Privacy Policy

The short version

• Your camera feed never leaves your phone. Movement tracking runs on your device. We never receive, store or see your camera video or images.
• We store only what the game needs: your account, username, scores, streaks and the people you follow.
• If you choose to log your weight or height, we store it with your explicit consent. It’s optional, private to you and never shown to other players.
• Your username and scores are public on leaderboards.
• No ads, no third-party tracking, no selling of your data.
• You can delete your account and data at any time. In-app deletion is immediate.

1. Who we are

SneakFit is provided by Inhype Live Limited, a company registered in England and Wales (company number 13379772), registered office Kemp House, 152-160 City Road, London, EC1V 2NX, United Kingdom. We are the controller of your personal data for the purposes of the UK GDPR, the EU GDPR and the Data Protection Act 2018. Contact us about privacy at [email protected].

2. Camera and motion data

To turn your body into a controller, the App uses your front camera and Apple’s on-device Vision framework to detect the position of your body (for example your shoulders and head) in each video frame. Each frame is analysed on your phone in real time and then discarded.

• Camera frames, video and body-position data are never uploaded to our servers or shared with anyone.
• We do not use facial recognition and do not create any biometric template or identify you from your image.
• The only results that leave your phone are game results: the game, your score, repetitions counted and how long the run lasted.

Highlight clips. If clip recording is on, the App records your run (including the camera image shown on screen) to a file on your device. Clips are never uploaded to us. A clip is only saved to your Photos library, or shared to another app such as TikTok or Instagram, when you choose to do so. Once you share a clip, that platform’s privacy policy applies.

3. What we collect

Account information

• Device identifier: a random ID created by the App and kept in your device’s secure keychain, so we can create a guest account without asking you to sign up.
• Username: generated automatically or chosen by you.
• Sign in with Apple: Apple’s user identifier for you, plus your email address and name if you choose to share them (Apple lets you hide your email behind a private relay address).
• Email sign-in: your email address, and the one-time login codes we send you. Codes are stored only in hashed form and expire after 10 minutes.

Gameplay information

• Scores, repetitions, run length, date played, streaks, experience points and level, and totals such as push-ups, squats, lunges, plank seconds and jumping jacks.
• The players you follow and the challenge links you create.
• The App version, sent with scores to help us fix bugs.

Body metrics (optional)

If you choose to log a check-in in the App, we store the weight you enter, your height if you add it, an optional note and the date, so the App can show your progress over time. This is health data. It is entirely optional and only ever entered by you; we never estimate it from the camera. It is private to your account, never shown to other players and never used for advertising.

Reports, blocks and feedback

• Player reports: if you report a player in the App, we store your account, the player you reported, the reason you picked and any details you write. The reported player is not told who reported them.
• Blocks: the players you block, so we can hide them from your leaderboards and friends list.
• Bug reports and feedback sent from the App: your message, the type of feedback, the screen you sent it from, and your App version and build, iPhone model and iOS version.

Subscription information

Apple processes all payments. We never receive your payment card details. We may receive information from Apple about your subscription (such as a transaction identifier, the plan, and renewal or expiry dates) so that we can unlock premium features and handle support.

Technical information

When the App or website talks to our servers we receive your IP address, device and request details in server and security logs.

When you contact us

If you email us, we receive your email address and whatever you include in your message.

4. What other players can see

• Leaderboards show your username, score and rank.
• Players who follow you can see your username, your streak and your best score today.
• Challenge links you create (sneakfit.app/c/…) can be opened by anyone with the link and show your username, the game, your score and the date.

Your email address, name, device identifier, body metrics and the reports you make or players you block are never shown to other players.

5. How we use your data and our lawful bases

• To provide SneakFit (your account, sign-in, daily games, scores, streaks, leaderboards, friends, challenges and premium access) — necessary to perform our contract with you.
• To store and show your body metrics (weight and height you log) — your explicit consent, which you give when you choose to log them (UK and EU GDPR Article 9(2)(a), as this is health data). You can withdraw consent at any time by not logging more and deleting your account, which deletes your logged metrics.
• To keep SneakFit fair and secure (anti-cheat checks, preventing abuse and fraud, reviewing player reports, applying blocks, moderating usernames, protecting our systems) — our legitimate interests in running a safe, fair game.
• To fix bugs and improve the App (including the bug reports and feedback you send us) — our legitimate interests, using the minimum data needed.
• To send essential emails such as login codes and important account or policy notices — necessary to perform our contract. We do not send marketing emails without your consent.
• To meet legal obligations such as responding to lawful requests and keeping records required by law.

We do not use your data for advertising and we do not sell or rent it.

6. Who we share data with

We use a small number of service providers who process data on our behalf, under contracts that require them to protect it:

• DigitalOcean — server hosting and our database.
• Cloudflare — network security, DNS and content delivery (processes IP addresses).
• Ploi — server management.
• Twilio SendGrid — delivering login-code and account emails.
• MXroute — hosting our support inbox.
• Slack — internal notifications to our team about new feedback, player reports and subscription events. These include usernames, the content of the report or feedback (with App version, device model and iOS version for feedback), and for subscriptions the event, plan, price and expiry date. They never include body metrics, email addresses or payment card details.

Apple provides Sign in with Apple and processes App Store payments as an independent controller under its own privacy policy. We may also disclose data if required by law, to protect the rights and safety of our users or others, or as part of a sale or reorganisation of our business (in which case this policy will continue to apply).

7. International transfers

Some of our providers are based in, or access data from, countries outside the UK and EEA, including the United States. Where that happens we rely on UK adequacy regulations (including the UK Extension to the EU-US Data Privacy Framework) or the approved standard contractual clauses and the UK International Data Transfer Addendum.

8. How long we keep data

• Account, gameplay data and body metrics: while your account is active. When you delete your account in the App, it is deleted immediately, together with your scores, streaks, body metrics, follows, blocks and challenge links. If you ask us by email instead, we do the same as soon as we have checked the account is yours, and within 30 days at the latest. Copies in our backups roll off within 14 days.
• Player reports and feedback are kept after you delete your account, for moderation and product history, but are unlinked from it so they no longer identify your account. (The username you reported is kept as part of the report.)
• Inactive guest accounts (never signed in) may be deleted after 24 months without activity.
• Login codes: valid for 10 minutes and stored only in hashed form.
• Server and security logs: up to 30 days, unless needed to investigate abuse.
• Support emails: up to 2 years after the conversation ends.

9. Your rights

You have the right to access your data, correct it, delete it, restrict or object to how we use it, and receive a copy in a portable format. You can delete your account at any time. For anything else, including changing your username, email [email protected]. We will respond within one month.

If you are unhappy with how we handle your data, please contact us first. You also have the right to complain to the UK Information Commissioner’s Office (ico.org.uk, 0303 123 1113) or your local data protection authority.

10. Age requirement

SneakFit is intended for people aged 16 and over. We do not knowingly collect data from anyone under 16. If you believe a child under 16 is using SneakFit, contact us and we will delete the account.

11. Cookies and tracking

The sneakfit.app website does not use cookies or analytics. The App contains no advertising or third-party tracking software and does not track you across other companies’ apps or websites.

12. Security

All connections to our servers are encrypted (HTTPS). Sign-in tokens are stored in your device’s secure keychain, login codes are hashed, and access to our systems is restricted. No system is perfectly secure, but we work hard to protect your data and will notify you and the regulator of a breach where the law requires.

13. Changes to this policy

We will update this policy when the App or the law changes, and tell you about material changes in the App or by email. The date at the top shows when it was last updated.

14. Contact

Inhype Live Limited, Kemp House, 152-160 City Road, London, EC1V 2NX, United Kingdom. Email: [email protected].