Privacy Policy

This Privacy Policy explains what information the Kanga Crew mobile application (the “App”) collects, how we use it, and the choices you have. It supplements, and should be read together with, our Terms of Use. By downloading, installing, or using the App, you agree to the practices described in this Privacy Policy. If you do not agree, do not install or use the App.

The App is intended for users located in the United States and is designed for users who are at least 13 years old (see Section 10, Children’s Privacy).

1. Our Privacy Principles

Kanga Crew is a fitness game. We built it to collect as little information about you as possible while still letting us run the features you use and understand how the App is used so we can improve it. In particular:

• You can play without an account. An account is optional and is created only if you choose to sign in with Apple.
• We do not collect your precise location.
• We do not collect health or medical records, and we do not collect or store your body weight or other body measurements.
• We do not sell your personal information, and we do not use it to target ads at you. The only information we share for advertising is limited install and app-launch data that lets Meta tell us which of our own ad campaigns brought players to the App — never your workouts, your account, or your device’s advertising identifier (see Section 4).
• Camera, face-tracking and motion-sensor input used to detect your movements is processed on your device and is never transmitted to us or to anyone else (see Section 5).

2. Information Stored on Your Device

The following information is created and stored locally on your device:

• Workout activity and progress — for example, the exercise type (such as squats, push-ups, crunches or sit-ups), your repetition counts and the timing of each repetition, daily and weekly goals, workout history, dates, and streaks.
• App settings and preferences — for example, audio, display, and gameplay settings.

If you do not sign in, this information stays on your device and is removed when you delete the App or clear its data. If you use your platform’s device backup feature (such as iCloud), this local data may be included in those backups under the applicable platform’s terms.

3. Your Account (Optional)

You can choose to Sign in with Apple to save your progress and sync it across your devices. If you do:

• From Apple we receive a unique account identifier, the email address you choose to share (which may be a private relay address Apple creates for you), and, only the first time you sign in, the name you choose to share.
• We store with your account: your workout history (as described in Section 2, including each repetition’s exercise type, timing, and hold durations), your weekly goals and calibration results, and, for each workout, basic technical information about how it was recorded (device model, operating-system version, App version, and which movement detector and sensor were used — for example, the phone or headphones).
• Leaderboard handle. Every signed-in player is given a handle — by default the initials of the name Apple shares, or “KANGA” followed by random digits — which you can change at any time in Settings. Your handle, together with the number of days you trained and the repetitions you completed in a given week, month, or all time, is visible to all players of the App, including players who are not signed in. Your name and email address are never shown to other players. Handles must follow our rules (see our Terms of Use), and we check new handles against a list of disallowed words.
• Your workouts continue to be saved on your device while you are signed out, and they are uploaded the next time you sign in to the same account.

4. Usage and Analytics Information

To understand how players use the App and to improve it, we collect usage and activity data using a third-party analytics provider, PostHog (see Section 6). It includes:

• In-app activity and interaction events — for example, which screens you view, which buttons or controls you tap, when a workout is started or completed, and similar events.
• Gameplay and progress signals — for example, that a workout was completed or a goal was met, and the number of repetitions, without any medical or body-measurement data attached.
• Technical and device information — for example, device model, operating-system version, App version, language, general region/country (derived from your IP address, not precise location), and crash or error diagnostics.
• An analytics identifier — a randomly generated identifier created when the App is installed, used to distinguish sessions and devices.

If you are not signed in, this data is associated only with that random identifier. If you sign in, analytics data on that device — including data collected before you signed in — is linked to your account identifier, and your email address and name are attached to your analytics profile, so we can understand usage across your sessions and devices. Signing out stops linking new analytics data to your account.

We instruct our analytics provider not to collect advertising identifiers, and this data is not used for advertising or ad targeting.

Advertising measurement (Meta). We advertise the App on Meta’s platforms (such as Facebook and Instagram). To learn which of our ad campaigns lead people to install the App, the App includes Meta’s software development kit, which sends Meta:

• that the App was installed, once per installation;
• when the App is opened and how long each session lasts, each time you return to it after a short break; and
• basic technical information — for example, device model, operating-system version, App version, your IP address, and a random identifier Meta’s software creates for this installation.

It does not send your workouts, repetitions, goals, leaderboard handle, name, email address, or account identifier, and the App does not collect your device’s advertising identifier (IDFA) or ask permission to track you. Meta uses this information to measure the performance of our ad campaigns and reports it to us in aggregated form, through Apple’s privacy-preserving SKAdNetwork and Meta’s Aggregated Event Measurement. Meta processes it under its own terms and privacy policy (see Section 6). Turning off usage data in the App’s Settings stops this as well: the install and app-use information immediately, and Meta’s software entirely from the next time the App is opened (see Section 11).

We do not track you across other companies’ apps or websites.

Feedback. If you answer the in-app “Having fun?” question or write a note under it, we store your answer and message together with the App version, operating system and your analytics identifier (which is your account identifier if you are signed in), so we can follow up on what you told us. Please do not include sensitive personal information in your message.

5. Camera, Face Tracking, and Motion Sensors

To detect and count your movements, the App may request access to your device’s camera (including the TrueDepth front camera on supported iPhones), motion sensors (accelerometer, gyroscope and gravity sensor), and the motion sensors of compatible AirPods (through Apple’s Motion & Fitness permission).

• Face tracking (TrueDepth camera and ARKit). On iPhones with a TrueDepth camera, the App uses Apple’s ARKit face tracking while you exercise.
  • What face data we collect: the position and orientation of your face and the positions of your eyes relative to the camera, as reported by ARKit. We do not access or use face mesh geometry, facial expressions, camera images, or video.
  • How we use it: only to detect and count your squats, crunches, sit-ups and push-ups in real time, and to tell you when your face is out of the camera’s view. We do not use face data to identify you, for authentication, for advertising or marketing, for analytics, or to build a profile of you.
  • Sharing: face data is never transmitted off your device, and is never shared with us, our service providers (including Supabase and PostHog), Meta, or any other third party.
  • Storage and retention: face data is processed only in your device’s memory and is not saved to your device’s storage or to any server. Each reading is discarded as soon as it has been processed — within a fraction of a second — and nothing is retained after your workout ends. Only the result, such as a completed repetition and its timing, is saved as described in Sections 2 and 3.
  • Consent: the App uses face tracking only after you allow camera access in the iOS permission prompt, and you can withdraw that permission at any time in your device settings.
  • Internal diagnostics: the App contains a hidden diagnostics mode, used only by our developers and not available to players, which can save movement measurements derived from face tracking (such as head height and angle) to a file on the device for testing. These files never leave the device unless the developer shares them manually.
• Other camera and sensor input is likewise processed on your device in real time for movement detection only. We do not transmit, upload, or store your camera images, video, or raw sensor streams. Only the result — for example, that a repetition was completed and how long it took — is saved as described in Sections 2 and 3.
• You can grant or revoke these permissions at any time in your device settings. Disabling a permission may limit or disable features of the App.

6. Third-Party Service Providers

We use a limited number of third-party services to operate and improve the App. Except for Meta, as described below, these providers process data on our behalf and are not permitted to use it for their own purposes.

• Apple (Sign in with Apple) — account sign-in. See Apple’s privacy policy at https://www.apple.com/legal/privacy/.
• Supabase — hosts our database and account system, and stores your account, workout, goal, leaderboard and feedback data described in Sections 3 and 4. See https://supabase.com/privacy.
• PostHog — product analytics and crash reporting, as described in Section 4. See https://posthog.com/privacy.
• Meta Platforms — measurement of our advertising campaigns, as described in Section 4. Meta receives the install and app-usage information described there and processes it under its own terms and privacy policy. See https://www.facebook.com/privacy/policy/.
• Remote configuration — the App retrieves configuration values and game levels from our servers so we can adjust settings and features remotely. This may involve sending basic technical information (such as App version and device type).
• App stores — the Apple App Store may collect information when you download or update the App, subject to its own privacy policy.

Your use of these third-party services is also governed by their own terms and privacy policies, and we are not responsible for their practices.

7. How We Use Information

We use the information described above to:

• provide, operate, and maintain the App and its features, including syncing your progress and showing leaderboards;
• understand how the App is used and which features are popular;
• improve how accurately the App detects and counts exercises;
• diagnose problems, fix bugs, and improve performance and stability;
• respond to your feedback and support requests;
• develop new features and improve existing ones; and
• protect the security and integrity of the App, including keeping handles free of offensive content, and enforce our Terms of Use.

8. How We Share Information

We do not sell your personal information and do not share it with third parties for their own marketing. We share information only:

• with other players, limited to your leaderboard handle, training days and repetition totals (Section 3);
• with the service providers listed in Section 6, acting on our behalf;
• with Meta, limited to the install and app-usage information described in Section 4, to measure our advertising;
• if required by law, regulation, legal process, or enforceable governmental request;
• to protect the rights, safety, or property of Uncapped Potential, our users, or the public; or
• in connection with a merger, acquisition, or sale of assets, in which case we will require the recipient to honor this Privacy Policy or provide notice of any changes.

9. Data Retention and Account Deletion

• On-device data (Section 2) remains on your device until you delete the App or clear its data. Signing out or deleting your account does not remove it from your device.
• Face data and camera and sensor input (Section 5) is never stored: it is held in your device’s memory only while it is processed and is then discarded.
• Account data (Section 3) is kept for as long as your account exists.
• Deleting your account. You can delete your account at any time in the App under Settings → Delete Account. You will be asked to confirm with Apple, and we then revoke the App’s Sign in with Apple authorization. Deleting your account permanently deletes your account, profile, handle, and all workouts, repetitions and goals stored with it from our servers, and removes you from the leaderboards. This cannot be undone.
• Analytics and feedback data (Section 4) is retained for as long as reasonably necessary for the purposes described above, and is then deleted or aggregated in accordance with our analytics provider’s retention practices. You can ask us to delete analytics or feedback data linked to your account by contacting us (Section 14).
• Advertising measurement data (Section 4) is retained by Meta in accordance with Meta’s own privacy policy.

10. Children’s Privacy

The App is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at the address in Section 14 and we will take reasonable steps to delete it.

11. Your Choices and Rights

• Accounts are optional. You can use the App without signing in, and you can sign out or delete your account at any time.
• Your handle. You can change your leaderboard handle at any time in Settings.
• Analytics opt-out. You can stop analytics collection at any time by turning off usage data in the App’s Settings. This also stops the advertising-measurement data sent to Meta, fully from the next time the App is opened (Section 4).
• Device permissions. You can grant or revoke camera, motion-sensor, and Motion & Fitness permissions at any time in your device settings.
• State privacy rights. Depending on where you live in the United States, you may have rights to access, correct, or delete personal information we hold about you, or to opt out of certain processing. To make a request, contact us using the details in Section 14. We may need to verify your request, for example by confirming it relates to your signed-in account. If you have not signed in, we generally hold no information that we can associate with you.

12. Data Security

We take reasonable technical and organizational measures designed to protect information against unauthorized access, loss, or misuse. Your sign-in credentials are stored in your device’s secure Keychain, and data is transmitted to our servers over encrypted connections. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will provide reasonable notice (for example, in-app or on our website) and update the “Effective Date” above. Your continued use of the App after the changes take effect constitutes acceptance of the revised Privacy Policy.

14. Contact Us

If you have questions about this Privacy Policy or our data practices, or want to make a privacy request, contact us at:

Uncapped Potential
Email: support@uncappedpotential.io
Website: https://uncappedpotential.io

This Privacy Policy is provided for general informational purposes and does not constitute legal advice. You should consult qualified legal counsel to confirm that it meets the requirements applicable to your business and the jurisdictions in which the App is offered, including any Apple App Store data-disclosure requirements.