PRIVACY POLICY FOR SQUATUP
Last updated: August 17, 2026
Developer and Data Controller: Flowbit Labs
Contact: flowbitlabs@gmail.com
1. Introduction
Flowbit Labs (“we,” “our,” or “us”) operates the SQUATUP mobile application (“SQUATUP” or the “App”).
This Privacy Policy explains what information is processed when you use the App, why it is processed, when it may be shared, how long it may be retained, and how you can request deletion.
SQUATUP provides local workout tracking and an optional online ranking service.
2. Information Stored Locally on Your Device
The App may store the following information locally:
• Workout repetition count
• Workout duration
• Workout date and timestamps
• Workout goal and completion status
• App language and display preferences
• Ticket, Pro, advertisement, and feature-related settings
• Pending or completed ranking synchronization receipts
• Other settings required for App functionality
Local workout history is generally retained for up to 40 days and is limited to a maximum number of records for storage safety.
You can delete local workout history through the App settings. Clearing app data or uninstalling the App may also delete this information.
Local information that has not been submitted to the online ranking is not available to Flowbit Labs and cannot be remotely recovered or deleted by us.
3. Optional Anonymous Ranking Account
You can use local workout features without joining the online ranking.
If you choose to join the ranking, the App uses Firebase Authentication to create an anonymous account. This account does not require an email address, password, or phone number.
The following information may be collected and stored for the ranking service:
• Anonymous Firebase user identifier
• Country or region selection
• Nickname and profile identifier
• Ranking enrollment and profile status
• Workout session identifier
• Workout start and completion timestamps
• Repetition count and duration
• Completion status
• Daily, weekly, and monthly scores
• Ranking position and percentile
• Submission, synchronization, and validation status
• Re-enrollment or profile change status
Anonymous accounts may be tied to the App installation and device. If you uninstall the App, clear its data, or change devices, recovery of the previous ranking account may not be possible.
4. Public Ranking Information
By joining the ranking, you understand that some information is intentionally displayed to other users.
Public ranking information may include:
• Country or region flag
• Nickname and profile identifier
• Score or repetition count
• Ranking position
• Percentile
• Participation status
Your private Firebase user identifier is not intended to be shown publicly.
Do not use a nickname that reveals sensitive personal information.
5. Workout and Fitness Information
Workout records such as repetitions, duration, timestamps, and completion status are fitness-related information.
Local workout records remain on the device unless they are eligible for and submitted to the ranking service.
For ranking participants, qualifying workout information is transmitted to Firebase and Google Cloud services for score calculation, synchronization, fraud prevention, and ranking display.
Submitted sessions may be validated for timing consistency, repetition speed, duplicate submission, overlapping sessions, daily limits, and other signs of invalid activity.
6. Camera Processing
Camera access is used for automatic squat detection.
Camera frames are processed on the device to estimate body movement and count repetitions.
Flowbit Labs does not:
• Upload raw camera video to its servers
• Store raw camera frames on its servers
• Use camera footage for advertising
• Use camera footage for facial recognition or identity verification
You can deny or revoke camera permission through Android settings, but camera-based counting may then be unavailable.
7. Moderation, Appeals, and Security Information
To maintain fair rankings and protect the service, we may process:
• Detected validation reason
• Workout count, duration, and calculated speed
• Duplicate or repeated submission signals
• Moderation status and administrative action
• Profile and ranking state at the time of detection
• User appeal text and supporting information
• Administrative responses and audit events
Automatic detection does not necessarily result in an immediate account restriction. Cases may be reviewed by an administrator.
Moderation information is used for service security, fraud prevention, dispute resolution, appeals, and policy enforcement.
8. Advertising Data
The App may use Google Mobile Ads SDK (Google AdMob) to display advertisements.
Depending on device settings, region, consent choices, and advertisement configuration, Google Mobile Ads may automatically collect or share information such as:
• IP address, which may be used to estimate general location
• Advertising ID or other device and app identifiers
• App launches, advertisement views, taps, and other interactions
• Device, application, and SDK information
• Diagnostic and performance information
This information may be used by Google for advertising, measurement, analytics, fraud prevention, security, and service operation.
Flowbit Labs does not receive your full advertising profile from Google.
You can manage or delete the Android advertising ID and control advertisement personalization through your device or Google settings.
9. Firebase Authentication and App Check
The App uses Firebase services provided by Google.
Firebase Authentication may process:
• Anonymous Firebase user identifier
• IP address
• User-agent information
• Firebase Android App ID
• Authentication and security information
Firebase App Check and Play Integrity may process application and device integrity signals to verify that requests originate from a legitimate App installation and to protect the backend from abuse.
These services may process technical information necessary for authentication, fraud prevention, security, and service reliability.
10. Google Play Billing and Purchases
Purchases are processed by Google Play Billing.
The App may receive purchase-related information such as:
• Product identifier
• Purchase status
• Purchase token or transaction identifier
• Purchase restoration status
• Entitlement status
Flowbit Labs does not receive or store your full payment card number or banking credentials.
Payment processing and purchase history held by Google are governed by Google’s own privacy policy and Google Play terms.
11. Support Communications
If you contact us by email, we may receive:
• Your email address
• Information included in your message
• Ranking nickname or identifier you provide
• Attachments or diagnostic details you voluntarily provide
We use this information to respond to your request, provide support, investigate issues, or process an account deletion request.
Do not send passwords, payment card information, government identifiers, or unnecessary sensitive information.
12. How We Use Information
We process information for the following purposes:
• Providing workout and ranking functionality
• Creating and managing anonymous ranking accounts
• Calculating and displaying rankings
• Synchronizing eligible workouts
• Processing purchases and restoring entitlements
• Displaying and measuring advertisements
• Detecting invalid activity and preventing fraud
• Protecting Firebase and backend resources
• Handling moderation cases and appeals
• Responding to support and deletion requests
• Maintaining, debugging, and improving reliability
• Complying with applicable legal obligations
13. How Information Is Shared
We may share or allow processing of information with service providers necessary to operate the App, including:
• Google Firebase Authentication
• Google Cloud Firestore
• Google Cloud Functions
• Firebase App Check and Play Integrity
• Google AdMob
• Google Play Services
• Google Play Billing
These providers process information under their own terms and privacy policies.
Information may also be disclosed:
• When required by law or valid legal process
• To protect users, Flowbit Labs, or the public
• To investigate fraud, abuse, or security incidents
• With your direction, such as when you use a system sharing feature
We do not sell your workout or ranking data.
14. International Data Processing
Google and other service providers may process information in countries other than your country of residence.
Where required, we rely on appropriate legal mechanisms and service-provider safeguards for international data processing.
15. Data Retention
Local workout history:
• Generally retained on the device for up to 40 days
• Subject to a maximum record limit
• Can be deleted in App settings
• May be removed by clearing app data or uninstalling the App
Active ranking data:
• Retained while the anonymous ranking account is active
• Session records may be retained as needed to calculate rankings, prevent duplicate submissions, and maintain service integrity
Purchase information:
• Purchase and entitlement information is retained as necessary to provide or restore purchased features
• Google may retain separate purchase records under its own policies
Support communications:
• Retained for as long as reasonably necessary to answer the request, resolve disputes, and maintain support records
Moderation and security information:
• Active enforcement data is removed or closed when appropriate
• Limited moderation, fraud-prevention, permanent-block, appeal, and security audit records may be archived and retained after ranking account deletion when reasonably necessary to protect the service, prevent repeated abuse, resolve disputes, or comply with legal obligations
• Archived moderation records are not displayed in the public ranking
16. Account and Data Deletion
In-app deletion:
Open the ranking page and select:
Ranking → Profile menu → Leave ranking
Completing the deletion process removes the anonymous Firebase Authentication account and active ranking data, including:
• Ranking profile
• Public nickname and country
• Ranking scores and state
• Submitted ranking session receipts
• Active ranking visibility
• Active moderation notices and temporary enforcement artifacts, except for limited retained audit information described above
Local workout history stored on the device is not deleted automatically when leaving the ranking.
To delete local workout history, use the App settings option for deleting all history. You may also clear App data or uninstall the App.
External deletion request:
If you cannot access the App, email:
flowbitlabs@gmail.com
Subject:
[SQUATUP Account Deletion Request]
Include:
• Your ranking nickname
• Your profile identifier shown next to the nickname
• Your selected country or region, if known
Do not include passwords, payment card details, or government identification.
We may request limited additional information to locate the correct anonymous account and prevent deletion of another user’s data.
17. Your Choices and Rights
Depending on your location, you may have the right to:
• Request access to information associated with your ranking account
• Request correction of ranking profile information
• Request deletion of the anonymous ranking account
• Object to or restrict certain processing
• Withdraw consent where processing is based on consent
• Contact a data protection authority
Because the ranking account is anonymous and device-based, we may be unable to identify or recover an account without sufficient ranking profile information.
You can also:
• Decline camera permission
• Leave the ranking
• Delete local workout history
• Manage advertisement settings on your device
• Stop using or uninstall the App
18. Security
We use reasonable technical and organizational safeguards, including:
• Firebase Authentication
• Firebase App Check
• Play Integrity signals
• Access-controlled backend functions
• Server-side validation
• Encrypted network transmission provided by service providers
• Administrative access controls
No electronic system is completely secure. We cannot guarantee absolute security or uninterrupted availability.
19. Children’s Privacy
SQUATUP is not directed to children under 13.
We do not knowingly request a child’s name, email address, phone number, precise location, or other directly identifying information.
If you believe a child has provided personal information or created a ranking profile, contact us so that we can review and delete the relevant information.
20. Third-Party Policies
Third-party services used by the App have their own privacy policies, including:
Google Privacy Policy:
https://policies.google.com/privacy
Google Play Terms:
https://play.google.com/about/play-terms/
Firebase Privacy and Security:
https://firebase.google.com/support/privacy
Google AdMob:
https://policies.google.com/technologies/ads
21. Changes to This Privacy Policy
We may update this Privacy Policy when features, laws, service providers, or data practices change.
The revised policy becomes effective when published with an updated “Last updated” date. Material changes may also be announced in the App where appropriate.
22. Contact Us
For privacy questions, support, or account deletion requests, contact:
Flowbit Labs
Email: flowbitlabs@gmail.com