RepsRPG Privacy Policy
Effective Date: August 22, 2026
Welcome to RepsRPG! This Privacy Policy explains how we collect, use, and protect your information when you use our fitness app. RepsRPG is developed and published by Haris Abduloski.
1. Information We Collect
Account Information
- Anonymous ID: We use Firebase Authentication to create an anonymous user account. No email or password is required to play.
- Google Sign-In (optional): You may choose to sign in with, or link, a Google account so your progress survives reinstalling the app or moving to a new device. If you do, Firebase Authentication receives and stores your Google account's basic profile — including your email address, and the name and profile picture on that account. This is held by Firebase Authentication to identify your account; it is not shown to other players and is not used for marketing. Playing anonymously without signing in remains fully supported.
- Username: A display name you choose (visible to other players)
- Country: Detected from your device settings (used for regional leaderboards)
- Friend Code: An auto-generated code for adding friends
Fitness & Gameplay Data
- Exercise statistics (push-ups, squats, sit-ups completed)
- Power level and experience points
- Boss battle progress and trophies
- Workout session history
- Challenge/duel results with friends
Avatar Customization
- Your avatar appearance settings (hair, eyes, outfit, etc.)
Social Features
- Friends list (user IDs of people you've added)
- Challenge history with friends
RepsRPG has no chat or messaging feature. Challenges you send contain only structured game data — the exercise type, the rep target, and a time limit — and the only text other players see is the username you choose.
Advertising & Analytics Identifiers
- Advertising ID: Your device's advertising identifier is collected by Google AdMob to serve rewarded ads, and by Google Firebase Analytics to measure app usage. See "Advertising & Your Consent" below.
- Usage and diagnostics: Anonymous app-usage events, plus crash reports and diagnostic data (device model, OS version, app version).
Purchase Information
- RepsRPG offers an optional one-time Premium purchase, which unlocks additional bosses and removes the daily limit on duel tickets. Payments are processed entirely by Google Play — we never receive or store your payment card details. We receive confirmation of your purchase status in order to unlock Premium features.
Device Permissions
- Camera: Used for real-time pose detection during workouts
- Notifications: To alert you about challenges from friends
- Vibration: For haptic feedback during exercises
App Lock Feature Permissions (Optional)
If you enable the App Lock feature, the following additional permissions are required:
- Accessibility Service: To detect when locked apps are opened. It reads only the package name of the app you open — never your screen contents, the text you type, or your passwords. While App Lock is turned on, this check happens each time you switch apps, including while RepsRPG is closed or not in use.
- Usage Access: To identify which app is currently in the foreground. While App Lock is turned on, RepsRPG checks this on a short repeating interval, running alongside the Accessibility Service, including while RepsRPG is closed or not in use.
- Display Over Other Apps: To show the exercise challenge overlay
- Query Installed Apps: To display a list of apps you can lock
2. Camera Usage
Your privacy is protected: Camera data is processed entirely on your device using Google's ML Kit. We do NOT store, transmit, or upload any images or video from your camera. Only the extracted exercise rep counts are saved.
The camera is used solely for:
- Real-time body pose detection to count exercise repetitions
- Detecting proper exercise form
Video frames are processed in memory and immediately discarded. No visual data leaves your device.
3. App Lock Feature
RepsRPG includes an optional App Lock feature that lets you lock selected apps and require completing exercises to unlock them.
Privacy-focused design: App Lock works entirely on your device. We do NOT collect, store, or transmit any information about which apps you have installed or which apps you choose to lock.
How App Lock works:
- You select which apps to lock and configure exercise requirements
- When you open a locked app, an exercise challenge overlay appears
- Complete the required reps to unlock the app temporarily
- All locked app configurations are stored locally on your device only
To know when a locked app opens, App Lock checks which app is currently in the foreground. While App Lock is turned on it does this two ways at the same time: the Accessibility Service reports the app you just opened, and a background check reads the current foreground app on a short repeating interval. Both run whenever you have apps locked, including while RepsRPG is closed or not in use.
Every one of these checks happens entirely on your device, is used only to decide whether to show a challenge, and is never kept as a usage history or uploaded.
What App Lock does NOT do:
- Does not build a history of your app usage or screen time
- Does not send any data about your installed apps to servers
- Does not access the content of any apps
- Does not run in the background unless you have apps locked
4. Advertising & Your Consent
RepsRPG displays rewarded video ads powered by Google AdMob. Watching an ad is always optional and is offered in exchange for an in-app reward.
When you launch the app for the first time, you may be shown a consent form (depending on your region) asking whether you agree to personalized advertising.
- If you consent: AdMob may use your Advertising ID to show ads tailored to your interests.
- If you decline: AdMob will still show ads, but they will not be personalized.
- Changing your choice: You can review or change your consent at any time via Settings → Ad Privacy Settings in the app, or by resetting your device's Advertising ID under Settings → Privacy → Ads in your Android settings.
5. US State Privacy Rights
If you are a resident of California, Colorado, Connecticut, Virginia, or another US state with applicable privacy laws, you have the right to opt out of the sale or sharing of your personal information for advertising purposes.
To exercise this right, you can:
- Decline personalized ads when shown the consent form, or change your choice later via Settings → Ad Privacy Settings.
- Reset or opt out of ad personalization via your device's Settings → Privacy → Ads.
- Contact us at support@abduloski.dev to request restricted data processing.
6. How We Use Your Information
- Track your fitness progress and power level
- Display global and country leaderboards
- Enable multiplayer challenges with friends
- Send push notifications for challenge events
- Sync your progress across devices when signed in
- Serve rewarded advertisements, which help fund development and keep the app free
- Verify your purchase status and unlock Premium features
- Improve app functionality and user experience
7. Third-Party Services
RepsRPG uses the following Google Firebase services:
- Firebase Authentication: For anonymous sign-in and optional Google account sign-in
- Cloud Firestore: To store user profiles, stats, and challenges
- Firebase Cloud Messaging: For push notifications
- Firebase Crashlytics: To identify and fix app crashes
- Firebase Analytics: To understand how the app is used so we can improve it. This includes your device's Advertising ID.
RepsRPG also uses the following Google services:
- Google AdMob: To serve rewarded video ads. AdMob may collect your Advertising ID and device information to serve personalized or non-personalized ads based on your consent choices. See How Google uses data when you use our partners' sites or apps.
- Google Play Billing: To process the Premium in-app purchase. Google handles all payment processing; we only receive confirmation of purchase status.
- Google ML Kit: For on-device pose detection. Camera data is processed on your device and is never uploaded.
These services are operated by Google. Please review Google's Privacy Policy for more information.
8. Data Storage & Security
- Cloud Storage: Your data is stored securely in Firebase (Google Cloud) data centers
- Local Storage: A copy of your data is stored on your device for offline access
- Encryption: All data transmitted between your device and our servers is encrypted using HTTPS/TLS
- Access Control: Firebase Security Rules restrict data access to authorized users only
9. International Data Transfers
Our service providers (notably Google) process data on servers that may be located in countries other than yours, including the United States. Where required, these transfers are governed by appropriate safeguards.
10. Data Retention & Deletion
Your data is retained until you choose to delete your account. Analytics and crash data are retained according to Google Firebase's standard retention periods.
To delete your account: Go to Settings in the app and tap "Delete Account". All your cloud data will be permanently removed within 24 hours. Local data on your device can be cleared by uninstalling the app or clearing app data in Android settings.
11. Data We Do NOT Collect
- Your real name or personal identity — your in-game identity is the username you choose. (If you opt to sign in with Google, Firebase Authentication receives your Google account's basic profile as described in Section 1.)
- Phone number
- Payment card details — Google Play processes all payments; we never see or store your card information
- Precise GPS location
- Contacts or call logs
- Photos or videos from your device
- Health data from other apps
- The list of apps installed on your device, or your app usage data — App Lock reads these on-device only and never transmits them (see Section 3)
12. Children's Privacy
RepsRPG is not directed at children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with information, please contact us so we can delete it.
13. Your Rights
You have the right to:
- Access: View your data in your app profile and stats
- Delete: Remove your account and all associated data
- Opt-out: Disable push notifications in Android settings; decline or withdraw personalized-ads consent via Settings → Ad Privacy Settings
- Portability: Your stats are visible in-app; contact us for a data export
EEA / UK (GDPR): you have the right to access, correct, or delete your personal data, to object to or restrict certain processing, and to data portability. Our legal bases are our legitimate interest in operating and improving the app, our need to perform the purchase you request, and your consent where required (for example, for personalized advertising).
California (CCPA/CPRA): see "US State Privacy Rights" above. You have the right to know what we collect, to request deletion, and not to be discriminated against for exercising your rights.
14. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. Your continued use of the app after changes constitutes acceptance of the updated policy.
15. Contact Us