Push Up Lock — Privacy Policy

Last updated: 13 May 2026

This Privacy Policy describes how Push Up Lock (“we”, “our”, “the app”) handles your information. We collect as little as possible — only what the app actually needs to work.

What we collect

• Email address. When you sign up. Used only for login and password recovery. Stored by Firebase Authentication.
• Username. Chosen by you. Public to other users so they can search and find you, add you as a friend, and see you on the leaderboard.
• Fitness data. Reps, streaks, completed sessions, exercises, and unlock minutes earned. Used to show your progress, the leaderboard, and the friend session-history list. Stored in Cloud Firestore (Google Firebase) and linked to your account.
• Purchase history. Whether you’ve purchased Premium or any XP packs. Determined locally via Apple’s StoreKit framework. We never see your card or bank details — Apple processes all payments.

What we do NOT collect

• We do not collect your full name, phone number, or address.
• We do not access your contacts, location, or microphone.
• We do not run third-party advertising or analytics SDKs.
• We do not share data with data brokers.
• The camera is used only on-device to count push-ups (via Apple’s Vision framework) and to scan food barcodes. Video frames are processed on your device and are never uploaded, stored, or transmitted off your device.
• The Photos library access is only used to save the result-card image you choose to export. We do not read or upload your photos.

Third-party services

• Firebase (Google) — Authentication and Firestore database for your account, friends, challenges and public session history. See Google’s privacy policy at policies.google.com/privacy.
• OpenFoodFacts — When you scan a barcode, only the barcode digits are sent to world.openfoodfacts.org to fetch the nutrition label for that product. No personal identifiers are sent.
• Apple StoreKit — Handles all in-app purchases (Premium subscription and consumable XP packs). Governed by Apple’s privacy policy.

Your rights

• Delete your account. Open the app → Profile → Settings → Delete account. This permanently removes your profile, friends edges, public sessions and challenge history from our servers.
• Access or export your data. Email us at ghalil@gbict.nl and we’ll respond within 30 days.

Children

Push Up Lock is not directed at children under 13. We do not knowingly collect personal data from anyone under 13. If you believe a child has provided us with personal data, contact us and we’ll delete it.

Changes to this policy

If we change this policy we’ll update the “Last updated” date at the top. Significant changes will also be announced in the app.

Contact

Questions or requests about your data: biadaghalil@gmail.com