Privacy Policy

DROP (“we,” “us,” or “our”) operates the website dropfit.app (the “Service”), an AI-powered pushup counter and workout tracker. This Privacy Policy explains what information we collect, how we use it, and the choices you have. By using DROP, you agree to the practices described here.

Information We Collect

When you create an account or use DROP, we collect:

• Account information: email address, username, display name, and password (stored as a salted hash — we never see your plaintext password).
• Profile information: optional avatar photo and an accent color. Avatar photos you upload are resized in your browser and stored as part of your profile.
• Google account data (if you sign in with Google): your name, email address, and profile picture from your Google account. We use this only to create and populate your DROP profile.
• Workout data: pushup counts, session duration, form scores, and timestamps generated while you use the camera-based counter.
• Analytics events: basic usage events (for example, “workout started,” “user signed up”) used to improve the product.

Camera and Pose Detection

DROP uses your device’s camera and on-device AI (TensorFlow.js MoveNet) to count pushups in real time. Video from your camera never leaves your device. Pose detection runs entirely in your browser. We only store the resulting numeric workout data (rep count, duration, form score) — not video or images of your workouts.

How We Use Your Information

• To create and authenticate your account.
• To display your workouts, stats, and position on leaderboards.
• To enable friend connections and social features.
• To diagnose bugs and improve the product.
• To communicate important account notices (for example, password resets).

Public Information

Your username, display name, avatar, and aggregate workout stats are visible on the public leaderboard and to other users. Do not upload an avatar or choose a display name that contains information you do not want to be public.

Third-Party Services

We rely on a small number of reputable third parties to run DROP. Each processes data only to provide its specific service:

• Supabase — database, authentication, and storage. Supabase privacy policy.
• Vercel — hosting and content delivery. Vercel privacy policy.
• Google — optional OAuth sign-in. Google privacy policy.

We do not sell your personal information and we do not share it with advertisers.

Cookies and Local Storage

DROP uses cookies and your browser’s local storage to keep you signed in and to remember lightweight preferences. We do not use third-party advertising or tracking cookies.

Data Retention

We keep your account and workout data for as long as your account is active. If you delete your account, we remove your profile and associated workouts from our database. Contact us at hello@dropfit.app to request deletion.

Your Rights

Depending on where you live, you may have the right to access, correct, or delete the personal information we hold about you, or to object to or restrict certain processing. To exercise any of these rights, email us at hello@dropfit.app.

Children’s Privacy

DROP is not directed at children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.

Security

We use industry-standard measures to protect your information, including encryption in transit (HTTPS) and row-level security on our database. No system is perfectly secure, however, and we cannot guarantee absolute security.

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we’ll revise the “Last updated” date at the top of the page. Material changes will be communicated through the app or by email.

Contact

Questions or requests? Email us at hello@dropfit.app.