Back to Rep Rivals™

REP RIVALS™

Privacy Policy

Effective and last updated October 20, 2026

This policy covers the Rep Rivals™ beta at reprivalgame.com, including its installed Home Screen web app. Rep Rivals™ (“we,” “us,” or “our”) provides camera-counted exercise sessions, records, leaderboards, challenges, organizations, and paid Pro features. Privacy requests go to georgeppmc@gmail.com.

The main points

  • Your workout camera video is processed on your device. Rep Rivals™ does not record or upload that video.
  • Movement measurements are sent to our server to check reps and save results. Your optional profile photo is uploaded separately.
  • Leaderboards are public, including to signed-out visitors. Your athlete name, username, photo, and scores can be seen by others.
  • Push notifications, profile photos, broad location, and post-score personalization are optional.
  • We use first-party Instagram source attribution to measure new-account activation. We do not sell personal information or use workout data for targeted advertising.

1. Accounts, profiles, and information you provide

You can use email and password or Google sign-in through Supabase; existing ChatGPT sign-in is also supported. We receive an account identifier and email address, and the sign-in provider may process basic profile and session information. Email/password credentials pass through our sign-in endpoint to Supabase for authentication; passwords are not stored in the competition database. We do not receive your Google or ChatGPT password.

We store your athlete display name and optional username, profile photo, and city or region. The app lets you choose whether to display your location publicly. It does not request GPS permission or collect precise device location. A location you type yourself is still information you provide to us; avoid entering a street address. Technical IP information can indicate an approximate region.

After your first score, you may provide fitness level, favorite exercise, and a training goal. We use these preferences to personalize the experience. If you contact us, we receive your message, contact information, and any attachments you choose to send.

Optional passkey sign-in: If you add a passkey to an email or Google account, Supabase stores the public key and credential metadata needed to verify future sign-ins, such as its identifier, name, and creation or last-use time. Your device or password manager holds the private key and handles Face ID, Touch ID, or device-passcode verification. Rep Rivals™ does not receive your facial or fingerprint data. You can add or remove passkeys in your profile’s Face ID & passkeys settings and keep your original sign-in method as a backup.

Food photos and Nutrition

Pro Nutrition lets you select or take a food photo. Only when you consent and press Analyze meal, a resized image and the meal details you enter are sent through our server to OpenAI for nutrition estimation. This is separate from on-device workout tracking. Rep Rivals does not save the food photo, meal details, or analysis results; they remain temporarily in your current screen and are cleared when you leave. We store an account-linked daily request count to enforce usage limits. OpenAI processes inputs under its API data policies; provider security and abuse-monitoring retention may apply. Avoid including people or sensitive information in meal photos. Estimates may be inaccurate and cannot establish allergens or food safety.

2. Camera tracking and exercise data

Push-ups, squats, and Pro movements use a MediaPipe pose model running in your browser. Camera access starts with your permission. The app estimates body landmarks and movement on your device; it does not use the camera to identify you through facial recognition or create a face-identity template. Microphone access is not required for rep tracking.

When you submit a round, the app sends joint angles, tracking confidence, movement timing, and related pose-derived values to our server. These are used to recompute qualifying reps, check the session, and produce form feedback. The saved workout record contains the exercise, score, tracking quality, timestamps, session status, form summary, and a measurement hash. The raw measurement sequence is processed for validation and is not saved as part of the workout record.

Workout video is not uploaded or stored by Rep Rivals™. A profile photo you intentionally upload is different: it is stored for display on your profile and competition screens. Rep counting is a beta estimate, and the app’s “verified” score means it passed camera and server checks, not independent identity verification.

Rep Rivals™ Sports shadowboxing also processes camera video and body landmarks entirely on your device. For signed-in athletes, completed boxing rounds send target hit/miss outcomes to our server to calculate and save your score, difficulty, hits, misses, best combo, round duration, and completion time. These private practice records are linked to your account and appear in My records; they are not added to public leaderboards. Camera video and body landmarks remain on your device. Guest rounds are not saved.

3. Records, competition, and public visibility

We store or calculate personal records, cumulative reps, ratings, wins, match results, organization and challenge membership, daily and weekly progress, XP, levels, and milestones.

Public leaderboards can show your name, username, profile photo, scores, rating, and public location to anyone, including visitors who are not signed in. Public content may be copied, shared, or indexed by search engines. Use a display name and photo you are comfortable making public.

Signed-in athletes can also see qualifying completed sessions and personal-record activity in the activity feed. Organization and private Pro challenge participants can see the names and relevant results displayed within their shared competition. A round completed in a group can still contribute to an athlete’s overall exercise records and public leaderboards. Group membership does not make those overall scores private. Your email, billing details, and optional fitness preferences are not included in the public leaderboard response.

When you choose Share or Save photo, the app generates a results card on your device containing the information shown in its preview. Sharing sends the selected card or text to the app or recipient you choose. Their privacy practices apply, and copies shared outside Rep Rivals™ are outside our control.

4. Pro subscriptions and coaching

Rep Rivals Pro™ subscriptions are available through Stripe checkout. Stripe processes payment details and may collect billing, device, and fraud-prevention information under its own policy. We store customer and subscription identifiers, plan identifiers, subscription status, access expiration, and checkout references to provide and manage Pro access. We do not store full payment-card numbers in the app database. Square account and subscription references from earlier billing flows may remain where applicable.

Pro analytics and coaching use saved performance results and form summaries to generate trends, suggested rep goals, and a form focus. The current coaching feature uses application calculations and rules; workout video and measurements are not sent to an external generative-AI coaching service. Pro badges and custom challenges also store badge selections, challenge organizers, names, exercises, targets, deadlines, invitation codes, and membership.

5. Notifications and device information

In-app notifications contain challenge, record, and reminder information. Device push alerts require permission. We store the device’s push endpoint and encryption keys, notification preferences, time zone, last activity time, and delivery/read status to send and manage alerts. The browser or operating-system push provider, such as Apple or Google, delivers the notification. Notification content may appear on your lock screen depending on your device settings.

Hosting, authentication, payment, and security services may process IP addresses, browser/device information, request times, and diagnostic logs to deliver, protect, and troubleshoot the service.

6. Cookies, storage, and activation measurement

We use authentication cookies for sign-in, browser storage for preferences such as installation-prompt dismissal, and a service worker for the installed web app and push notifications.

Starting through our Instagram challenge link may set a first-party rr_source cookie containing the value “instagram” for up to 24 hours. When a new app account is created, that source can be saved with its onboarding record. The cookie’s expiration does not delete the account-linked source record.

We record account creation and first-score timing, and use session records to calculate how many new athletes start a round, save a round, and save a positive camera-counted score within their first 30 minutes. The owner dashboard shows aggregate activation figures, including Instagram-attributed accounts. This is not a measurement of Instagram impressions or every link visit. Switching browsers or clearing cookies can prevent attribution.

The current app does not include a Meta advertising pixel or Google Analytics tracking tag, and we do not send these activation metrics to Instagram. We do not sell personal information or share it for cross-context behavioral advertising. The app does not change its first-party functionality in response to browser Do Not Track signals.

7. Why we use data and who processes it

We use information to authenticate users, count and validate reps, save records, run competitions, personalize training, manage subscriptions, deliver requested notifications, measure onboarding, respond to support requests, and prevent misuse.

These providers receive information needed for their roles and may process it in the United States or other countries where they operate. Their own policies govern their independent services. We may also disclose information when required by law, to address fraud or security incidents, or to protect users and the service. Public and user-directed sharing are described above.

8. Retention

Account, profile, competition, onboarding, and subscription records are retained while needed to operate the account and service, handle disputes, and meet applicable recordkeeping obligations. Most of these records do not currently have an automatic expiration period. Notification cleanup removes records older than 30 days when the delivery job runs; this is not a guarantee of deletion at an exact hour. Expired push endpoints are removed when the provider reports them as invalid, and you can unregister a device through notification settings.

We do not retain workout video. Provider logs, billing records, and backups can follow separate retention schedules. Clearing browser storage or removing the Home Screen app does not delete your server-side account, results, or subscription.

9. Your controls and privacy requests

You can edit your profile, remove or replace your photo, hide your location, decline or revoke camera access, change notification preferences, and revoke device notification permission. Pro subscription management is available in the Pro area. Cancelling a subscription does not itself delete an account.

To request access, a copy, correction, or deletion of your information, email georgeppmc@gmail.com, preferably from your account email, with your username and the request. Do not send your password or payment-card number. We may need to verify account ownership before acting. Account deletion is currently handled through support rather than an in-app deletion button.

Depending on where you live and which laws apply, you may also have rights to object to or restrict certain processing, withdraw consent, appeal a decision, or complain to a privacy authority. Contact the same address to exercise applicable rights or appeal a response. We will handle requests under applicable law and will not discriminate for exercising protected privacy rights. Information may need to be retained where legally required or to resolve disputes; shared competition records may require anonymization to preserve other participants’ results. We will explain relevant limitations when responding.

10. Security, children, and changes

We use HTTPS, session and ownership checks, input validation, and access controls to protect information. No service can guarantee absolute security. Report suspected privacy or account issues to our contact address.

Rep Rivals™ is not intended for children under 13. If you believe a child under 13 has provided personal information, contact us so we can investigate and address it.

We update this page as our operations change and show the effective date above. Material changes to collection or sharing will be communicated through the service or other appropriate means, with consent obtained when required. This policy describes the current web beta, including its Home Screen installation; any future native-app data practices will be disclosed when introduced.

Terms and ConditionsReturn to the appContact privacy support