Privacy Policy

Push Rivals (“the app”, “we”, “us”) is a camera-tracked fitness game where players compete in push-up battles. This policy explains what information we collect when you use the Push Rivals website (pushrivals.com) and the Android app, why we collect it, and the choices you have.

By creating an account or using the app you agree to this policy. If you do not agree, please do not use the app.

When you register we store: your email address, chosen username, optional avatar image, and profile fields you set (such as display preferences).

If you sign in with Google, Google shares your name, email address and profile picture with us; we use these only to create and secure your account. We never see or store your Google password.

We also store account metadata needed to run the service, such as sign-in timestamps and account status.

To provide ranked competition we store gameplay records linked to your account, including: match results and scores, push-up counts per match, trophies, ranks and rating history for 1v1 and 2v2 modes, match history, win/loss records, streaks, XP and levels, challenge and mission progress, in-game currency balances (Coins, Gems, Energy), purchase and reward transaction logs, owned cosmetics, friends lists, and challenge/rematch interactions.

Leaderboards display usernames, avatars, ranks and competitive statistics. Simulated opponents may also appear in leaderboard standings.

We also keep security and audit logs (for example administrative actions and anti-cheat signals) to protect fair play and investigate abuse.

Push Rivals uses your device camera during matches to detect push-ups. Pose estimation runs on your device: the camera feed is processed locally and converted into body-position landmarks that the game uses to count repetitions.

We do not record, store, upload or share camera video or images. The video stream never leaves your device, and no camera recording is retained after a frame is analysed. Only the resulting gameplay numbers (for example, your rep count in a match) are sent to our servers as part of normal match scoring.

Camera access is requested only when you start a match, and you can deny or revoke it at any time in your device settings — core account features remain available, but camera-tracked matches require it.

Your data is stored on secure cloud infrastructure (Lovable Cloud, powered by Supabase) with encrypted connections (TLS) in transit and access controls on our database.

Row-level security policies restrict what any account can read or write, and sensitive operations (scoring, purchases, currency changes, account deletion) are performed server-side.

No system is perfectly secure, but we apply industry-standard measures and limit access to operational data to what is needed to run the service.

We use a small number of third-party providers to operate the app:

• Google Sign-In — optional authentication. Governed by Google’s own privacy policy.

• Lovable Cloud / Supabase — hosting, database, authentication and real-time infrastructure.

• Payment providers (when purchases are enabled) — payment details are processed by the payment provider; we do not store your full card or payment credentials.

We do not sell your personal data, and we do not share it with third parties for their own marketing. Data is shared with providers only as needed to deliver the service.

You can delete your account at any time from your Profile screen using the “Delete account” option. Deleting your account removes your profile, authentication record, gameplay statistics, currency balances, cosmetics, friends and match history.

Where legally or operationally required, limited records (for example anonymised purchase archives or abuse-prevention logs) may be retained in a form that no longer identifies you.

You can also request deletion by contacting us at the address below.

We keep your account and gameplay data for as long as your account is active. If you delete your account, personal data is removed as described above, subject to short backup and log retention windows.

Stale or abandoned match data is automatically expired and cleaned up by the system.

Push Rivals is not directed at children under 13 (or the minimum age of digital consent in your country). We do not knowingly collect personal data from children below that age. If you believe a child has created an account, contact us and we will delete it.

Players under the age of majority should use the app with a parent or guardian’s permission, particularly where in-app purchases are involved.

Depending on where you live, you may have rights to access, correct, export or delete your personal data, and to object to or restrict certain processing.

Most of these actions are available directly in the app (profile editing, account deletion). For anything else, or for privacy questions and complaints, contact us at: privacy@pushrivals.com

We may update this policy from time to time. Material changes will be announced in the app, and the “Last updated” date below will change. Continued use after an update means you accept the revised policy.