Privacy Policy
Doompush · Effective 18 September 2026 · Updated 1 October 2026 · Français
Who is responsible
Doompush is published by Ilan Uzan, an independent developer in Quebec, Canada, who is the controller of the personal information described here and, under Quebec's Law 25, the person in charge of protecting it.
Post (business address): 5641 Clanranald, Montréal, Québec H3X 2S9, Canada
Post (Israel): Hashomron 11, apt 6, Holon 5826514, Israel
Email: ilan@kesefplus.app
What Doompush does on your device
- Camera. Reps are counted with Apple's on-device Vision framework. Frames are analysed in memory and discarded; only joint positions are used, and only while a session is running. No photo or video is stored, uploaded or shared, and the app contains no code that could save or send one. Doompush cannot count reps without the camera.
- Screen Time (Family Controls). With your permission, Doompush shields the apps you pick and meters your earned unlock windows. Apple's Screen Time API keeps app names and usage on your device: Doompush only ever receives opaque tokens it cannot read, and a "budget used up" signal from its own extension. It never learns which apps you chose or how long you spend in any of them.
- Apple Health — writing. If you allow it, each completed session is written to Health as a functional strength training workout, with a calorie figure estimated from your rep count. You can revoke this at any time in the Health app.
- Apple Health — reading (Premium only). If you have Premium and allow it, Doompush reads today's step count so steps can become earned minutes (1,000 steps = 1 minute, up to 15 minutes a day). The step count is read on your device and is never transmitted. If you decline, the app reads zero and everything else still works.
- Notifications. Reminders are scheduled locally on your device. You can turn each kind off in You ▸ Preferences ▸ Notifications.
- Your progress — balance, streak, session history, creature stage, settings — is stored on your device. If you have iCloud device backup switched on, it is included in that backup, like any other app's data. Doompush has no database of its own and does not sync your progress anywhere.
What leaves your device
Usage statistics
For people aged 16 and over, Doompush sends anonymous product events to TelemetryDeck, so we can see which features are used and where people get stuck. Examples: app launched, onboarding step reached, session completed (with the rep count, whether it was camera-verified, and which exercise), unlock opened, paywall shown, purchase made, ad requested.
These events carry no name, no email, no free text, no advertising identifier and nothing from your Screen Time selection. Each is tagged with a one-way hash of your device's vendor identifier — a value specific to this app on this device — so that repeat events count as one device rather than many. TelemetryDeck's software also attaches the device model, operating system version, app and build version, language, region, time zone, screen size, orientation, light or dark mode, accessibility settings, whether the build came from the App Store or TestFlight, the day and hour of the event, and a random identifier for the current launch, and it records the start of each session. Under European law that combination still counts as personal data, which is why it is described here in full.
Nothing derived from Health is included. Claiming step minutes sends only the fact that a claim happened; neither the step count nor the minutes it earned leave your device.
You can switch these statistics off at any time in You ▸ About ▸ Share anonymous statistics. From then on nothing is sent, and the next launch does not start the statistics software at all. The switch is only shown when the age range is 16 or over; under 16 there is nothing to switch off.
Purchases
Subscriptions are processed by Apple. Receipts are validated by RevenueCat so your Premium status can be restored on a new device. Doompush gives RevenueCat no email, no name and no advertising identifier: your subscription is held against an anonymous identifier it generates. RevenueCat's software also sends your device's vendor identifier (the same app-specific value described above, unhashed) and your App Store country with each request. We never see your payment details.
Rewarded ads (free plan, optional, 16 and over)
Ads never appear on their own. They appear only when you tap "Watch" on the bonus chest, at most twice a day, never for Premium subscribers, and never for anyone whose age range is under 16 or unknown. When you do, an ad is requested from Google AdMob, which receives what an ad request needs: your device type, an approximate location derived from your internet address, and an advertising identifier where one is available. Google's software also records how the ad performed and whether you interacted with it, together with crash and diagnostic data about its own component, as declared in its privacy manifest. Apple's SKAdNetwork may separately send Google an anonymous notice that an ad led to an install, without identifying you.
In the European Economic Area and the United Kingdom, Google's consent message appears before the first ad and asks what it may use your data for. Doompush requests no ad at all unless that step is answered, and where Google requires it, an "Ad privacy choices" row in You ▸ About reopens your choices at any time.
Before the first ad only, iOS then asks whether Doompush may track you across other companies' apps and websites. If you say no, the advertising identifier is withheld and the ad is less relevant. Nothing else changes, and you still get your bonus minutes. Everything outside the bonus chest works the same whatever you answer.
Why we are allowed to use this information
For people in the European Economic Area and the United Kingdom, the legal bases are:
| What | Why | Legal basis |
|---|---|---|
| Running the app on your device: blocking, rep counting, your progress | To provide the app you asked for | Performance of a contract |
| Subscriptions and restoring Premium | To sell and honour the subscription | Performance of a contract |
| Reading your step count (Premium) | To turn steps into earned minutes | Your explicit consent, given in the Health prompt and withdrawable in the Health app |
| Writing workouts to Health | So your effort counts in Health | Your explicit consent, given in the Health prompt and withdrawable in the Health app |
| Anonymous usage statistics (16 and over) | To understand which features work | Our legitimate interest in improving the app, weighed against how limited and indirect the data is; you can object at any time with the switch in You ▸ About |
| Personalised rewarded ads (16 and over) | To fund the free plan | Your consent, given in the tracking prompt and, in Europe and the UK, in the consent message shown before the first ad |
Who else handles your information
- Apple — the App Store, subscriptions, iCloud backup, Health and Screen Time. See Apple's Privacy Policy.
- RevenueCat (United States) — subscription receipts. Privacy policy.
- TelemetryDeck (Germany, hosted in the EU) — usage statistics. Privacy policy.
- Google (United States) — AdMob rewarded ads. Advertising policies.
Doompush has no servers of its own. Because we are in Canada and some of these companies are in the United States, the information described above may be handled outside your country. Transfers out of the European Economic Area and the United Kingdom rely on the European Commission's standard contractual clauses, or on an adequacy decision where one applies — Canada holds a partial adequacy decision covering commercial organisations.
How long it is kept
- On your device: until you delete the app. Session history keeps the most recent 300 sessions.
- Usage statistics: held by TelemetryDeck in aggregate. Individual events cannot be traced back to a person, by us or by them.
- Subscription records: kept by Apple and RevenueCat while the subscription exists, and afterwards for as long as their own policies and tax rules require.
- Ad requests: kept by Google under its own policies.
Your rights
Depending on where you live, you have the right to ask for a copy of your personal information, to correct it, to have it deleted, to restrict or object to how it is used, to receive it in a portable format, and to withdraw consent you gave earlier. Quebec residents have these rights under Law 25, people in Europe and the UK under the GDPR, other Canadians under PIPEDA, and Californians under the CCPA.
The practical answer for most of it: nearly everything Doompush knows is on your phone, under your control. Deleting the app erases it. Revoking camera, Health, Screen Time or notification access in iOS Settings stops that feature at once. Workouts already written to Health are deleted in the Health app. Usage statistics cannot be tied to you individually, which is also why they cannot be singled out and deleted on request.
To exercise a right, write to ilan@kesefplus.app. We answer within 30 days. We do not sell or share your personal information, and nothing in Doompush makes an automated decision that has an effect on you.
Complaints
If you think we have handled your information badly, please write to us first. You can also complain to a regulator: the Commission d'accès à l'information du Québec, the Office of the Privacy Commissioner of Canada, your national data protection authority in the European Economic Area, or the Information Commissioner's Office in the United Kingdom.
Age
Doompush's content is rated 9+ on the App Store, and the exercise, blocking and creature work the same at any age. What changes with age is what leaves your device.
The first time the Home screen appears after setup, Doompush asks iOS for your age range using Apple's Declared Age Range feature; you can answer again at any time from You ▸ About ▸ Age range. You choose a bracket; your birth date is never shared with us. For children in a Family Sharing group, the parent or guardian decides whether the age range is shared at all. If the range is 16 or over, ads and statistics work as described above. If it is under 16, was declined, or is unavailable, Doompush requests no ads, shows no tracking or consent prompt, and sends no statistics. Nothing is collected from a child, and nothing a parent has set in Screen Time or Family Sharing is overridden by the app.
16 is the highest age of digital consent in the European Union and above Quebec's threshold of 14, so one rule covers everyone. Purchases from a child's Apple Account go through Apple, including Ask to Buy where the family uses it. If you believe we hold information about a child, write to us and we will delete what we can.
Changes
When this policy changes, the effective date above changes with it, and the new text replaces the old. Anything material will also be mentioned in the app's release notes.
Questions: ilan@kesefplus.app · Terms of Use