WinPushUp
Privacy Policy
In two lines. Nothing is recorded: the camera counts your push-ups on your phone and no image ever leaves it. We keep the minimum needed to run the game, with no ads, no resale, no trackers, and you can erase everything in one tap.
1. Data controller
Victor Gassmann, independent developer based in France. Contact: contact@winpushup.fr.
2. What we collect, and why
| Data | Why | Legal basis |
|---|---|---|
| Account: identifier provided by Sign in with Apple and the e-mail address passed on by Apple (possibly a hidden relay address). | Create and recover your account, contact you if needed. | Performance of the contract. |
| Profile: username, color, birth date, optional photo. | Identify you to other players; the birth date checks you are 13 and is never shown; the photo is checked automatically before being visible. | Performance of the contract; legal obligation for age. |
| Game: battles (number and timing of your push-ups, result, mode), ranks and points, leagues, lives, streak, missions, emotes sent. | Run duels, rankings and ghosts. The rhythm of your push-ups may be replayed as a ghost against other players, with your username. | Performance of the contract. |
| Camera: front camera images. | Detect your push-ups. Images are processed only on your phone by Apple's pose detection, never stored or sent. | Your iOS permission. |
| Social: friends, requests, challenges, blocks, reports. | Play with your friends, protect you from abusive behaviour. | Performance of the contract; legitimate interest for moderation. |
| Contacts (optional): fingerprints of the phone numbers in your address book. | Find who already plays. Numbers are hashed on your phone before being sent and compared with other fingerprints; they are never stored in clear. | Your consent, revocable in iOS settings. |
| Notifications: Apple push token, on/off preference. | Tell you about a challenge received, your lives back, your streak at risk. Never between 10 pm and 8 am, never more than two reminders a day. | Your consent, revocable at any time. |
| Purchases: anonymous subscriber identifier, subscription status and history. | Activate and restore Pro. We never see or store any payment method: Apple handles it. | Performance of the contract. |
| Support: your e-mails and their content. | Answer you. | Legitimate interest. |
| Website: the host's technical logs (IP address, pages viewed, browser). | Security and proper operation. The website uses no cookies and no analytics. | Legitimate interest. |
3. What we don't do
- No advertising, no resale or sharing of data for commercial purposes.
- No analytics or third-party trackers in the App.
- No image or video kept or transmitted, in battles or during calibration.
4. Who has access
Only the people who run WinPushUp, and our processors for their part:
- Supabase (Supabase Inc.): database and authentication hosting, region eu-west-1 (Irlande, Union européenne).
- Apple: Sign in with Apple, notifications, in-app purchases.
- RevenueCat (RevenueCat Inc., USA): subscription management. Transfer covered by the European Commission's standard contractual clauses.
- Sightengine (Sightengine SAS, France): automatic profile photo checks.
- o2switch SAS: hosting of this website.
Other players see your username, color, approved photo, ranks and results, unless you enable Private profile in settings: they then only see "Private profile".
5. For how long
- As long as your account exists. Delete my account in settings immediately and completely erases your profile, battles, ghosts, photo and contact fingerprints. Technical backups are purged within 30 days.
- Website technical logs: 12 months at most.
- Purchase data: as long as accounting obligations require, at Apple and RevenueCat.
6. Your rights
Access, rectification, erasure, portability, restriction and objection. The simplest way: edit your profile or delete your account in the App. For anything else, write to contact@winpushup.fr; we answer within a month. You may also lodge a complaint with the French data protection authority (CNIL): cnil.fr.
7. Minors
WinPushUp is for people aged 13 and over. A parent or guardian can request the deletion of a minor's account at the address above.
8. Security
Encrypted exchanges (HTTPS), database access restricted by per-user rules, no stored passwords (Sign in with Apple), keys and secrets kept out of the App.
9. Changes
This policy may evolve with the App. The date at the top is authoritative; important changes are announced in the App.