← Home

Privacy policy

Last updated: October 22, 2026

In short

  • Camera video is processed only on your phone. We don't save or send it. A clip is saved only if you tap the button yourself.
  • We do collect game stats and technical data: fights, reps, purchases, how tracking works, crash reports. No picture, no sound. You can turn stats off in the app settings.
  • For the waitlist we collect your email, country and platform to invite you to the beta and tell you about the launch.
  • We don't sell your data, show ads or track you across other apps.
  • You can delete or download your data at any time: in the app or by writing to vlad_k@cherrypick.agency.

1. Who we are

Squatnik is a mobile workout game in development. The website squatnik-landing.pages.dev, the waitlist and the app are run by CHERRYPICK AUSTRALIA PTY LTD (Australia), the company responsible for processing your data. Questions about your data: vlad_k@cherrypick.agency.

2. Website and waitlist

When you join the waitlist, we store:

  • your email;
  • the country you picked in the form, and the country derived from your IP address (Cloudflare provides it; the IP address itself is not stored in the list);
  • your platform: iPhone or Android;
  • the source tag from the link (for example ?ref=tt_gopnik1), the page language, your browser's user agent string and the sign-up time.

To fight spam we keep a one-way hash of your IP address for no longer than 24 hours. The site sets no cookies. Your browser's localStorage remembers your language choice and the source tag; they reach our server only together with the form.

Visit statistics: the site may use Cloudflare Web Analytics, which works without cookies and only counts anonymous visits.

3. Why we need your email

  • to invite you to the beta;
  • to tell you when the game launches in your country;
  • occasionally, to share important game news.

No third-party advertising. Every email has an unsubscribe link. Legal basis: your consent, given when you submit the form. You can withdraw it at any time.

4. The app (once it ships)

This section describes how the app will work. Before release we will check it against the final version and update the date at the top.

Camera. The camera is used to count your reps. Frames are processed only on your phone: the app finds your joints (shoulders, knees and so on) and counts reps from them. We don't save or send video or photos, to us or anyone else. The app doesn't use the microphone. A fight clip is saved to your phone's gallery only if you tap Save, and sharing it is up to you. A clip carries a short link, which lets us count how many people came from it.

What the app collects:

  • Game stats. Events such as "started a fight", "won", "got an item", "opened the subscription screen", with details: exercise, rep count, duration, level. They show us what works and help us tune the balance.
  • Tracking quality. Summary numbers per fight: frames per second, recognition time in milliseconds, how often you are visible in the frame, average recognition confidence, how many times you tapped "Didn't count?". Just numbers, no picture and no body points.
  • Crash reports. Where and why the app crashed, phone model, system and app versions. No screenshots, not linked to your account.
  • Device and region. Phone model, system and app versions, language, app store country. We don't collect advertising IDs (IDFA, GAID) or precise location.
  • Progress and account. An anonymous player ID, progress, items, streak and settings are stored on the device and in the cloud so they survive a phone change. If you sign in with Apple or Google, we receive your account ID and email (Apple lets you hide your real address). The hero name is optional.
  • Purchases. Payments go through the App Store or Google Play; we never see your card details. We receive what was bought, when, in which store country and at what price, plus the subscription status. Subscriptions are checked via RevenueCat.
  • Steps. Only with your permission, we read your daily step count from Apple Health or Health Connect. We never write anything there. Steps turn into in-game resources and are stored with your progress. We don't pass them to analytics or third parties and never use them for ads.
  • Movement skeleton, only if you allow it. When you tap "Didn't count?", the app may offer to send a recording of the last 10 seconds: joint coordinates, no video, no face or finger points. You can allow this for every case in Settings. The recording isn't linked to your account; we use it to fix rep counting. Off by default.
  • Notifications. Only if you allow them, at most one a day.

Google MediaPipe library. On some phones, body pose is detected by Google's MediaPipe library. It processes frames on the phone and doesn't send them to Google. According to Google, though, it sends Google technical metrics about its own work: speed, number of processed frames, library and app versions. Google handles them under its own privacy policy.

Your controls. In the app settings, under Privacy, you can turn off stats and crash reports, allow or block skeleton uploads, download a copy of your data and delete your account. If you are in the EU, the UK or Switzerland, we turn stats on only after you agree. There are no ads in the game and we don't track you across other apps or websites, so your iPhone won't ask for tracking permission.

Legal bases (EU and UK). Account, progress and purchases: performing our contract with you. Stats, steps and skeleton: your consent, which you can withdraw in Settings. Crash reports and abuse prevention: our legitimate interest in a stable and secure game.

5. Who we share data with

We don't sell data. We share it only with service providers that process it on our behalf:

  • Cloudflare: website hosting, the waitlist database, game pack downloads;
  • after the app ships: Supabase (account, progress and skeleton recordings, servers in Germany), PostHog (game stats, servers in the EU), Sentry (crash reports, servers in the EU), RevenueCat (subscriptions, servers in the US).

Apple and Google also receive data as app stores, payment providers, sign-in and health services (Apple Health, Health Connect), and Google receives MediaPipe metrics (section 4). They act under their own privacy policies.

These services may process data on servers outside your country, including the EU and the US. We disclose data to authorities only when the law requires it.

6. How long we keep it

  • Waitlist: until the game launches in your country plus 12 months, or until you ask us to delete it.
  • IP hash for spam protection: up to 24 hours.
  • Account and progress: while you use the game. A guest profile without sign-in is deleted after 90 days of inactivity.
  • Game stats: up to 24 months, after that only totals without a player ID.
  • Crash reports: 90 days.
  • Skeleton recordings: up to 24 months, then deleted.
  • Server logs (request IP addresses): up to 30 days.
  • Support emails: 24 months after the last reply.

7. Your rights and data deletion

You can ask what data we hold about you, correct it, get a copy, delete it, withdraw your consent or object to processing.

  • In the app: Settings → Privacy → "Download my data" or "Delete account and data". Deletion erases your account, progress, purchase records at RevenueCat and the stats linked to your ID. Skeleton recordings sent from this phone are deleted right away. Crash reports aren't linked to your account and expire on schedule. Deleting your account doesn't cancel a subscription: cancel it in App Store or Google Play settings.
  • Without the app: write to vlad_k@cherrypick.agency from the address you used for the waitlist or your account, or include the player ID from Settings.

We will reply within 30 days. If you live in the EU or the UK, you can also contact your local data protection authority; in Australia, the OAIC (oaic.gov.au).

8. Children

The game is rated 12+. We don't knowingly collect data from children under 13 (in the EU, under the age of digital consent in your country). If a child signed up or plays without a parent's knowledge, contact us and we will delete their data.

9. Changes

If this policy changes, we will update the date at the top of the page. We will email people on the list about significant changes.