Privacy Policy
Pushy is a game that turns pushups into gameplay. Your phone's front camera watches your upper body while you do pushups, and a bird on screen follows your chest through the pipes. This policy explains what data Pushy handles, where it goes, and what stays on your phone. We keep it short because we collect very little.
The short version
- The camera is processed on your phone. Pose tracking runs on the device. Camera frames are never sent to us during play.
- No email, no phone number, no real name. An account is a username and a 6-digit PIN.
- Video leaves your phone only when you tap Share. Same for challenge photos: they are uploaded only when you add them.
- No ads, no ad tracking, no analytics SDKs.
- You can delete your account from Settings and everything tied to it is removed.
1. Camera and pose tracking
Pushy needs the front camera to work. While you play, camera frames are analysed on your device by an on-device pose detection model to find your shoulders and estimate how far you have lowered your body. Only that position signal drives the bird. Frames are not stored, not uploaded, and not used for anything other than gameplay.
During a run, the app may also record a short video of the session locally so that you can create a replay afterwards. That recording stays on your phone and is discarded unless you choose to share it (see section 3).
2. Your account
To save scores, keep a streak and appear on leaderboards you create an account with a username and a 6-digit PIN. We do not ask for an email address, phone number or name. The PIN is stored only as a salted argon2id hash and cannot be recovered; if you forget it, the account cannot be restored.
You may pick an avatar emoji. Your username and avatar are visible to other players on leaderboards, in follow lists and in challenges.
3. What we store on our servers
| Data | Why | Who can see it |
|---|---|---|
| Username, avatar emoji, PIN hash | Sign in, identify you to other players | Username and avatar: other players. PIN hash: nobody, it is not reversible. |
| Daily scores, best scores, streak and shield status | Leaderboards, streaks, your history | Other players, via leaderboards and follows |
| Run replay data (bird position over time) | Verify a score matches the day's level and render replay videos | Only you |
| Who you follow and who follows you | Friends leaderboard | You and the players involved |
| Challenge membership and optional before/after photos | 30-day challenges | Only you, unless you share them |
| Replay videos you choose to share | Render the shareable video with the game overlay | You, and anyone you send the finished video to |
| Session tokens, IP address and request logs | Keep you signed in, prevent abuse and rate-limit sign-in attempts | Nobody outside our infrastructure |
4. Videos and photos
Nothing recorded by the camera is uploaded automatically. When you tap Share replay, the video of that run is uploaded to our server, combined with the game overlay, and the finished clip is returned to your phone for you to post wherever you like. The uploaded source and rendered file are stored so that you can download the clip again; they are deleted when you delete your account.
Challenge before/after photos are optional and are uploaded only when you add them. They are private to you.
5. What we do not do
- We do not show ads or use advertising identifiers.
- We do not include third-party analytics, crash reporting or tracking SDKs.
- We do not sell, rent or trade your data.
- We do not use your videos or photos to train models, for marketing, or for anything except producing the clip you asked for.
- We do not read your contacts, location, health data or photo library. Saving a clip to your library happens only when you tap Save.
6. Service providers
Our API and database run on Railway. Your data is stored there, encrypted in transit (HTTPS) and at rest. Railway processes data on our behalf and does not use it for its own purposes. On-device pose detection uses Google ML Kit, which runs entirely on your phone and does not send frames to Google.
7. Retention and deletion
- Sessions expire after 90 days without use, or immediately when you log out or change your PIN.
- Account data (scores, streaks, follows, challenges, photos, videos) is kept while your account exists.
- Deleting your account from Settings removes your user record, scores, follows, sessions, challenge memberships, photos and stored videos. The username becomes available again. Deletion is immediate and cannot be undone.
- Server logs containing IP addresses are kept for a short period for security and are then discarded.
8. Children
Pushy is not directed at children under 13, and we do not knowingly collect personal information from them. Because we do not collect an email or name, we cannot verify age; if you believe a child under 13 has created an account, contact us and we will delete it.
9. Your rights
Depending on where you live you may have the right to access, correct, export or delete your personal data. Almost everything Pushy holds about you is visible in the app, and deletion is self-service in Settings. For anything else, email us and we will respond within 30 days.
10. Changes
If this policy changes in a way that matters, we will update the date at the top and note the change in the app. Continued use after a change means you accept the updated policy.
11. Contact
Questions, deletion requests or anything else: nizarmasri.cs@gmail.com