This policy explains what data the PushUp Challenge app and this website collect, why, and what your rights are. The short version: we collect the minimum needed to run the app, we don't show ads, the app has no third-party analytics, this website uses Google Analytics only if you accept it, and we never sell your data.
Who we are
PushUp Challenge is operated by Fission Ventures Limited, registered in England and Wales (Company No. 12259667), 2 Pinfold Lane, Somersham, United Kingdom. Fission Ventures Limited is the data controller for the personal data described here. Contact: support@pushup-challenge.com.
Data we collect
Account data
If you sign in, we collect your email address and, where you sign in with Google or Apple, the identifier those services share with us along with your name if they pass it on and you allow it. You can set a display name for leagues. We also record the country you signed up from (from your device's region setting, not your location) and when you last used the app.
If you choose “continue without account” (guest mode), the app creates an anonymous account for you with no email address or name, so that your workout history can be backed up and synced. Everything below about workout data applies to guest accounts too; you can close a guest account in the app at any time.
Workout data
Your daily targets, training schedule, logged sets and reps, timestamps, streaks and derived statistics. This is the core of the app; with an account it syncs to our servers so it follows you across devices.
Trainer data
If you use the premium Trainer program: your current level and position in the program, each completed session's sets and reps, and your test results (the pushup variant tested, reps achieved, and whether you passed), with timestamps. Like workout data, this syncs to our servers so the program follows you across devices.
Trainer assessment profile
The Trainer is optional. When you set it up, we ask a few questions about you: sex, age band, weight, height and activity level. These are used solely to tune the program's pacing — the suggested starting style, session volumes and rest times. You can answer “prefer not to say” for sex and skip weight and height entirely, and the program still works. The profile syncs with your account so your pacing follows you across devices; you can edit it in the app at any time, and it is deleted with your account (or on request — just email us). We never use it for advertising, never share it beyond the hosting listed below, and it feeds no automated decision with legal or similar significant effect — it only adjusts workout pacing, and a fitness test you take always decides your level.
League data
League names, memberships, standings, and the email addresses you invite. Invited addresses are used only to deliver the invitation and to show the invite to that person if they later sign up; we keep them until the invite is accepted or declined, or the league is deleted.
Subscription status
Whether your account has an active premium subscription. Payment itself is handled by Apple or Google — we never see your card details.
Support messages
If you contact us — through the app's “Bugs & Support” form, this website's contact form, or by email — we receive your name, email address and message, and use them only to reply and resolve your request.
This website
Like any web server, our hosting provider may keep short-lived technical logs (such as IP address and browser type) to keep the site secure; we don't use them to identify you.
Website analytics (only with your consent).If you accept analytics in the cookie banner, the website loads Google Analytics 4, which sets cookies and sends Google information about your visit: pages viewed, how you arrived (such as a search engine or link), approximate location derived from your IP address, device and browser type. Google Analytics 4 doesn't log or store IP addresses. We use the reports only to understand which pages are useful; not for advertising, and we don't link them to your app account. Google keeps analytics data for at most 14 months. If you don't accept, the analytics script is never loaded. You can change your choice at any time on the Cookies page.
What we do not collect
- No advertising identifiers and no ad networks.
- No third-party analytics or crash-reporting SDKs in the app.
- No push notifications. Reminders and timer alarms are scheduled locally on your phone; no notification token is sent to us.
- No camera, microphone or motion-sensor data.
- Nothing from Apple Health, Google Fit or any other health platform. The only body information we hold is what you choose to type into the optional Trainer assessment above.
- No location data.
How we use your data
- Syncing your workout history across devices.
- Running the Trainer program: storing your level, session records and test results so your progress follows you.
- Personalising the Trainer's pacing (suggested starting style, session volumes, rest times) from your optional assessment profile.
- Running leagues: standings, invites, and showing your display name to league members.
- Sending sign-in codes and essential account emails.
- Recognising premium entitlements.
- Responding to support requests.
- Keeping the service secure and preventing abuse (for example, limiting sign-in code attempts).
We do not sell personal data or use it for advertising.
Legal bases
Under UK GDPR we process your data to perform our contract with you (running the app and sync), for our legitimate interests (securing the service, preventing abuse), and with consent where required (for example, sending a league invite to an address you provide, or website analytics). The Trainer assessment profile is processed on the basis of your consent: providing it is optional, and you can withdraw consent at any time by editing the profile in the app or asking us to delete it.
Who we share data with
- Resend — delivers transactional email (sign-in codes, invites). Receives the destination email address and message content.
- RevenueCat — manages subscriptions. Receives an anonymised app user ID and purchase tokens from Apple/Google.
- Apple and Google — handle sign-in (where you choose it) and all payments.
- Railway — hosts our servers and database.
- Google (Google Analytics) — website analytics, only if you accept analytics cookies on this website. Never used in the app.
Each processor receives only what it needs to perform its service. We do not share data with anyone else except where required by law.
Retention and deletion
We keep your data while your account is open. You can close your account at any time in the app (Settings → Account → Close Account), or request deletion on our account deletion page or by emailing support@pushup-challenge.com. Closing your account signs you out everywhere and removes you from league standings immediately. You then have 30 days to change your mind by signing back in; after that the account cannot be recovered and we permanently delete your account, workout history, Trainer progress, Trainer assessment profile and league data from our servers. We may keep a minimal record that an account with your email address was closed, and any support correspondence, for as long as needed to handle queries and legal claims. Data stored only on your phone is removed when you delete the app.
Sign-in codes expire after 10 minutes. Pending league invites are kept until accepted, declined or the league is deleted.
Where your data is stored
Our servers and database are hosted by Railway in the European Union (Netherlands), which the UK recognises as providing adequate data protection. Some processors listed above (Resend, RevenueCat) operate from the United States; where data leaves the UK or EU we rely on appropriate safeguards such as the UK International Data Transfer Addendum or standard contractual clauses in their terms. Google Analytics (website only, with your consent) may also process data in the United States under the same kind of safeguards.
Children
The app is not directed at children under 13, and you must be at least 13 (or the age your country requires for consent) to create an account.
Your rights
You can request access to, correction of, or deletion of your personal data, ask for a portable copy, or object to processing, by contacting support@pushup-challenge.com. If you're unhappy with how we handle your data you can complain to the UK Information Commissioner's Office (ico.org.uk).
Changes
If we make material changes to this policy we'll update this page and the date above, and flag significant changes in the app.