Last updated: September 13, 2026
This Privacy Policy explains how Creative Apps Lab ("we," "us," or "our") handles information in connection with the RouseUp Android app (the "App") and website, available on Google Play and at https://rouseup.creativeappslab.com.
Summary
RouseUp is engineered with a privacy-first architecture. Your camera video feed and body-pose coordinates are processed entirely on your phone in device memory (RAM) and are never uploaded to any server or shared with third parties. Your configured alarms and workout history are stored locally in the App's private on-device database.
To authenticate you and provide account services, RouseUp collects standard account information through Google Sign-In (name, email, avatar, and Google ID) and product analytics through Mixpanel. The App is 100% free to use and is supported by advertisements served via Google AdMob. Below is a complete disclosure of every category of data collected, how it is processed, and how you can exercise full control over it.
Information We Collect & How We Handle It
1. Camera and Pose Data (100% On-Device)
When you complete an exercise to dismiss an active alarm, the App accesses your device's camera and uses Google's on-device MediaPipe pose-detection technology to detect your body's 33 skeletal landmarks and count repetitions.
- Transient in-memory processing only: Video frames and landmark coordinates exist only as byte buffers in device RAM while calculating repetitions.
- Zero storage: Camera frames and pose coordinates are never written to disk, never cached in system storage, and never recorded.
- Zero transmission: Camera video feeds and skeletal landmarks are never transmitted to our servers, advertising networks, or any external service.
- Active duration: The camera sensor is only active while the fullscreen alarm/exercise screen is displayed and is shut off the moment the alarm is silenced or snoozed.
2. Account Information (Google Sign-In)
RouseUp requires signing in with your Google Account to create a unified profile, secure your sessions, and support future features. When you authenticate via Google Sign-In (Android Credential Manager), we receive and store the following on our secure PostgreSQL server:
- Full Name: Displayed on your user profile and alarm dashboard.
- Email Address: Used to uniquely identify your account, respond to customer support requests, and communicate account notices.
- Profile Picture URL (Avatar): Sourced from your Google account to display your profile picture within the App.
- Google Account Identifier (Google Sub ID): A unique cryptographic string that securely authenticates your Google credentials.
- Session and Refresh Tokens: Cryptographically signed tokens stored in encrypted device storage and our database to keep you signed in securely between sessions.
3. Product Analytics and Telemetry (Mixpanel)
We use Mixpanel, a reputable third-party product analytics service, to understand how RouseUpis utilized, diagnose bugs, analyze workout reliability, and improve features.
- User Profile Identification: When you sign in, your internal backend user ID, name, email address, and avatar are linked to your Mixpanel People profile so our support team can assist you if you experience issues.
- App Lifecycle Events: We log app interaction milestones including
app_open,sign_in_completed, sign_out, and account_deleted. - Workout & Alarm Telemetry: We record alarm trigger outcomes (exercise completed, timed out, or dismissed via emergency exit), exercise types chosen (squat, push-up, jumping jack, etc.), target repetitions or duration, actual repetitions completed, and workout duration.
- Technical & Diagnostic Data: Non-sensitive technical parameters including device model, manufacturer, Android OS version, app version code, and error/crash stack traces.
- Strict Exclusion: Camera frames, raw imagery, and body pose coordinates are NEVER collected or sent to Mixpanel.
- Opt-Out: You can opt out of anonymous analytics collection in the App's Settings at any time.
4. Advertising Identifiers (Google AdMob)
The App displays non-intrusive banner and interstitial advertisements provided by Google AdMob to support 100% free access to all 14 exercises and features without subscription fees.
- Identifiers Collected: AdMob and its partners may collect standard device identifiers including your Android Advertising ID (AAID), IP address, language settings, carrier, and general device specifications to serve and measure ads in compliance with Google Play Developer Policies.
- Zero Health / Biometric Sharing: Advertising SDKs have zero access to camera feeds, pose landmarks, or workout history.
- Ad Personalization Control: You can reset your Advertising ID or opt out of personalized ads at any time directly in your Android device settings under Settings → Google → Ads.
5. Locally Stored Data
The App stores the following directly on your device in private, sandboxed SQLite storage (inaccessible to other applications):
- Configured alarms, scheduled wake-up times, and repeat days
- Ringtone choices, vibration patterns, and snooze preferences
- Complete workout completion history, calendar streak heatmap, and personal record milestones
- Unlocked achievement badges and developer preference flags
This data remains exclusively on your phone unless you choose to export it as a PDF or CSV file using the App's export feature.
6. Website Waitlist Information
If you join our early access waiting list on our website (https://rouseup.creativeappslab.com/waitlist), we collect your name, email address, registration timestamp, IP address (for anti-bot rate limiting), and browser user agent. We use this information solely to send early access invitations and product announcements. We never sell waitlist emails or share them with advertisers.
7. Android Permissions
The App requests the following Android permissions, strictly for the designated operational purposes:
| Permission | Operational Purpose |
|---|
Camera | To detect your body pose and count exercise repetitions. Active only while the fullscreen alarm/exercise screen is showing. |
Schedule Exact Alarm / Use Exact Alarm | So your alarm rings at exactly the time you set, even in battery-saving modes. |
Post Notifications | To show the alarm notification and any reminders you've enabled. |
Use Full Screen Intent | Required on Android 14+ for alarm-category apps to take over the screen when an alarm fires, the same mechanism any alarm clock app uses. |
Foreground Service / Foreground Service Media Playback | Keeps the alarm sound playing and the app responsive while it's ringing in the background. |
Wake Lock | Keeps the screen and processor awake long enough to show the alarm and verify your exercise. |
Receive Boot Completed | So your scheduled alarms are restored automatically after your phone restarts. |
Vibrate | For the alarm's vibration pattern, if you've enabled it. |
Disable Keyguard | Lets the alarm and exercise-verification screen display over your lock screen — the same approach standard alarm-clock apps use. |
Internet / Network State | To communicate with our secure backend for Google Sign-In authentication, session management, Mixpanel telemetry, and AdMob advertising delivery. |
Account and Subscriptions
RouseUp requires a free Google Sign-In account to use the App — see "Account information" above for what that involves. There are currently no subscriptions, paid tiers, or credit card requirements: all 14 exercises and features are free to use for every signed-in user. If a paid plan launches in the future, it will be presented clearly before anything is charged, and will never require re-collecting information you've already provided at sign-in.
How We Use Your Information
We use the data we collect strictly for specific, legitimate operational purposes:
- Authentication & Profile Management: Sourcing your name, email, avatar, and Google identifier via Google Sign-In to authenticate you, issue secure session tokens, and display your profile.
- Product Analytics & Improvement: Analyzing app lifecycle events, workout completion rates, and diagnostic error logs via Mixpanel to detect bugs, improve exercise recognition accuracy, and ensure alarms fire reliably across different Android devices.
- Ad Delivery & Free Monetization: Utilizing standard advertising identifiers via Google AdMob to display ads, allowing all 14 exercises and features to remain 100% free with zero paywalls.
- Alarm & Exercise Verification: Utilizing your device's camera strictly in real time to compute body skeletal landmarks and silence alarms upon verified workout completion.
- Customer Support & Legal Compliance: Responding to user inquiries, processing data deletion requests, and maintaining required consent audit records under applicable laws.
Data Sharing & Third-Party Processors
We do not sell, rent, or trade your personal information to any third parties.We never share camera imagery, video frames, or pose landmark coordinates with anyone — this data never leaves your device.
We share limited data only with trusted third-party service providers who help us operate the App:
- Google LLC: Sourcing Google Sign-In authentication and serving advertisements via Google AdMob. Subject to Google's Privacy Policy and Google Play Developer Policies.
- Mixpanel, Inc.: Processing app lifecycle telemetry, workout completion statistics, and identified user properties under strict data processing agreements. Mixpanel never receives camera footage or joint coordinates.
- Cloud Database & Hosting Providers: Secure, encrypted cloud infrastructure (PostgreSQL) used to host our backend authentication API and account databases.
Data Retention & Account Deletion
We believe in strict data minimization and give you complete control over your data lifecycle:
- On-Device Data: Your alarms, workout history, and streaks remain on your phone until you uninstall the App or clear its storage in Android Settings.
- Server-Side Account Data: Your Google Account profile (name, email, avatar, Google ID) and session tokens are retained only while your account is active.
- Immediate In-App Deletion: You can permanently delete your account and all associated server records directly inside the App at any time: open Profile → Delete Account and confirm. This immediately wipes your user record, session tokens, and transactions from our server, and resets your Mixpanel analytics identifier.
- Web & Email Deletion: If you have uninstalled the App, you can request full account and data erasure by visiting our Delete Account & Data Page or by emailing us at creativeappslab29@gmail.com.
Children's Privacy
RouseUp is not directed at children under the age of 13 (or under 18 in jurisdictions requiring verifiable parental consent such as India under the DPDP Act 2023). We do not knowingly collect personal information from children. If you believe a child has signed in with a Google account, please contact us at creativeappslab29@gmail.com and we will promptly purge the account and all associated data.
Your Choices & Controls
- Camera & Notification Permissions: You can grant or revoke camera and notification permissions at any time via Android System Settings.
- Analytics Opt-Out: You can disable usage and telemetry tracking in the App's Settings menu.
- Ad Personalization: You can reset your Android Advertising ID or opt out of personalized advertising under Settings → Google → Ads.
- Data Deletion: You can erase your server account via Profile → Delete Account and erase local data by clearing app storage.
Your Global Privacy Rights
Depending on your location, you hold specific legal rights regarding your personal information:
- European Economic Area (GDPR) / UK / Switzerland: You have the right to access, rectify, erase, restrict, or export your personal data, as well as the right to withdraw consent and lodge a complaint with your local supervisory authority.
- India (Digital Personal Data Protection Act, 2023): You have the right to obtain a summary of your personal data processed by us, request correction or erasure of your data, and seek redressal of grievances through our designated Grievance Officer.
- United States (CCPA/CPRA and State Privacy Laws): You have the right to know what personal information is collected, request deletion, request correction, and opt out of the sale or sharing of personal data for cross-context behavioral advertising.
To exercise any of these rights, contact us at creativeappslab29@gmail.com, or for India-specific requests, our Grievance Officer at grievance@creativeappslab.com.
Security
We employ industry-standard technical and organizational security measures to protect your information, including HTTPS/TLS encryption for all network transmissions, cryptographically hashed session tokens, and sandboxed private storage. On-device camera processing takes place exclusively in RAM without persistence.
Changes to This Policy
We may periodically update this Privacy Policy to reflect changes in our practices or applicable laws. When updates occur, we will revise the "Last updated" date at the top of this page.
Governing Law
This Privacy Policy and any disputes arising under it are governed by the laws applicable toCreative Apps Lab.
Contact Us
If you have questions, concerns, or data rights requests regarding this Privacy Policy, please reach out to us:
Creative Apps Lab
Support Email: creativeappslab29@gmail.com
Grievance Officer (India DPDP Act 2023): Mitesh Viras — grievance@creativeappslab.com