Privacy
8play is run by Quyen Dang in Vietnam ("we"). This page explains what our apps for iPhone and Android do with your data. The short version:
- Your motion sensor data and your workouts stay on your phone.
- There is no email or password account, no advertising and no advertising ID.
- If you join an app's optional weekly leaderboard, your display name, avatar colour and each workout's rep count and duration are sent to our server so you can be ranked. You can leave any time.
- KneeClap sends anonymous usage statistics, which you can turn off in Settings. JackFit sends none.
- Payments are handled by Apple or Google. We never see your card details.
On your phone
- Motion sensor data. The accelerometer and gyroscope are read while a workout runs to count your reps. It is processed in real time on the phone and is never uploaded.
- Workout history and settings. Date, reps, duration, pace and counting mode, and your preferences, are saved in the app's local storage and are not synced to any server. Delete them in the app's Settings, or by deleting the app.
- Voice. Spoken counts and guidance use your phone's built-in text-to-speech. No audio is recorded and the microphone is never used.
- Troubleshooting export. A hidden developer tool can export a motion recording as a file. It is only created when you start it, and only shared where you choose to send it.
Weekly leaderboard (optional)
Each app has its own leaderboard that ranks players by the total reps of their workouts in the current week (Monday 00:00 UTC to the next Monday). It is off until you join it from the app. The boards run on one 8play server, but they are separate: a profile created in one app does not exist in another, and one app cannot read another app's players.
- When you join we receive the display name you choose, an avatar colour, your platform (iPhone or Android) and a random code the server creates to recognise your phone. Only a cryptographic hash of that code is stored on the server. The code itself stays in your phone's secure storage (iOS Keychain or Android Keystore).
- For each workout we receive a random workout ID, the number of reps, the active duration and the start time. Never motion sensor data, recordings, location or health data from other apps.
- Other players see your display name, your initials and avatar colour, your weekly reps and your rank. Nothing else.
- Pacers. While a community is small, its board also includes computer-generated players ("pacers") so there is someone to chase. They are not real people and receive no data from you. They fade out as more people join.
- Reports. Players can report a display name. If several players report it, the name is hidden and shown as "Player". We keep who reported which name until the name is changed or either player leaves.
- Turning it off. Switch off Participate in the app's leaderboard profile to stop uploads and disappear from the board, or choose Leave leaderboard to delete your profile, workouts and reports from the server immediately. Workouts stay on your phone either way.
- Where and how long. The server runs on Cloudflare (Workers and D1) as our service provider, at api.8play.dev. Data is kept while you participate; past weeks stay visible as final results until you leave. Requests pass your IP address to Cloudflare, which we use only to limit how many profiles can be created and do not store.
Usage analytics
KneeClap
KneeClap uses Google Analytics for Firebase to learn which features are used and where people get stuck. It is on by default and you can turn it off in Settings › Data › Share anonymous usage data. When it is on, the app sends app events (for example: onboarding finished, workout started or completed with plan type, counting mode, rep count and duration, a purchase or restore attempt) and standard Firebase data: a random app-instance ID, device model, operating system version, app version, language, approximate country or region, and when sessions start. It never sends motion sensor data, your name, email, contacts or precise location. The advertising ID is not collected and ad personalization is off. Google processes this data on our behalf under the Firebase data processing terms and we use it only to improve the app.
JackFit
JackFit contains no analytics, advertising or crash-reporting SDK and does not track you.
Purchases
Subscriptions (KneeClap Premium and JackFit Plus) are sold through the Apple App Store or Google Play. Apple or Google processes the payment under their own privacy policies. The app only receives whether your subscription is active, and when it renews or expires, so it can unlock the paid features. That status is stored on your phone.
Ratings
An app may show the system rating prompt from Apple or Google. A rating or review you leave goes to the store, not to us.
Children
Our apps are not directed at children under 13 and we do not knowingly collect personal information from them.
Your choices and rights
- Delete your workouts in the app's Settings, or delete the app to remove everything stored on the phone.
- Leave a leaderboard in the app to delete everything it stored on the server. If you no longer have the app or phone, email us your display name and the app's name and we will delete it.
- Analytics data is not linked to your name or account, so we usually cannot identify it as yours. If you want to ask about it or use a right you have under laws such as the GDPR or CCPA, contact us.
Changes
If this policy changes we will update this page and the date at the top. Significant changes will also be noted in the app's release notes.
Contact
Questions about privacy: hello@8play.dev