Privacy Policy

Last updated: July 9, 2026

App Name: Fit Arena
Developer: Kyun Labs

This Privacy Policy explains how Kyun Labs (“we,” “us,” or “our”) collects, uses, and protects your information when you use our push-up fitness game, Fit Arena.

1. Camera & Push-Up Detection

This is the most important thing to understand about Fit Arena, so we are putting it first.

Processing Happens On Your Device: Fit Arena uses your camera to count push-ups. Each camera frame is analyzed on your phone using on-device AI pose detection (Google ML Kit). The analysis produces nothing but a rep count.
Nothing Is Uploaded:Camera images and video are never uploaded to our servers, never sent to any third party, and never stored anywhere — not on our infrastructure and not in your phone’s photo library. Frames exist only in memory while a workout is running and are discarded immediately.
No Facial Recognition: We do not use facial recognition and do not attempt to identify you from camera data. The detector tracks body joint positions (shoulders, elbows) for the sole purpose of counting a repetition.
Motion Sensors:We read your device’s accelerometer during a workout to detect when the phone is being moved, so we can avoid counting false reps. This data is processed on-device and is not stored or transmitted.
Camera Is Optional: If you prefer not to grant camera access, or if tracking is not working for you, you can count reps manually within the app.

2. Information We Collect

We believe in data minimization. We only collect the data necessary to save your progress, deliver the game, and keep the app stable.

A. Authentication & Account Data

Anonymous Access (Default): When you first use the app, we create an anonymous account via Firebase Authentication so we can store your progress without requiring personal details such as your name or email address.
Sign in with Apple / Google (Optional): You may link your account to Apple or Google to preserve your progress across devices and reinstalls. When you do, we receive the account identifier and, where provided, your email address and display name.
Referral Codes: If you participate in a referral program, a unique referral code is generated and associated with your account.

B. Profile & Onboarding Data

What You Tell Us: During onboarding you may provide a display name, your age, your gender, and your training experience and goals. This is used to personalize difficulty and the in-app experience.

C. Workout & Game Progress Data

Session History: For each workout we store the game mode, the number of reps counted, the duration, and the outcome (episode cleared, boss defeated, horde wave reached, speed time). We do not store any camera data alongside it.
Progression: Your rank, level, XP, lifetime statistics, personal records, achievements, and campaign progress are stored so they persist across devices.
Feedback: If you answer an in-app survey, your answers are stored.

D. Transaction Data

Subscription Status: We record whether you have an active subscription, its type, and its billing cycle in order to unlock premium features. Payment processing is handled entirely by Apple or Google; we never see or store your credit card or payment method details.

E. Automated Data Collection

Device Data: We collect device model, OS version, locale, app version, and IP address to troubleshoot bugs, ensure app security, and comply with regional pricing.
Usage Analytics: We collect usage data such as feature usage frequency, onboarding completion, workouts started and finished, and session length to improve the Service. We do not send your name or email address to our analytics providers.
Attribution Data: We use a third-party attribution tool (AppsFlyer) to understand how users discover and install the app. This is used for marketing analytics.
Crash Reports: We use Firebase Crashlytics to collect crash logs and error reports to maintain app stability.
Push Notifications: If you grant permission, we store a device push token so we can send workout reminders and app updates. You can revoke this at any time in your device settings.

3. How We Use Your Information

We use the collected information for the following purposes:

Service Provision: To count your reps, run the campaign and arcade modes, save your progress, assign your rank, award XP and achievements, and sync your data across devices.
Personalization: To scale difficulty to your level and tailor the experience to your stated goals and experience.
Analytics & Improvements: To understand how players interact with the app so we can improve features, balance difficulty, and develop new content.
Fraud Prevention: To detect and prevent abuse of the referral system, subscriptions, and other features.

4. Data Processing & Infrastructure

When you use the app, your progress data is transmitted securely to our cloud infrastructure providers:

Firebase / Google Cloud: Authentication, database (Firestore), cloud functions, remote configuration, push messaging, app integrity checks, and crash reporting.
RevenueCat: Subscription and purchase management.
AppsFlyer: Install attribution and marketing analytics.
Mixpanel & Firebase Analytics: Product usage analytics.

Note: Camera data is not in this list, because it never leaves your device. See Section 1.

We use industry-standard encryption (TLS) to protect your data in transit and at rest.

5. Cookies, Analytics & Advertising

We use local storage technologies and third-party tools to maintain your session and support our business.

Essential: Tokens and identifiers required to keep you signed in, sync your data, and manage your subscription status. Your game progress is also cached locally on your device so the app works offline.
Analytics: We use analytics tools (Firebase Analytics, Mixpanel, Crashlytics) to understand app performance, feature usage, and crash reports.
Attribution:We use AppsFlyer to measure the effectiveness of our marketing campaigns. This may involve collecting your device’s advertising identifier (IDFA/GAID) subject to your consent where required by platform policies (e.g., Apple’s App Tracking Transparency). If you decline the tracking prompt, we do not collect your advertising identifier.

6. Data Sharing & Business Transfers

We do not sell your personal information. We share data only in these strictly necessary scenarios:

Service Providers:With our secure cloud hosting, subscription, and analytics partners solely to facilitate the app’s core functions as described in Section 4. We require every third party with whom we share your data to provide the same or an equivalent level of protection as described in this Privacy Policy and as required by applicable law.
Legal Compliance: We may disclose information if required by a valid legal request, court order, or governmental regulation.
Business Transfers: If Kyun Labs undergoes a merger, acquisition, bankruptcy, or sale of assets, your data may be transferred to the successor entity. We will notify users of any such transfer and any changes to this Privacy Policy.
Aggregated & Anonymized Data: We may share aggregated, non-identifiable statistics (e.g., total push-ups completed across all players, average rank by region) for business or research purposes.

7. Data Retention

Camera Data: Retained for zero seconds. Frames are analyzed in memory and discarded; nothing is written to disk or uploaded.
Active Accounts: We retain your data for as long as your account is active and as needed to provide you with the Service.
Deleted Accounts: When you delete your account, all personal data, workout history, progression, statistics, and account information are permanently removed from our active databases within 30 days. Backup copies may persist for up to 90 days before being permanently purged.

8. User Rights & Data Deletion

You have full control over your data.

Delete Account: You may delete your account at any time by using the in-app account deletion option in Settings, or by sending us an email at contact@kyunlabs.com.
Effect of Deletion:When you delete your account, your profile, workout session history, progression, statistics, achievements, referral data, and account information are permanently removed from our active systems. Deleting your account does not cancel your subscription — you must cancel that through Apple or Google.
Revoke Permissions: You can revoke camera and notification permissions at any time in your device settings. Revoking camera access disables automatic rep counting; you can still play using manual counting.

9. Privacy Rights (LGPD, CCPA & Others)

Depending on your location, you are protected by specific data privacy regulations, including the Brazilian General Data Protection Law (LGPD), the California Consumer Privacy Act (CCPA), and other applicable US state and international privacy laws.

Right to Access & Portability: You can request a copy of the data we hold about you.
Right to Delete: You may request the complete erasure of your data by contacting us.
Right to Rectification: You may request correction of inaccurate data.
Right to Object: You may object to certain types of data processing.
Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

To exercise any of these rights, contact us at contact@kyunlabs.com.

10. Age Restrictions

Fit Arena is intended for users aged 16 and older. We do not knowingly collect personal information from children under 16. If we become aware that a user under 16 has provided us with personal information, we will take steps to delete such information immediately and terminate the associated account. If you believe a child under 16 is using the Service, please contact us at contact@kyunlabs.com.

11. International Data Transfers

Your data may be processed and stored in countries other than your country of residence, including the United States and Brazil. By using the Service, you consent to the transfer of your data to these countries. We ensure that appropriate safeguards are in place to protect your data in accordance with applicable data protection laws.

12. Security

We implement industry-standard security measures to protect your data, including:

Encryption of data in transit (TLS) and at rest.
Secure authentication via Firebase.
App integrity verification via Firebase App Check.
Access controls limiting employee access to user data.
Regular security reviews of our infrastructure.

However, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security of your data.

13. Changes to This Policy

We may update this Privacy Policy periodically. We will notify users of material changes via an update note within the application. Your continued use of the Service after changes are posted constitutes acceptance of the updated Privacy Policy.

14. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at:

Email: contact@kyunlabs.com
Mailing Address:
Kyun Labs
Rua Pais Leme, 215 - 1713, Pinheiros,
São Paulo - SP 05424-150, Brazil