Last updated: 5 July 2026
Privacy Policy
This policy explains what information Pushup Social collects, how we use it, who we share it with, and the rights and choices you have.
The short version. We collect the account and workout information needed to run the app and its social features. Your camera feed, Apple Health data and your choice of blocked apps stay on your device and are never sent to us. We do not sell your data and we do not run ads or cross-app tracking. You can delete your account and data at any time from inside the app.
1. Who we are
Pushup Social (the "app") and this website are operated by Josh Mustafa, a sole trader based in the United Kingdom ("we", "us", "our"). We are the data controller for the personal information described in this policy.
If you have any questions, you can reach us at joshmus7@msn.com.
2. Information we collect
Account and profile
When you create an account we collect your email address and a display name. You can also add a username (handle), a short bio and a profile picture. We store your country and time zone (derived from your device) so leaderboards, streaks and reminders work correctly. If you use Sign in with Apple, we receive an Apple identifier for your account and, the first time only, the name and email you choose to share.
Your activity and content
To provide the core features, we store the sets you log (the number of reps, the time, and whether you logged them by hand or with the AI counter), your streaks and milestones, and the content you create in the social features: comments, reactions, team messages and "roasts", along with your friends, teams and referrals.
Subscriptions
If you subscribe to Pushup Pro, we record your subscription status and plan. Purchases are handled by Apple and validated through RevenueCat. We never see or store your card or payment details.
Device and technical information
If you enable notifications, we store a push notification token so we can send them. We also process basic technical information such as your app version and device platform, and standard server logs (including your IP address) which help us keep the service secure and reliable.
Support
If you email us, we keep your message and contact details so we can help and keep a record of the conversation.
Finding friends (optional)
If you choose to find friends who already use the app, any phone number involved is converted into a one-way cryptographic hash before it reaches us. We do not store your actual phone numbers or your contact list.
3. Information that stays on your device
The following never leaves your phone and is never sent to our servers:
- Camera and the AI rep counter. Rep counting runs entirely on your device using Apple's on-device vision technology. Your camera feed is never recorded, saved or uploaded. Only the resulting rep count is saved as a set.
- Apple Health. If you grant permission, the app reads values such as your weight, height, age and sex to estimate calories locally, and can write your completed workouts back to Apple Health. This health data stays on your device and is not sent to us.
- Screen Time / app blocking. Your choice of which apps to block is held by Apple as opaque tokens on your device. We never see which apps you choose, and that selection is never sent to our servers.
4. How we use your information
- To create and run your account and provide the app's features.
- To power the social features: feeds, friends, teams, leaderboards, streaks and medals.
- To send notifications you have asked for (for example a streak reminder or when a friend posts).
- To manage subscriptions and referrals.
- To keep leaderboards fair, including anti-cheat checks and handling reports.
- To understand how the app is used so we can fix problems and improve it.
- To keep the service secure and to comply with our legal obligations.
5. Our legal bases (UK GDPR)
We rely on the following legal bases to process your information:
- Performance of a contract: to provide the app and the features you sign up for.
- Legitimate interests: to keep the service secure, prevent cheating and abuse, and improve the app, in a way that is not overridden by your rights.
- Consent: for optional things such as push notifications, camera and Health access. You can withdraw consent at any time in your device settings.
- Legal obligation: where we must keep or disclose information to comply with the law.
6. Who we share it with
We do not sell your personal information. We share it only with the service providers that help us run the app, and only as needed for the purposes below.
| Provider | What they do | Information shared |
|---|---|---|
| Fly.io | App hosting and database (London, UK) | Your account and activity data, held securely at rest |
| Cloudflare (R2) | Stores profile pictures | Your avatar image |
| Apple | Sign in with Apple and App Store payments | Your Apple sign-in identifier; Apple processes any payment |
| RevenueCat | Manages subscriptions | Your account identifier and subscription status |
| Google (Firebase Cloud Messaging) | Delivers push notifications | Your device push token and the notification content |
| Resend | Sends account emails (e.g. password resets) | Your email address and the message |
| PostHog | Product analytics to improve the app | Usage events linked to your account identifier |
| Sentry | Diagnoses crashes and errors | Error details and your account identifier |
| Loop | First-party analytics and diagnostics | Usage and diagnostic events linked to your account identifier |
We may also disclose information if required by law, or to protect the rights, safety or property of our users or ourselves.
7. International transfers
Our servers are in the United Kingdom, but some of the providers above (such as Apple, RevenueCat, Google, PostHog and Sentry) may process data in the United States or other countries. Where information is transferred outside the UK, we rely on appropriate safeguards such as the UK International Data Transfer Agreement or equivalent contractual protections.
8. How long we keep it, and deleting your account
We keep your information for as long as your account is active. You can delete your account at any time from within the app. When you do:
- Your account is deactivated immediately and enters a 30-day grace period, in case you change your mind.
- After 30 days your account record, including your email, name, profile and identifiers, is permanently deleted, and your posts, comments and reactions are anonymised so they are no longer linked to you.
- If you signed in with Apple, we also revoke that connection with Apple.
We do not currently offer a self-service data export. If you would like a copy of your information, email us at joshmus7@msn.com and we will help.
9. Your rights
Under UK data protection law you have the right to:
- access the personal information we hold about you;
- ask us to correct information that is wrong or incomplete;
- ask us to delete your information (you can do this yourself in the app);
- object to or ask us to restrict certain processing;
- ask for a copy of your information in a portable format;
- withdraw any consent you have given.
To exercise any of these, contact us at joshmus7@msn.com. You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk, though we would appreciate the chance to help first.
10. Advertising and tracking
We do not sell your data, we do not show third-party ads in the app, and we do not track you across other companies' apps or websites. The app does not use Apple's App Tracking Transparency framework or advertising identifiers because it does not track you in that way.
11. Children
Pushup Social is not directed to children under 13, and we do not knowingly collect personal information from them. We do not collect a date of birth. If you believe a child has given us personal information, please contact us and we will delete it.
12. Security
We protect your information with encryption in transit, hashed passwords, access controls and reputable infrastructure providers. No method of transmission or storage is completely secure, but we work to protect your information and to respond quickly if something goes wrong.
13. Changes to this policy
We may update this policy from time to time. When we make material changes we will update the date at the top and, where appropriate, let you know in the app.
14. Contact us
Josh Mustafa (Pushup Social)
Email: joshmus7@msn.com
United Kingdom