Privacy Policy

Last updated: 15 October 2026

PushPong (“PushPong,” “we,” “us,” or “our”) respects your privacy. This Privacy Policy explains what information we collect when you use the PushPong app and App Clip for iPhone, how we use it, who we share it with, and the choices you have.

PushPong is made by GymStreak Labs. The company responsible for your information (the “data controller”) is GymStreak Ltd, a company registered in England and Wales. You can reach us at team@gymstreak.com.

Optional Apple integrations

If you enable Apple Health, PushPong saves completed push-up sessions as strength workouts, including duration and rep/set counts. iPhone export does not estimate calories. The optional Apple Watch companion can read heart rate and active energy during your workout and save its workout to Health. These Health values stay within your devices and Apple Health: we do not upload them to our servers, analytics or advertising services, use them for advertising, or sell them. You control Health permissions in Apple’s Health and Settings apps.

Widgets and the Watch companion cache your active squad’s name, score, crown holder and gap on your devices. Lock Screen widgets and Live Activities can display this information to someone who can see your screen. They clear when you delete your PushPong data.

If you connect Game Center, verified scores and achievement progress are sent to Apple under your Game Center identity. Game Center friends, leaderboards and challenges follow Apple’s privacy settings. Existing Apple Health workouts and Game Center records are separate from your PushPong account: manage or remove those records through Apple’s services. Deleting your PushPong account clears the app’s local integration caches and pending exports, but does not delete those independent Apple records.

1. Camera and push-up counting

PushPong uses your iPhone’s front camera to count your push-ups. While you do a set, camera frames are analysed on your device to estimate the position of your shoulders, elbows and wrists so the app can tell when a full rep is completed.

• Video and images from the camera are processed in memory only. They are never stored, recorded, saved to your photo library, or uploaded to us or anyone else.
• The body-position points are used only during the set to count reps and show the live tracking overlay. They are not sent to our servers.
• What leaves your phone is the result of a set: the number of reps, how long the set took, the time of each rep, and a note that it was verified by the camera.

You can turn off camera access at any time in iOS Settings → PushPong. Without it, PushPong can’t count or verify reps.

2. Information we collect

Information you give us

• Display name you choose, and a handle and avatar generated from it.
• Squads you create or join: squad name, invite code, who created it, members and the squad’s time zone (used so its day resets at the creator’s local midnight).
• Challenges you send (“Beat my N”) and challenges you answer, including the result.
• Reports you make about another player: who you reported, the reason you picked, and the squad it happened in.
• Messages you send to us, such as support emails, and messages and screenshots you send in the in-app help chat (You → Help & support), with your board name so we can greet you.

Information created when you play

• Push-up results for each verified set: rep count, set duration, rep timings, the date and squad, and the verification method. We use these to build each squad’s daily board, the activity feed, duels and your progress (personal best, streaks, ranks).
• Account identifiers: an anonymous user ID created by Firebase Authentication. If you link Sign in with Apple, we receive a private identifier from Apple. We don’t ask Apple for your name or email address.
• Push notification token, if you allow notifications, so we can send game alerts to your device in future.

Information collected automatically

• Usage and device data via Firebase Analytics (Google): app events such as screens viewed, sets started and finished, and features used, plus device model, iOS version, app version, country and an app instance identifier.
• Attribution and analytics data via AppRefer: a persistent random install identifier, your PushPong account identifier, app events, device model and name, operating system, app version, language/region and time zone. Requests also carry an IP address. Apple Ads attribution can include campaign details and country or region. The advertising identifier (IDFA), ad-click matching and sending trial and purchase events to advertising partners happen only if you allow tracking when iOS asks (see Ad measurement below). Without that permission, AppRefer is limited to first-party analytics, Apple Ads attribution and Apple’s anonymous ad measurement (SKAdNetwork), with no IP/device-fingerprint matching and nothing forwarded to advertising networks.
• Subscription data from Apple: whether you started a trial or subscription, and when it renews, ends or is refunded. Each purchase carries a persistent random install identifier so we can match Apple’s notices to your app install and account. See section 6.

Information stored only on your phone

Some things stay on your device and are not sent to us: your progress record (personal best, lifetime reps, duel record and recent active days), your list of blocked players, your notification preferences, and your onboarding state. Deleting the app removes them.

PushPong does not request access to your contacts, precise location, photo library or the content of your messages. Optional Apple Health and Watch processing is described above; Health measurements are not uploaded to our servers.

Ad measurement (only with your permission). When you first open PushPong, iOS asks whether PushPong may track. If you allow it, we use device and account identifiers, advertising attribution information, and app, trial and purchase events to measure our advertising by matching activity with advertising partners, including Meta. We do not use your fitness records, reps, photos or support conversations for advertising. Refusing doesn’t affect the game, your sets or purchases. You can withdraw at any time from You → Ad measurement, which opens PushPong’s Allow Tracking switch in iOS Settings; withdrawal stops future advertising tracking without affecting processing carried out before. If you don’t allow tracking, nothing is shared with advertising partners.

3. How we use your information

• To run the game: count and verify your sets, keep each squad’s Day Crown board and feed, run duels and challenges, and track your streaks and ranks.
• To let you create, join and switch squads and invite friends.
• To keep your account so you don’t lose your progress, including restoring it with Sign in with Apple on a new phone.
• To provide PushPong Club to subscribers and check whether your subscription is active.
• To keep PushPong safe and fair: review reports, act on cheating or abuse, and filter offensive names.
• To understand how the app is used, fix problems and improve features (Firebase Analytics).
• To understand app usage and measure Apple Ads attribution (AppRefer).
• To respond to you when you contact us.
• To comply with the law and protect our rights and our users.

Where UK or EU data protection law applies, our legal bases are: contract (to provide the app and the game you asked to play), legitimate interests (keeping the game fair and safe, improving the app, measuring our marketing), consent (camera access, notifications, and ad measurement with advertising partners, each of which you can withdraw in iOS Settings), and legal obligation.

4. What other players can see

PushPong is a social game. Players in the same squad can see your display name, avatar, and your push-up results for that squad’s day, including your best set and its rep timings (used to race your “ghost” in duels). Everyone starts in the public “Everyone” squad, so your name and results appear on its daily board too.

If you send a “Beat my N” challenge, anyone with the link can see your name and the set you’re challenging them to beat. People who answer your challenge share their name and result with you.

Please don’t use your full real name or anything personal as your display name if you’d rather not be identifiable.

5. Service providers we share it with

We don’t sell or rent your personal information. We share it only with service providers that help us run PushPong, under contracts that limit how they can use it:

We may also disclose information if required by law, to respond to valid requests from authorities, to protect the safety of our users or the public, or as part of a merger, acquisition or sale of our business (in which case this policy will continue to apply to your information).

6. Subscriptions and payments

PushPong is free to play. PushPong Club is an optional subscription. Payments are handled entirely by Apple through your Apple ID: we never see or store your card or payment details. Apple tells us whether a purchase, trial, renewal, cancellation or refund happened so we can unlock Club features. Our subscription service, AppRefer, keeps your Club purchase records, linked to your PushPong account, to show and restore your membership. Subscription terms are in our Terms of Use.

Help chat. Replies in the help chat may come first from our AI assistant, which is always labelled as AI and uses AI service providers to draft answers from your message. A person from our team takes over when you ask or when the assistant can’t help. Don’t share anything in the chat you don’t want our support team to see.

7. Notifications

If you turn on alerts, PushPong schedules local reminders on your phone, such as a reminder before your squad’s crown resets and a streak reminder in the evening if you haven’t done a set. These are created on your device. If you allow notifications we also store your device’s push token so we can send game alerts (for example, when someone takes your crown). You can turn notifications off at any time in iOS Settings → PushPong → Notifications.

8. Reporting, blocking and names

• Report: long-press a player’s name to report them. Reports go to our team, who review them within 24 hours and may remove names or results, or suspend accounts that break our rules. The reported player isn’t told who reported them.
• Block: blocking hides a player from your boards and feed. Your block list is stored only on your phone, and you can unblock in the You tab.
• Name filter: display names and squad names are checked against a list of offensive words when they’re set, and other players’ names that fail the check are shown as “Player”.

9. How long we keep it

• Account and profile: until you delete your account, or after a long period of inactivity.
• Daily boards, results and challenges: for as long as your account exists, so squads keep their history. When you delete your account we delete your sets, standings, feed entries and the challenges you created. Opponents keep their own sets. We keep a deletion marker containing your account ID for 24 hours, so sign-in tokens issued before deletion can’t write new data, and then delete it.
• Reports: until reviewed or your account is deleted. Reports containing your identity are removed during account deletion.
• Analytics: Firebase Analytics data is kept for up to 14 months. Deleting your account resets the app’s analytics ID on your phone.
• Anonymous statistics: we keep aggregate totals, such as how many sets were played, how many people joined Club and how many accounts were deleted. They are counts and sums that can’t identify you, and they remain after you delete your account.
• Attribution and subscription records: until account deletion, when AppRefer removes identifiable records within 24 hours. Transaction records we must keep for tax and accounting (amounts, dates, products and store transaction references) are kept for six years after the end of the financial year they relate to (at most seven years from the transaction), with your account ID replaced by a coded reference. Only the people who handle our accounts can see them, and they are then deleted.

10. Deleting your account

You can delete your account in the app at any time: open the You tab → Account → Delete my data. Your account closes and a server-owned deletion request completes within 24 hours. This:

• removes your historical sets, standings, feed entries and squad memberships;
• deletes your user profile, your PushPong account and the challenges you created; opponents keep their own results;
• deletes your identifiable analytics, attribution and support records held by AppRefer, keeping only anonymous totals and the accounting records described above;
• revokes Sign in with Apple for PushPong if you linked it;
• clears PushPong’s data on your phone and returns you to the start.

Deleting your account doesn’t cancel a PushPong Club subscription. Cancel it in your Apple ID settings (see our Terms). You can also email team@gymstreak.com and ask us to delete your data.

11. Your rights and choices

Depending on where you live (including the UK, the EU and some US states), you have the right to:

• Access a copy of your personal information;
• Correct information that’s wrong (you can change your name in the app);
• Delete your information (in the app, or by emailing us);
• Port your information to another service in a portable format;
• Restrict or object to how we process it, including for analytics and ad measurement;
• Withdraw consent at any time, for example by turning off camera, notification or tracking permissions in iOS Settings.

To use these rights, email team@gymstreak.com and tell us your display name and squad so we can find your account. We’ll reply within one month. We won’t treat you differently for using your rights. If you’re in the UK you can also complain to the Information Commissioner’s Office (ico.org.uk); in the EU, to your local data protection authority.

We don’t sell personal information or share it for cross-context behavioural advertising, as those terms are defined under California law.

12. International transfers

We’re based in the UK, and our service providers (such as Google, Apple and AppRefer) may process information in the United States and other countries. Where we transfer personal information out of the UK or EU, we rely on adequacy decisions or standard contractual clauses to protect it.

13. Security

We take reasonable steps to protect your information, including encryption in transit, access controls on our database so players can only change their own data, and limiting access to authorised staff. No method of transmission or storage is 100% secure, so we can’t guarantee absolute security.

14. Children

PushPong is not directed at children under 13, and we don’t knowingly collect personal information from children under 13 (or the higher minimum age in your country). If you’re a parent or guardian and believe your child has given us personal information, contact us and we’ll delete it.

15. Changes to this policy

We may update this Privacy Policy from time to time. We’ll post the new version on this page and update the date at the top. If a change is significant, we’ll also tell you in the app.

16. Contact us

If you have any questions about this Privacy Policy or your information, contact us: