Privacy Policy

1. Who controls your data

Pushbro is operated by Hugo Biais in France ("Pushbro", "we", "us"). For privacy questions or requests, email hugobiais75@gmail.com.

2. Data we process

Account and profile

• Your Sign in with Apple identifier, name, email or Apple relay address, and account dates.
• Your daily target, time zone, notification choices, and optional profile photo.
• Authentication sessions, including session identifiers, IP address, user agent, and expiry time.

Workout and group activity

• Push-up counts, workout start time, duration, and a retry-safe workout identifier.
• Daily completion results used to calculate streaks.
• Groups you create or join, your current role, group target, join code, and group activity.

Camera and photos

Pushbro asks for camera access to detect your pose and count push-ups. Processing happens on your device. We do not upload or store camera frames or workout video. If you choose a profile photo, it is uploaded, stripped of metadata, cropped, resized, and stored as 128 px and 512 px WebP images.

Notifications

If you enable push notifications, OneSignal processes a push token, app and device information, network information such as IP address, delivery and interaction information, and a pseudonymous Pushbro account identifier.

Moderation, reports, and blocks

Before a first name, group name, or profile photo becomes visible to other members, it is checked automatically. The text, or the resized 512 px photo, is sent to OpenAI's moderation service for that check and then discarded; OpenAI does not use API content to train its models. Content that fails the check is never published or stored.

If you report a member or a group, we store who reported, the reported member or group, the reasons selected, a copy of the reported name at that time and, for a reported photo, a private copy of that photo so we can review it even if it is changed afterwards. If you block a member, we store your account, the blocked account, and a copy of their name at that time.

3. Why we use it

Provide Pushbro. Account, workout, group, streak, avatar, and support data is necessary to provide the service you request.

Send reminders. Self-reminders and group nudges rely on your notification choices and device permission. You can withdraw permission at any time.

Keep the service secure. We process session, IP, user-agent, error, and abuse-prevention data based on our legitimate interest in protecting users and the service.

Keep groups safe. We moderate names and photos before publication, and process reports and blocks, based on our legitimate interest in preventing abuse between members and on our obligations as an app distributed through the App Store.

Meet legal duties. We retain or disclose data where necessary to meet a legal obligation or establish legal claims.

4. What other group members see

Members can see each other's display names, profile photos, today's push-up progress, completion status, and streak information. Group admins can manage membership and roles. Anyone with a valid six-character join code can preview the group name, target, streak, and member display names and photos before joining. Do not share a join code publicly unless you intend to invite people.

You can block a member from any group you share. Blocking hides that person from your own group screens and personal notifications in every group you share; it does not remove anyone from a group, does not change group totals or streaks, and is not shown to the blocked person. You can unblock at any time in Settings. Reporting a member or a group sends it to us for review and does not block anyone.

5. Service providers

We share only what is needed with processors that help operate Pushbro:

• Apple — Sign in with Apple, iOS permissions, and push delivery through APNs.
• Cloudflare — API hosting, security, image processing, caching, and avatar storage.
• Vercel — public website hosting.
• Neon — PostgreSQL database hosting in Frankfurt, Germany.
• OneSignal — push notification subscriptions, delivery, and delivery reporting.
• OpenAI — automated moderation of names, group names, and profile photos before publication. Content sent for this check is not used to train OpenAI models.

We do not sell personal data, share it with data brokers, use it for targeted advertising, or use third-party advertising SDKs. This website does not use analytics or non-essential cookies.

6. International transfers

Some providers, including OpenAI for the moderation check, operate from the United States or other countries outside the European Economic Area. Where required, transfers are covered by an adequacy decision, the EU Standard Contractual Clauses, or another lawful safeguard. Contact us for information about the safeguard relevant to your data.

7. Retention and deletion

We keep account, workout, group, and streak data while your account exists because it is needed to provide the service. Sessions expire or are deleted with your account. Replaced profile photos are removed, subject to temporary caches.

A report, including the private copy of a reported photo, is kept while it is open and for 30 days after it is resolved, then deleted. A block is kept until you unblock the person or either account is deleted.

You can permanently delete your account inside the app. This removes your Pushbro account, sessions, workouts, daily completion records, current memberships, groups you created, stored avatar files, reports you made, reports about you, and blocks you hold or that others hold against you. It also requests deletion of the OneSignal user and associated push subscriptions. Providers may retain limited security logs or backups for their documented retention periods, and we may keep information where law strictly requires it.

8. Your choices and rights

Depending on applicable law, you may request access, correction, deletion, restriction, portability, or object to certain processing. You may withdraw notification permission in iOS Settings and change Pushbro notification preferences inside the app.

Email hugobiais75@gmail.com to exercise a right. We may need to verify your identity. If you are in France or the EU, you may also complain to the CNIL or your local data-protection authority.

9. Children

Pushbro is not directed to children under 13. If you are below the age at which you can consent to online services in your country, use Pushbro only with permission from a parent or legal guardian.

10. Security and changes

We use encrypted connections, restricted service credentials, and access controls designed to protect the service. No system is completely secure. We may update this policy when Pushbro or the law changes. Material changes will be communicated when required.