account deletion removes player-facing access while required billing, dispute, and audit records are retained.

Deletion erases your email address and display name, revokes every sign-in session, and immediately purges your placement attempts, optional actual-count reports, and sign-up records.

Raw numerical pose data is not erased at that moment. It is held on its own clock and purged no later than 30 days after the set that produced it was recorded, and that window runs to its end after you delete your account. The per-rep measurements derived from the same set are cleared on the same 30-day window.

Pact, daily-result, and charge records are retained after deletion for as long as we need them to operate and secure the service, comply with legal obligations, and resolve claims or disputes. Payment records held by Stripe, our payment processor, including the email address on your Stripe customer record, are kept under Stripe's own terms and are not erased by deleting your pushpact account.

Contact

Questions, privacy requests, and support: feedback@pushpact.ai.