Privacy Policy

The short version

• Your camera feed never leaves your phone. Movement tracking runs on your device. We never receive, store or see your camera video or images.
• We store only what the game needs: your account, username, scores, streaks and the people you follow.
• Your username and scores are public on leaderboards.
• No ads, no third-party tracking, no selling of your data.
• You can delete your account and data at any time.

1. Who we are

SneakFit is provided by Inhype Live Limited, a company registered in England and Wales (company number 13379772), registered office Kemp House, 152-160 City Road, London, EC1V 2NX, United Kingdom. We are the controller of your personal data for the purposes of the UK GDPR, the EU GDPR and the Data Protection Act 2018. Contact us about privacy at [email protected].

2. Camera and motion data

To turn your body into a controller, the App uses your front camera and Apple’s on-device Vision framework to detect the position of your body (for example your shoulders and head) in each video frame. Each frame is analysed on your phone in real time and then discarded.

• Camera frames, video and body-position data are never uploaded to our servers or shared with anyone.
• We do not use facial recognition and do not create any biometric template or identify you from your image.
• The only results that leave your phone are game results: the game, your score, repetitions counted and how long the run lasted.

Highlight clips. If clip recording is on, the App records your run (including the camera image shown on screen) to a file on your device. Clips stay on your device unless you choose to share them, for example to TikTok or Instagram, in which case that platform’s privacy policy applies.

3. What we collect

Account information

• Device identifier: a random ID created by the App and kept in your device’s secure keychain, so we can create a guest account without asking you to sign up.
• Username: generated automatically or chosen by you.
• Sign in with Apple: Apple’s user identifier for you, plus your email address and name if you choose to share them (Apple lets you hide your email behind a private relay address).
• Email sign-in: your email address, and the one-time login codes we send you. Codes are stored only in hashed form and expire after 10 minutes.

Gameplay information

• Scores, repetitions, run length, date played, streaks, experience points and level, and totals such as push-ups, squats, lunges, plank seconds and jumping jacks.
• The players you follow and the challenge links you create.
• The App version, sent with scores to help us fix bugs.

Subscription information

Apple processes all payments. We never receive your payment card details. We may receive information from Apple about your subscription (such as a transaction identifier, the plan, and renewal or expiry dates) so that we can unlock premium features and handle support.

Technical information

When the App or website talks to our servers we receive your IP address, device and request details in server and security logs.

When you contact us

If you email us, we receive your email address and whatever you include in your message.

4. What other players can see

• Leaderboards show your username, score and rank.
• Players who follow you can see your username, your streak and your best score today.
• Challenge links you create (sneakfit.app/c/…) can be opened by anyone with the link and show your username, the game, your score and the date.

Your email address, name and device identifier are never shown to other players.

5. How we use your data and our lawful bases

• To provide SneakFit (your account, sign-in, daily games, scores, streaks, leaderboards, friends, challenges and premium access) — necessary to perform our contract with you.
• To keep SneakFit fair and secure (anti-cheat checks, preventing abuse and fraud, moderating usernames, protecting our systems) — our legitimate interests in running a safe, fair game.
• To fix bugs and improve the App — our legitimate interests, using the minimum data needed.
• To send essential emails such as login codes and important account or policy notices — necessary to perform our contract. We do not send marketing emails without your consent.
• To meet legal obligations such as responding to lawful requests and keeping records required by law.

We do not use your data for advertising and we do not sell or rent it.

6. Who we share data with

We use a small number of service providers who process data on our behalf, under contracts that require them to protect it:

• DigitalOcean — server hosting and our database.
• Cloudflare — network security, DNS and content delivery (processes IP addresses).
• Ploi — server management.
• Twilio SendGrid — delivering login-code and account emails.
• MXroute — hosting our support inbox.

Apple provides Sign in with Apple and processes App Store payments as an independent controller under its own privacy policy. We may also disclose data if required by law, to protect the rights and safety of our users or others, or as part of a sale or reorganisation of our business (in which case this policy will continue to apply).

7. International transfers

Some of our providers are based in, or access data from, countries outside the UK and EEA, including the United States. Where that happens we rely on UK adequacy regulations (including the UK Extension to the EU-US Data Privacy Framework) or the approved standard contractual clauses and the UK International Data Transfer Addendum.

8. How long we keep data

• Account and gameplay data: while your account is active. When you delete your account we delete it within 30 days, and it is removed from backups within a further 35 days.
• Inactive guest accounts (never signed in) may be deleted after 24 months without activity.
• Login codes: valid for 10 minutes and stored only in hashed form.
• Server and security logs: up to 30 days, unless needed to investigate abuse.
• Support emails: up to 2 years after the conversation ends.

9. Your rights

You have the right to access your data, correct it, delete it, restrict or object to how we use it, and receive a copy in a portable format. You can delete your account at any time. For anything else, including changing your username, email [email protected]. We will respond within one month.

If you are unhappy with how we handle your data, please contact us first. You also have the right to complain to the UK Information Commissioner’s Office (ico.org.uk, 0303 123 1113) or your local data protection authority.

10. Age requirement

SneakFit is intended for people aged 16 and over. We do not knowingly collect data from anyone under 16. If you believe a child under 16 is using SneakFit, contact us and we will delete the account.

11. Cookies and tracking

The sneakfit.app website does not use cookies or analytics. The App contains no advertising or third-party tracking software and does not track you across other companies’ apps or websites.

12. Security

All connections to our servers are encrypted (HTTPS). Sign-in tokens are stored in your device’s secure keychain, login codes are hashed, and access to our systems is restricted. No system is perfectly secure, but we work hard to protect your data and will notify you and the regulator of a breach where the law requires.

13. Changes to this policy

We will update this policy when the App or the law changes, and tell you about material changes in the App or by email. The date at the top shows when it was last updated.

14. Contact

Inhype Live Limited, Kemp House, 152-160 City Road, London, EC1V 2NX, United Kingdom. Email: [email protected].