Privacy policy

This Privacy Policy explains how Get Bouncy ("we", "us", "our"), a desktop focus timer with webcam-based exercise mini-games, collects, uses, and protects information when you use our service.

Brice Fromm, the operator identified in our legal notice, is responsible for Get Bouncy's use of your personal data. This policy explains that use; it does not replace a separate consent choice where one is required.

1. Information we collect

1.1 Account information

When you use an account, we process your email address, display name, sign-in information, and account preferences. Display names may be generated or chosen by you. Passwords are stored as hashes, not plain text. If you use Google sign-in, we receive the profile and identity information needed to authenticate you.

1.2 Subscription and payment information

Polar handles checkout and subscription billing as our Merchant of Record. We store customer and subscription identifiers, plan and payment status, subscription periods, and refund and billing-event information needed to manage your access and support you. We do not receive or store your full payment-card details. Polar processes payment and billing information under its privacy policy.

1.3 Gameplay and account activity

Game results are linked to your account. They include scores, game type, session duration, completion information, and gameplay counts such as hits and misses. We also keep activity dates, XP, streaks, personal bests, timezone, game-start records, and access records used for free previews and offline play. These are operational account records, not anonymous analytics.

Your display name and scores can appear on leaderboards. Leaderboard visibility is enabled by default and can be changed in Settings. Challenge rooms also store membership, results, and messages; information you share in a room is visible to its participants. Do not put sensitive personal information in a display name, room name, or message.

1.4 Website visits, messages, and email

The marketing website's hosting, analytics, and video providers process technical information such as IP addresses, page requests, browser/device information, interaction events, and playback information. Cookie behavior is described in Section 6.

If you join the waitlist, we store your email address, any name you provide, and signup-source or plan-interest information. If you contact us or submit feedback, we process your contact details, message, and any information you choose to include. Service emails also generate delivery, failure, bounce, and complaint records.

1.5 Webcam data

We do not upload or save webcam video, frames, or pose landmarks as recordings. We do not use webcam processing to identify you. Movement-derived game results, such as hit counts and scores, are saved as described above.

2. Webcam and pose detection

Your browser or operating system asks for camera permission before access is granted. You can revoke that permission in your browser or OS settings. The games require camera access.

Account-linked gameplay results are separate from this local camera processing. Website analytics and marketing-video players do not receive your webcam feed through Get Bouncy.

3. How we use your information

We use the information described above to:

• Provide and operate the Service (run your account, deliver games, save settings)
• Process payments and manage subscriptions
• Send service-related emails (receipts, password resets, important notices)
• Analyze aggregated usage to improve the Service
• Detect and prevent abuse or fraud
• Comply with legal obligations

We do not sell or rent your personal data. We do not use your data to train machine learning models.

4. Third-party services

We use these services for the purposes shown. A provider receives the information needed for the feature you use; none receives webcam video or pose recordings through our game integration.

Providers process information under the agreements and privacy notices applicable to their services. Their roles depend on the processing involved; for example, Polar also handles its own payment, fraud-prevention, and legal obligations. Contact us for information about the arrangements that apply to your data.

5. Data retention

We keep account information and game history while your account is in use so that your progress and access remain available.

Retention also depends on the purpose of each record:

• Subscription, refund, and billing records are kept for subscription administration, dispute handling, and applicable accounting or legal obligations. Polar retains its own payment records under its policy.
• Waitlist data is kept while you remain subscribed. You can unsubscribe from marketing emails or contact us to request removal. A suppression record may be retained to respect your opt-out.
• Support and service-email records are kept as needed to handle the request, investigate delivery problems, and prevent repeated failed or unwanted sends.
• Hosting logs and analytics records are retained according to the provider and our account settings for security, performance monitoring, and website measurement.

You can request deletion using the contact details in Section 8. Some records may need to be retained to meet legal obligations, resolve disputes, or prevent abuse. We explain any applicable limitation when handling your request.

6. Cookies and local storage

The website and app use browser or device storage for sign-in, preferences, consent choices, and offline functionality. Native authentication credentials use the operating system's credential storage. These functions are separate from website analytics.

Where the website asks you to choose, the cookie banner lets you accept or decline optional analytics. The website currently selects whether to display that banner using request-region information; if the region is unknown, it asks for a choice. In other regions, the website may enable analytics without displaying the banner.

Google Analytics (when configured) and Plerdy load only when the website's saved analytics preference is accepted. Google advertising storage, advertising user-data consent, and ad personalization remain denied even when analytics is accepted. Google signals and ad-personalization signals are also disabled in our Google Analytics configuration. Vercel measurement and embedded marketing-video requests are handled separately from this preference.

You can reopen your choice using Cookie settings in the footer. Choose Decline to turn off Google Analytics and Plerdy, or Accept to enable them again. Turning previously enabled analytics off saves your choice and reloads the page to stop the running trackers. Your saved choice applies to this browser on this website; other browsers and devices have their own preferences.

Withdrawing consent stops future collection by these two tools; it does not delete information already held by providers or your Get Bouncy account. To request deletion, withdraw other consent, or object to processing, contact us. You can also remove cookies and site storage through your browser settings to reset saved website preferences.

7. International data transfers

The Get Bouncy application database is hosted in Convex's EU West (Ireland) region. Our hosting, payment, email, analytics, and video providers may also process data outside the European Economic Area, including in the United States.

The transfer arrangements depend on the provider and service involved. Where required, appropriate safeguards must apply, such as an applicable adequacy decision or contractual safeguards. Contact us to request details of the safeguards for your information.

8. Your rights

Depending on your jurisdiction, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Delete your account and associated data
• Export your data in a portable format
• Object to certain processing
• Withdraw consent for processing based on consent

To exercise any of these rights, email hello@getbouncy.app with the subject line "Privacy request" and the email on your account. We respond within 30 days.

8.1 EU residents (GDPR)

You have the rights listed above plus the right to lodge a complaint with your local supervisory authority.

8.2 California residents (CCPA)

You have the rights listed above plus the right to know what personal information we collect and the right to non-discrimination for exercising your privacy rights. We do not sell personal information.

9. Security

We protect your data with:

• TLS 1.2+ encryption in transit
• Encryption at rest for stored data
• Password hashing with industry-standard algorithms
• Access controls and least-privilege principles for our team
• Regular review of dependencies and infrastructure

No system is 100% secure. We cannot guarantee absolute security but we take it seriously.

10. Children

Accounts are for adults. You must be at least 18 years old and have reached the age of majority where you live to create an account. We do not offer accounts for children, and we do not knowingly collect personal data from them.

An adult account holder may let a supervised minor play on their account. When that happens, the gameplay results are saved to the adult's account and appear under the adult's display name. We do not ask for the player's age, and we do not create a separate profile for them. Pose detection still runs on the device, and we do not upload or save webcam video or pose landmarks, as described in Section 2. Please do not put a child's name or other personal details in a display name, room name, or message.

If you believe a child has created an account or provided personal data, contact hello@getbouncy.app. We will investigate, close any account that does not meet these requirements, and address deletion of the relevant data, subject to any applicable legal retention requirements.

11. Changes to this policy

We may update this policy from time to time. For material changes we will:

• Post the updated policy on this page and update the "Last updated" date
• Email you for significant changes
• Show a notice in the app

12. Contact

For privacy questions or to exercise your rights, email hello@getbouncy.app.