Privacy policy.

Effective October 19, 2026

SweatyThumb turns pushups into app time. This policy explains the information used by the current iPhone app and this website, including the testing version.

SweatyThumb is operated by House of Chwalik LLC (“we,” “us”). For privacy questions or requests, email hello@twillful.ooo.

1. Camera and movement

With your permission, the app uses the front camera to count pushups. Camera frames and body-pose or face-detection signals are processed on your device. We do not upload the camera feed, record workout videos, or use this processing to identify you. Camera access can be removed in iPhone Settings.

Testing builds may save short local diagnostic traces containing timing, detection confidence, counter decisions, and rep counts. These traces do not contain images, video, joint coordinates, or app-selection tokens. They remain in the app’s local cache unless you choose to provide them for troubleshooting. If you share a trace with us, we use it to investigate the issue.

2. Your time bank and Screen Time

The app stores your time balance, earned and consumed time, rep history, reward preferences, and Screen Time selection on your device. Apple’s Screen Time frameworks provide the controls and usage events used to manage access to your selected apps. The current app does not send this ledger, rep history, or app selection to our account service. Signing in does not provide cloud backup or cross-device syncing.

3. Optional accounts

If you create an account, Supabase processes account information to provide authentication, sessions, and account administration. This may include your email address, account identifier, sign-in provider, timestamps, and security-related connection information. Email/password sign-in sends credentials securely to the authentication service; we do not store plaintext passwords in the app.

If you choose Google or Apple sign-in, that provider may share an account identifier, email address, and permitted profile information such as a name or picture. We use this to sign you in and display your account. Your Google or Apple password is not provided to SweatyThumb. Session credentials are stored using iOS Keychain through the authentication SDK.

Resend delivers account confirmation and password-reset emails. It processes the recipient address, message contents, and delivery information for that purpose.

4. Website and support

This website contains a local interactive example. It does not create an account or save your slider choices. We have not added advertising trackers or analytics scripts. Our hosting and network providers may process IP addresses, request information, and technical logs to deliver and secure the website. Fonts and images are served with the website.

If you email us, we receive your email address and whatever you include in the message. We use that information to answer you and resolve your request. Please do not send passwords or authentication codes.

5. Why information is used and shared

We use information to operate requested features, authenticate accounts, deliver account emails, respond to support requests, troubleshoot problems, and maintain security. Service providers process information for those functions. We may also disclose information when required by law or to protect rights, safety, and service security. We do not sell personal information or use your workout information for targeted advertising.

Services involved include Supabase, Resend, your chosen sign-in provider (Google or Apple), and website hosting infrastructure provided through OpenAI Sites and Cloudflare. These providers may process information in countries other than where you live.

6. Retention and deletion

Your local bank and history remain on your iPhone until removed through applicable device or app-data controls. Device backups may retain copies according to your Apple settings. Diagnostic caches may be overwritten or cleared by the app or iOS.

Account information is retained while your account exists. You can initiate account deletion from the app’s account screen or contact us for assistance. Deleting your account does not clear the separate, on-device time bank. Provider backups and security logs may remain for their applicable retention periods or as legally required. Support messages and traces you send are kept as needed to address the request and related security or legal needs; contact us to request their deletion.

7. Your choices

You can use the time bank without an account, sign out, request account deletion, and change camera or Screen Time permissions in iPhone Settings. You can also manage SweatyThumb’s access in your Google or Apple account. Depending on your location, you may have rights to access, correct, delete, or obtain a copy of personal information, or object to or restrict certain processing. Send requests to hello@twillful.ooo. We may need to verify that a request concerns your information. You may also contact your local privacy regulator.

8. Children

SweatyThumb is not directed to children under 13. If you believe a child under 13 has provided personal information to us, please contact us so we can investigate and address it.

9. Changes

We will update this page when our practices change and revise the effective date. For significant changes, we will provide additional notice where appropriate.