Privacy policy

Last updated 1 November 2026

1. Who is responsible
2. What the app keeps on your phone
3. Your account and the server
4. Purchases
5. Sharing cards
6. This website
7. Hosting and security
8. What Sitbuster does not do
9. Deleting your data
10. Why this is lawful
11. Who else handles your data
12. International transfers
13. How long things are kept
14. Your rights
15. Children
16. Changes

1. Who is responsible

Sitbuster is made by SNN Systems, the software studio operated by Shahriar Nasim Nafi in Bangladesh, which decides how the data described here is handled. Contact: contact@snnsystems.com.

This policy covers the Sitbuster app for iPhone and Android, this website (sitbuster.com), and the Sitbuster server behind the app's leagues, crews and invite links (invite links start with r.sitbuster.com). "We" means SNN Systems.

2. What the app keeps on your phone

This data is kept on your phone. The camera, motion and reminders never leave it, and neither does your phone's location. If you sign in, your plan and answers, your game and your settings also go into the saved game in your account (section 3); signed out, we never see them. Your health answers (soreness and pain, the places you go easy on and any fluid limit) and your step counts go there only if you say yes to Sync health answers, and Ramadan mode with its city only if you say yes to Keep a copy in my account.

• The camera. During a set, the app reads your body's position from the camera with ML Kit, Google's pose detection library, which runs on the phone. Each frame is read in memory and dropped. Nothing is recorded, saved or uploaded, by us or by ML Kit.
• Motion. The app reads which way up the phone is held, so it reads your pose the right way round.
• Your plan and answers: your goals, starting level, sitting hours, workday kit, work days and hours, any places you want to go easy on (knees, back, wrists, shoulders), and your answers to the morning check-in about soreness and pain.
• Your game: sets and reps, XP, levels, your streak and freezes, the trail, your history, water and other small wins.
• Steps. With your permission, the app reads your step count from Apple Health on iPhone or Health Connect on Android. It only reads steps and never writes anything. It uses them to show your steps and to award XP. Signed in, the step counts go into your saved game (section 3) only if you turned on Sync health answers, and then steps from all your phones add up; otherwise they stay on your phone.
• Location. Only if you tap "Use my location" while picking a city for Ramadan mode or prayer times, the app asks for your approximate location, finds the nearest town and saves it on the phone to work out the times there. Your location itself is not sent anywhere. The town you pick, by hand or this way, is one of your Ramadan settings, so it stays on the phone unless you turn on Keep a copy in my account (section 3).
• Reminders. Nudges and the chair clock are set up on the phone.
• Move videos. The videos that show each move come from Cloudflare R2 at storage.sitbuster.com. The app downloads each one the first time you open it and keeps it on the phone. A download sends nothing about you or your account, only what any download carries, such as your IP address and app version, which Cloudflare handles as described in section 7. The Sitbuster server isn't involved and keeps no record of them.

ML Kit can send Google technical diagnostics about how it's working: device and app details, a per-installation ID that isn't meant to identify you, the settings used, performance numbers and error codes. It doesn't send camera images. Google describes this in its ML Kit data disclosure.

If you back up your phone (iCloud or a computer backup on iPhone, Google backup on Android), the backup can include the app's data. That backup belongs to your Apple or Google account, and we never see it. Deleting the app deletes its data from the phone.

3. Your account and the Sitbuster server

You can play without an account. To play in leagues, crews and clubs, to use invite links and to keep your progress in your account, you sign in with Apple or Google. The server then keeps:

• Your account: your name and email address as Apple or Google give them to the app (Sign in with Apple lets you hide your email, and then we keep Apple's relay address instead); the ID Apple or Google uses for your account; for Sign in with Apple, a token used only to cancel the sign-in when you delete your account; a scrambled (hashed) copy of each sign-in token and when it ends; and when you joined and last used the app.
• Leagues: the XP your phone checked each day and how many camera sets it came from (camera sets and steps, at most 600 a day; small wins never count), your active days, your league, rank and tier, and your phone's offset from UTC, which groups leagues by time zone and sets when each week ends.
• Crews: your crew, its name and invite code, when you joined, the damage you did to each week's boss and whether you landed its last hit, the last day of any Away you set (never why), and high-fives, which are kept for 30 days.
• Patches: the patches the server awards you (Most Active, raid wins, and reaching Silver, Gold and Summit) and the week of each. Only you see them. If you pin patches to your bib, the server keeps which ones (up to three) and the number each shows, for your crews to see when you show them your bib.
• Invites: your invite code, who invited you, when you finished your first camera-checked set, when you counted for whoever invited you (camera sets on 3 different days in your first 14, so you both get a streak freeze), and any freezes waiting for you. If you share an invite link, the phone uploads the preview picture it drew for it, so apps like Slack and WhatsApp can show it.
• Your saved game: a copy of what section 2 lists as your plan and answers and your game, and your settings (goals, work hours, nudges, water amounts and theme). It's how a new or reinstalled phone, and your other phones, get your progress back. Two kinds of data go into it only after your own yes for each:
  • Your soreness and pain answers, the places you want to go easy on, a fluid limit and your step counts are health information, so they're included only if you said yes when the app asked, or later in Settings, Account, Sync health answers. Then the step counts come in 15-minute blocks from each phone signed in to your account, for the last two weeks, so your phones' steps add up. Turn it off there and they're removed from your account and stay on your phone.
  • Ramadan mode shows your religion, so its settings (your city, how prayer times are worked out, quiet at prayer times, your mosque's times and days you're not fasting), the Ramadan program and the coach's changes for fasting are included only if you turn on Keep a copy in my account in Ramadan mode and say yes. Turn it off and they're removed from your account at the next sync and stay on your phone.
• Reports and blocks: when you report a player, or a crew's or club's name, the server keeps who sent the report, who or which crew or club it's about, the reason you picked, where you saw it (league, crew or the top 100), the name as it was then, and when. When you block someone, it keeps that you blocked them and when.
• Friends: the friends you add with each other's code or link (both of you say yes), the requests you send and get, and, while you have a friend, one number a day for the friends board: that day's share of your own target, up to 200%. Never your sets, your target or anything about your health.
• Find me a crew: while you're looking, that you are and since when. The server looks for a crew whose owner opened its seats, near your time zone and with a similar number of active days lately; it uses what it already keeps and nothing more. Owners: whether your crew is open to new crewmates.
• Moving now: only if you turn it on in What others see. When a set starts, the server holds "moving now" in memory for 10 minutes and never writes it down; whether it's on is kept with your settings.
• Nudges: the fixed nudges ("Stretch break?") crewmates and friends send you, in your inbox, and whether you take them ("Nudges" in What others see). Only those six phrases, never your own words.
• Buddy pairs: who you pair up with, the shared plan you picked from the fixed four, and the week's dates. The days done come from the friends board's daily share.
• Crew programs: if your crew does a program together, which program, when it started, who's in, and the days you did a program day: only that it was done, never your reps or anything about your health.
• Your birth year: the year you gave when you started, so the limits for anyone under 18 (no leagues, crews, clubs, Country & world, invites or sharing) hold on all your phones. Nothing else about your age is kept.
• Your name and handle: how others see your name, which you choose: your first name and the initial of your last name (the default), your full name, or a handle. A handle goes through the same filter as crew names and is unique, whatever its capitals.
• Your yes to a league: each time you say "Yes, put me in a league", when, and which version of that screen's words you saw; and each time you choose "Just me" instead.
• Boards: only if you turn on "Show my steps" or "Show my small wins", your steps (up to 10,000 a day) and daily step goal, or the small wins you track, the ones you did and which days were workdays (for the Log off board), for this week and last; the boards you hide yourself from; and, if you take a break from rankings, when it ends.
• Clubs: the clubs you start or join, your role, how each club sees you (by name, by rank only, or quietly), whether you show on its Log off board, and when you joined or left. Changes to a club by its owners, and by us, are kept in the club's log.
• Country & world: only if you join. For the bands, the country of your app store (never your location) and when you joined; for the top 100, when you joined. If a week's XP is unusually high, a note that we checked it before it was listed.
• Notifications and the inbox: each phone's push token (the address Apple or Google gives the app so the server can send it notifications), whether it's an iPhone or Android, the app's build, and when that phone last used the app; your notification settings (which alerts, quiet hours and pauses) and the crews and clubs you mute; the alerts waiting to go and recently sent; and your inbox: high-fives, joins, invites, results, club goals, new patches and cards from your crew.
• Cards sent to your crew: when you send a win to your crew, the kind of card and its number (like "Level 5"), who sent it and to which crew. Never a picture, your weight or your goal.
• Checking the app is genuine: before a new friend counts for invite rewards, the app shows it's the real app on a real phone, with Apple's App Attest on iPhone or Google's Play Integrity on Android. The server keeps a one-time code until it's used, then the iPhone's App Attest key ID (an ID for the app on that phone, which says nothing about you), the kind of phone and when it was checked, so one phone can't count as many new friends. Google's answer isn't kept.
• Sitbuster Plus: when your Plus ends, and, for the Plus mark, when it first started and the dates of each paid period, as RevenueCat reports them.

Who sees what

• Players in your league see your name in the form you chose (your first name and the initial of your last name, unless you change it; or "Player" and a short tag if there's no name, or if a name has a word the filter turns down), your XP and your active days, and your steps and small wins only if you show them.
• Your crew sees the same, plus your boss damage, high-fives and the cards you send them. Your bib, with the patches you pinned to it, and the Plus mark show to your crews only if you turn them on in What others see. In a crew program, your crew sees who's in and the crew's days done together that week, never your own count.
• Each club sees you by name, by rank only, or not at all (quietly), as you choose for that club.
• Your friends see your name and, on the friends board, how many days this week you reached your own target and your share of it, never the target itself. A request you turn down stays pending for whoever sent it, so they aren't told.
• Your buddy sees how many days you've done in your shared week, out of 5, and nothing else.
• "Moving now" shows only to crewmates and friends who have it on too, for 10 minutes after a set starts.
• Country & world: the bands are counts and show no names. The top 100 shows your name as you chose it, your place and your XP this week, in the app only and never on the web, to players who joined the bands or the top 100. Players who aren't listed see only their own approximate place, never anyone else's.
• Anyone who opens your invite link sees the invite page and its preview picture.
• Your saved game goes only to the phones signed in to your account.
• Your inbox and notifications go only to your phones.
• Reports are seen only by us. Nobody is told who reported them or who blocked them. Someone you block shows to you as "Blocked player".

You're placed in a league only after "Yes, put me in a league". If you haven't said it, or pick "Just me" under How you play, you aren't placed in one and appear on no league table or board. While you're signed in, the phone still sends each day's XP and camera sets, because they count for your crews, your clubs and the invite reward. The server is used only to run leagues, crews, invites and your saved game, never for advertising or profiling.

4. Purchases

Sitbuster Plus is an optional monthly or yearly subscription. Payment is handled entirely by Apple (App Store) or Google (Google Play), under their own terms and privacy policies. We never see your card details or billing address.

The app uses RevenueCat, Inc. to check whether you have Plus and to confirm and restore purchases. The app contacts RevenueCat when it starts, even if you've never bought anything, and again when you buy or restore. RevenueCat receives:

• an app user ID: a random, anonymous ID made on your phone or, once you sign in, your Sitbuster account's ID (also a random code, not your name or email address), so the server can ask RevenueCat whether you have Plus;
• your purchase history in this app: which plan, when, and whether it's active or in a free trial;
• the device and app details needed to check a receipt: device model, operating system version, app version, the country or region of your store, and your IP address.

When you buy, renew, cancel or lose Plus, or get a refund, RevenueCat also tells the server, naming your account's ID, the plan and its dates, so your Plus and the Plus mark stay right without opening the app.

This is used to make Plus work and to give us overall purchase reports, such as how many people chose each plan. It isn't used for advertising or tracking, and it isn't sold. See the privacy policies of RevenueCat, Apple and Google.

5. Sharing cards

Cards for your wins are drawn on your phone and go only where you send them with your phone's share sheet. "Show my goal" starts off on every card. Your invite code is on the card unless you turn it off. "Send to my crew" puts only the card's kind and number in your crewmates' inboxes (section 3).

6. This website

sitbuster.com runs no analytics. Every page is a static file with no JavaScript and no cookies, except the account deletion page (section 9). That page shows Apple's and Google's sign-in buttons, which load from Apple and Google, and while you use it, it keeps two cookies only to know you've signed in there: they last 15 minutes at most, and the second goes when you sign out.

7. Hosting and security

The server and this website run at DigitalOcean, in its London data centre, and traffic reaches them through Cloudflare, which protects them from attacks. Like any web host, they process the technical details each request carries, such as your IP address, the page or address requested, your browser or app version and the time. The server's web logs keep these for up to 15 days, to keep the service secure and to fix problems. Connections to the server are encrypted.

8. What Sitbuster does not do

• It shows no ads, free or paid.
• It contains no analytics or crash-reporting tools.
• It doesn't track you across other apps or websites.
• It doesn't sell your data or share it for advertising.
• It never uses data from Apple Health or Health Connect for advertising, and sends your step counts only to your own account, and to your boards and steps bands if you choose to show them.

9. Deleting your data

• Your account, in the app: go to You, then Settings, then Delete account (or Account on the League or Crew tab). The account and everything the server keeps for it are deleted at once, and Sign in with Apple is cancelled. You leave your crews and clubs as if you'd left them: one with nobody left closes, and the next person takes over one you ran. What others have from you goes too: your high-fives, cards and nudges in their inboxes, alerts about you not yet sent, friendships, buddy pairs, requests, reports and blocks. A crew's boss and a club's log keep what happened, without your name.
• Your account, without the app: on the account deletion page, sign in with the Apple ID or Google account you use in Sitbuster, then choose Delete my account. We email the account's address straight away, from no-reply@sitbuster.com. Seven days later that account is deleted, as above, unless it's kept first on the same page or with Keep it in the app. Either way the request itself is then deleted.
• On your phone: delete the app.
• Purchase records at RevenueCat: email contact@snnsystems.com with your order number: the order ID from Apple's receipt email, or the Google Play order number, which starts with GPA. We have RevenueCat delete them and tell you when it's done.

Deleting the app or your account doesn't cancel a subscription. Cancel it in your App Store or Google Play subscription settings.

10. Why this is lawful

Where data-protection law of the kind found in the UK and EU applies, we rely on: performance of a contract for your account, your saved game, crews, clubs, invites, your name and handle, the inbox, blocks and Plus; legitimate interests for keeping the service secure, the web logs, reports and the name filter that keep leagues, crews and clubs free of abuse, checking unusual XP before it's listed, stopping abuse of invite rewards (including checking the app is genuine), keeping social features to adults with the birth year you give, the Plus check the app makes when it starts, and overall purchase reports; your consent for leagues ("Yes, put me in a league"), the Country & world bands and the top 100, which you give and withdraw in the app; your consent for the camera, steps, location and notifications, which your phone asks for and lets you withdraw at any time in its settings; and your explicit consent for keeping your health answers (soreness and pain, and the places you go easy on) in your saved game, which you give or withdraw in the app under Settings, Account. League ranks are worked out automatically from XP; this has no legal or similarly significant effect on you.

11. Who else handles your data

We don't sell your data, rent it or share it for anyone's marketing. It's handled only by:

• Apple and Google, for sign-in (in the app and on the account deletion page), payments, notifications (Apple Push Notification service and Firebase Cloud Messaging, which carry each notification to your phone), checking the app is genuine (App Attest and Play Integrity), and steps from Apple Health or Health Connect;
• RevenueCat, to check and restore Plus;
• DigitalOcean, which hosts the server and this website;
• Cloudflare, which carries and protects traffic to them and stores the move videos (Cloudflare R2);
• Google's ML Kit, for the diagnostics in section 2;
• the email provider that carries our mail: what you write to us, and the email we send to your account's address when its deletion is asked for;
• any authority, where the law requires it.

12. International transfers

We operate from Bangladesh, the server is in the United Kingdom, and our suppliers operate internationally (RevenueCat, for example, is in the United States), so your data may be processed outside your own country. Where the law requires a safeguard for such a transfer, we rely on the mechanisms our suppliers offer, such as the standard contractual clauses in their data processing terms.

13. How long things are kept

• Your account, saved game, leagues, crews, patches and invites: until you delete your account. Each sign-in: until you sign out on that phone, and 6 months at most, after which the app asks you to sign in again; an ended sign-in is kept 30 more days, only so the app can tell you why you were signed out. Each phone's step counts are kept for two weeks.
• Your birth year, name and handle, notification settings, What others see, your board settings, Away, your yes to a league and your "Just me" choices, the Plus dates and App Attest key IDs: until you change them or delete your account. Crews and clubs you mute: until the mute ends.
• Steps, small wins and workdays you show on boards: this week and last.
• Crew programs: while they run, then 8 weeks after they end.
• Friends: until either of you removes the other, blocks the other or deletes their account. Friend requests: 14 days. The friends board's daily shares: 14 days, and gone once you have no friends. Buddy pairs: a month after their week ends or they're stopped, and an ask until it's answered, never more than 2 days. Looking for a crew: until you're placed or stop, and never more than 14 days.
• Clubs: while you're in them, then two months after you leave. A club's log: one year. A club's monthly goals: about 13 months.
• Country & world: until you leave the bands (the top 100, until you leave it). A note that unusual XP was checked: 8 weeks.
• Push tokens: until you sign out on that phone or its sign-in ends, or 90 days after it last used the app. Alerts: a week after they're sent.
• Your inbox and cards sent to your crew: 30 days. Invites you send to crewmates: 2 days.
• A count of your high-fives, nudges, cards, invites, friend requests, reports, name changes and joins, for the daily limits that keep them from being abused: 2 days.
• The one-time code for checking the app: until it's used, and never more than half an hour.
• High-fives: 30 days.
• Reports: until we've dealt with them, then 90 days more. Blocks: until you unblock. Both go when the account of the person who sent or made them, or of the person they're about, is deleted, and a report about a crew or club goes when it closes.
• Deletion requests from the website: seven days, with when the email about it went out, and then the account is deleted, unless it's kept.
• Your Download my data file: a week after it's ready.
• Web logs: up to 15 days.
• Data on your phone: until you delete the app, and in any backup you make until you delete that.
• RevenueCat's notices to the server about your Plus: 90 days.
• Purchase records at RevenueCat: while they're needed to make Plus work and to restore it, or until you ask for them to be deleted.
• Email to us: up to 3 years from the last message.

14. Your rights

You can download a copy of what the server keeps about you in the app, under Settings, Download my data: a ZIP file of JSON and CSV files, which we tell you about when it's ready, and keep on the server for a week before deleting it. Depending on the law where you live, you can also ask for a copy of the data we hold about you, ask for it to be corrected or deleted, ask us to restrict how it's used, object to uses based on legitimate interests, or ask for it in a portable format. Email contact@snnsystems.com with Data request in the subject, saying what you want done and the email address of your Sitbuster account. We reply within 7 days and finish within 30 days, at no charge. You can also complain to the data-protection authority in your country.

15. Children

Sitbuster is made for adults who sit for work. It isn't directed at children, and nobody under 13 should use it or create an account. Weight goals, leagues, crews, clubs, Country & world, invites and sharing are only for adults 18 and over: the birth year you give decides this on all your phones, and they open on 1 January after the year you turn 18. If you believe a child has created an account, email us and it will be deleted.

16. Changes

If this policy changes, the date at the top of this page changes with it. If a change materially affects how your data is handled, account holders will be told by email or in the app before it takes effect.