Privacy Policy

When you work out, Puuush saves in your account:

• the date, time and duration, the device used (iPhone or Apple Watch) and the calories burned;
• your push-ups: the count, the strict reps, and the depth and timing of each rep;
• your heart rate during the workout, when your Apple Watch or Apple Health provides it;
• your progress: plan, streaks, level, totals and practice days;
• your rhythm challenge results: score, judgments, streak, holds and timing.

Workouts can also be saved as workout files (FIT format), including their heart-rate readings.

Puuush uses your iPhone's front camera, including the TrueDepth camera when available, to follow the distance between your face and your phone and count your push-ups. This happens on your device. No photo, video or face data is recorded, stored or sent: only the resulting counts and measurements are saved with your workout.

On Apple Watch, Puuush uses the watch's motion sensors to count your push-ups.

If you allow access to Apple Health:

• Puuush reads your age, biological sex, height, weight and heart rate, to estimate the calories you burn;
• Puuush writes your workouts, heart rate and calories to Apple Health.

Your age, biological sex, height and weight are only used on your device to estimate calories: they are not saved in your account and not shared. You can change these permissions at any time in the Health app or in iOS Settings.

In the app, other players can see your username, photo, bio, social links, country, the date you joined, your friends count, your total push-ups, your level, your rankings and your challenge scores.

On puuush.app, anyone can see your username, photo, country and scores in the public rankings and on the events you played, and your profile page with your level, bio, join date, friends count, push-up totals, practice days of the year and best challenge runs. The website does not show your social links.

Your name and email address are not shown on your profile or on puuush.app. The friend search in the app can find you by your username or your name.

Friend requests and friendships are saved in your account, and the other player gets a notification. During sign-up, Puuush can read your clipboard to find an invite link from the friend who invited you, and add them as your first friend.

If you allow notifications, a notification token from Firebase Cloud Messaging (Google) is saved with your account. We use it to send your workout reminders, at the time you choose, and friend notifications.

You can report a player for suspected cheating or for an inappropriate photo, username or bio. We receive the reason, the details you add and who sent the report. We may remove scores, hide a profile from the rankings and the search, or ban an account.

Apple processes your payments: we never receive your card details. RevenueCat manages your subscription status for us. It receives your account identifier, email address, username, country, account creation date, your device identifiers and your purchase history.

We use these services to understand how Puuush is used, fix bugs and measure our advertising:

• Mixpanel (analytics): the actions you take in the app, such as the screens you open and your workouts (reps, duration, speed and calories), linked to your account identifier, email address, name, subscription status and a random identifier stored on your device.
• Firebase (Google): crash reports (device model, iOS version, app version and what went wrong), the app settings we change remotely, and notifications.
• Meta (Facebook): app events such as opening the app, signing up and finishing a workout, with their details, to measure our ad campaigns. Meta does not receive your name, email address or account identifier.
• TikTok: your account identifier when you sign up or sign in, to measure our ad campaigns.

iOS asks whether Puuush may track you. If you allow it, Meta also collects your device's advertising identifier and logs some events automatically. If you do not, both are turned off, and the events above are still sent.

If you connect Strava, Puuush posts your workouts to your Strava account: name, date, duration, reps, sets, average time per push-up, calories and a link to your Puuush profile. You can disconnect Strava at any time in the app or in your Strava settings.

puuush.app uses no analytics and no advertising cookies. It is hosted by Cloudflare, which processes technical data such as your IP address to deliver the pages and protect the site. It reads the rankings and the profiles from our database.

Your account and your data are stored with Supabase, on servers in the United States. The services named in this policy (Supabase, Google Firebase, Mixpanel, RevenueCat, Meta, TikTok and Cloudflare) may process data in the United States and in other countries outside the European Union. These transfers rely on the safeguards these companies provide, such as the European Commission's standard contractual clauses or the EU-U.S. Data Privacy Framework.

• To provide Puuush (your account, workouts, sync, rankings, friends, challenges and purchases): this is needed to perform our agreement with you, the Terms of Use.
• With your permission (Apple Health, notifications, camera and tracking): you can withdraw it at any time in iOS Settings.
• For our legitimate interests (analytics, crash reports, measuring our ads, fair play and security): running, improving and promoting Puuush, and keeping the rankings fair.

We keep your data while your account exists. Uninstalling the app does not delete it. To delete it, go to Settings, then Delete Account, in the app. This deletes your account, profile, workouts, friends and scores, in Puuush and in WSFU's other apps.

Some copies can remain afterwards: files in our storage, such as your photo and your workout files, and the data held by the services above under their own retention rules. Write to contact@wsfu.co and we will delete what we hold and ask these services to do the same.

You can ask us to access, correct or delete your data, to send you a copy, to restrict its use or to stop using it, and you can withdraw a permission at any time. Write to contact@wsfu.co; we may ask you to show that the account is yours. If you think we do not respect your rights, you can complain to the CNIL (cnil.fr), the French data protection authority, or to the authority of your country.

We take reasonable measures to protect your data, but no transmission or storage is 100% secure. Protect your device with a passcode and keep it up to date.

We may update this policy when Puuush or the law changes. The latest version is always on this page, with its effective date.

For any question about this policy or your data, write to contact@wsfu.co.