Privacy policy

Who is responsible

Ugitech SAS (9 rue des Artisans, 13310 Saint-Martin-de-Crau, France) is the data controller for NoSkip. Questions about your data: noskip@noskip.app.

The short version

• Pose detection runs on your iPhone. Video is never recorded, stored or uploaded.
• You play with a NoSkip account: the same one in the app and on noskip.app.
• Your progress is saved on your phone and copied to your account, so it follows you to a new phone and to the web.
• No ads, no trackers, no data brokers, no analytics cookies.

In the NoSkip app

Camera. The app uses the front camera to count your reps and check your form with Apple’s on-device Vision framework. Frames are analysed in memory and discarded; they’re never saved or sent anywhere. Only numbers are kept: rep counts, form scores and stars.

Your game save. Your first name and spirit animal, goal and fitness level, your calendar (levels finished, missed and rest days), streaks, coins, badges, items and settings, in the app’s private storage, with a copy in your account (see below). Settings → Reset my progress erases them on the phone and in your account. The app keeps its login token in the iPhone Keychain.

Notifications. Reminders (daily reminder, “streak at risk”) are scheduled locally on your phone. We don’t run a push server and never receive a device token.

Photos. If you save a share card or a skeleton replay, the app asks to add it to your photo library. It can’t read your photos. Replays show the stick figure only, never camera footage.

Purchases. Coin packs are sold by Apple through In-App Purchase. Apple processes the payment; we never see your payment details.

Sharing. When you share a card or your profile link, it goes only where you send it with the iOS share sheet.

Your NoSkip account

Account. To play, you create a NoSkip account, in the app or on noskip.app. We collect your email address, a password (stored only as a salted scrypt hash), your first name, handle, spirit animal, country, language and, if you add it, your city. We only email you when you ask for a password reset link.

Sync. A few seconds after each change, when you open or leave the app, and at least every 5 minutes while it’s open, the app sends its game save to your account. Your account also holds one record per day played or missed (date, level, stars, form score, rep count, XP), your streaks, badges, level and weekly XP. That’s how your profile and the leagues stay up to date, and how a new phone gets your progress back. No video, photo or camera frame is ever sent.

Public profile and leagues. By default your profile at noskip.app/@handle is public: name, handle, avatar, city and country, level, streaks, calendar, badges and recent levels. Leagues show your name, avatar, level, country and weekly XP. Switch Public profile off to hide your profile and leave the country and global leagues; people who follow you still see you in their Friends league.

Follows. When you follow someone we store that link to build your Friends league.

League chests. When the top 5 of each country league win a chest, we keep the week, your rank, your XP and the coins in it, and whether you opened it.

Invites. If you sign up with a friend’s @handle, we keep who invited you and the coins it paid each of you. Your friend sees your name, handle and avatar when their reward arrives.

Improving NoSkip. We look at statistics built from this data (how many people play each day, how long streaks last, which levels are too hard) to make the game better. We read them in aggregate, never to profile you, and they never leave NoSkip.

Cookies. Two strictly necessary cookies: ns_session keeps you logged in (60 days) and ns_lang remembers your language (1 year). No advertising or analytics cookies, so there’s no consent banner.

Server logs. Our servers keep short technical logs (IP address, time, page requested, browser) to keep NoSkip secure and fix bugs. They’re deleted within 30 days.

Why we use it

• Running your account, syncing your progress, your profile, leagues and follows: performance of our contract with you (GDPR art. 6(1)(b)).
• Security logs, abuse prevention and backups: our legitimate interest in keeping NoSkip safe (art. 6(1)(f)).
• Aggregate statistics to improve the game: our legitimate interest in making NoSkip better (art. 6(1)(f)). You can object by writing to us.
• Purchases: performance of the contract; Apple is responsible for payment processing.

We don’t use your data for advertising, profiling or automated decisions, and we never sell it. Rep counts and form scores aren’t health measurements: we don’t collect weight, heart rate or medical information.

Who else sees it

Only the providers we need to run NoSkip, bound by contract to act on our instructions:

• HolyCloud (GENIUSWEER SAS), our hosting provider, on servers in Paris, France.
• Apple, for the App Store and In-App Purchase, under Apple’s own privacy policy.
• Our email provider, to send the password reset links you ask for and to answer your emails.

Your account data is stored in the European Union and not transferred outside it. We disclose data only when the law requires it.

How long we keep it

• Account, progress and the app’s game save: until you delete your account.
• After deletion: removed from the live database immediately, and from backups within 7 days.
• Login sessions: 60 days on the web and 1 year in the app, or until you log out.
• Password reset links: they work for 1 hour and are deleted the next day.
• Server logs: 30 days.
• Support emails: up to 3 years after our last exchange.

Your rights

You can access, correct, export or delete your data, object to or restrict its use, and leave instructions for what happens to it after your death. Delete your account anytime in the app (Settings → Delete my account), at noskip.app/me → Profile settings → Delete account, or by writing to noskip@noskip.app. We answer within one month. You can also complain to the CNIL (cnil.fr).

Children

NoSkip isn’t made for children under 13. If you’re under 15, ask a parent or guardian before creating a NoSkip account. If you think a child gave us personal data, write to us and we’ll delete it.

Security

HTTPS everywhere, passwords and session tokens stored only as hashes, access limited to the people who run NoSkip, and daily backups kept for 7 days on the same EU server.

Changes

If we change this policy we’ll update the date at the top. For important changes we’ll tell you in the app or by email before they apply.