Privacy Policy

PushTrack collects only what's needed to run the service. We do not sell your data to third parties.

What we collect.

Email address, username, display name, optional profile photo, timezone, and a referral code if you signed up through a friend's invite. Workout activity: rep counts and timestamps for each set, rest days, streak history (current, best, freezes), badges you've earned, and your declared push-up style. Per-rep classifier signals (form variant and confidence scores) are stored to improve the rep counter — no images or video. Your notification preferences (email reminder times, and push reminder times where push is available) and push-notification tokens if you opt in. Friend connections, group memberships, and group messages if you use those features. Support requests you submit, including the AI-triage transcript, the page or screen you were on, your device or browser user-agent, and limited diagnostic context. Sign-in attempts (email, IP, user-agent) are kept short-term for security auditing.

Analytics & cookies.

On our website (pushtrack-ai.vercel.app) we use PostHog for product analytics, which records anonymized page views, button taps, and session events tied to your account ID, and we use Firebase Authentication cookies plus a session cookie (“firebase-uid”) so you stay signed in. The PushTrack iOS app is different: it includes no analytics SDK, sends no analytics events, and uses no cookies, advertising identifiers, or cross-app tracking. We do not use third-party advertising trackers on any platform.

What stays on your device.

The camera feed, the raw video frames, and the pose-landmark stream never leave your device. Rep counting runs entirely on your device — in your browser on the web, or natively on your iPhone in the iOS app — using on-device machine learning; only the final rep counts and form labels are saved. We do not collect biometric identifiers (face templates, fingerprints, voiceprints) at any point.

How we use it.

To authenticate you, store your workout history, send the reminders and notifications you've enabled, triage support requests, and improve the app.

Communications.

We send (a) transactional email for sign-in verification and account events, and (b) optional reminder emails when you opt in from Settings. Every reminder email has a one-click unsubscribe link, and you can turn the feature off from Settings at any time. Unsubscribing does not affect verification or account emails. Push notifications, when enabled, are delivered through your device's push service.

Third parties.

We use Firebase (Google) for authentication, Supabase for the database, Vercel for hosting and image storage, Gmail SMTP for outbound email, PostHog for product analytics on the website, and a language-model service to help triage support messages you submit. Each operates under its own privacy policy.

Retention.

Your active data is kept as long as your account is active. Deleting your account removes your workout history, social data, owned groups, and notification preferences. Support requests and sign-in attempt records are de-identified (your account ID and email are stripped) and retained briefly for security and product improvement; sign-in attempts older than 90 days are hard-purged automatically.

Your rights.

You can delete your data at any time using the Delete Account option in Settings. You can request a copy of your personal information by emailing pushtrackapp@gmail.com. You can correct your display name, profile photo, and notification settings yourself in Settings, or request other corrections by email. You can opt out of email reminders and push notifications from Settings at any time. We will not retaliate against you for exercising any of these rights.

Children's privacy.

PushTrack is not directed to children under 13, and we do not knowingly collect personal information from anyone under 13. If you believe a child has signed up, contact pushtrackapp@gmail.com and we will delete the account.

California residents.

PushTrack is based in California. If you're a California resident, the CCPA/CPRA gives you the right to know what personal information we collect, request deletion, request correction, opt out of sale or sharing for cross-context behavioral advertising, and not be discriminated against for exercising these rights. We do not sell or share your personal information. To exercise these rights, use Delete Account in Settings, adjust your preferences in Settings, or email pushtrackapp@gmail.com.