Privacy Policy
Last updated: 6 August 2026
Overview
TollGate is an app that gates chosen apps and alarms behind a physical toll — push-ups or jumping jacks, verified by your camera. This policy explains, plainly, what data that involves and what doesn't leave your phone.
The short version:
Your camera feed is processed entirely on your device to count reps. We never see it, store it, or upload it.
We use Firebase Analytics and Crashlytics to understand app usage and fix crashes. Both collect standard device and event data, not camera footage.
If you opt into the leaderboard, we store a display name, a country flag emoji, your rep count and level — tied to an anonymous account ID, not your real name or email.
Subscriptions are handled by the Apple App Store or Google Play. We receive confirmation that you're subscribed, not your card details.
You can erase your local data at any time from Settings → Reset all data.
Information we collect
TollGate is built so that the feature at the center of the app — camera-based rep counting — requires no data collection at all. The categories below cover everything else the app does.
Camera and exercise data
When you pay a toll, TollGate opens your device camera and runs pose detection using Google's ML Kit, entirely on your device. This is used to count your reps and check your form — elbow angle for push-ups, arm elevation for jumping jacks.
No camera frame is ever recorded, saved, or transmitted off your device. There is no server that receives your camera feed, no video file written to disk, and no image uploaded to TollGate or to any third party. Each frame is analyzed in memory to produce a pose estimate and then discarded. What we retain afterward is a small set of numbers — rep count, session duration, and whether the toll was completed — described below under Usage Analytics.
Usage analytics
We use Firebase Analytics (a Google service) to understand how the app is used in aggregate — which screens are viewed, which gates are triggered, whether a session completed, and similar app-usage events. Firebase Analytics automatically collects a device identifier (such as an Android Advertising ID or Apple's identifier for advertisers, where permitted) along with general device information: device model, operating system version, language, and approximate region derived from IP address. This data is associated with your device, not with your name or email — TollGate does not require either.
Crash diagnostics
We use Firebase Crashlytics (a Google service) to detect and diagnose app crashes. When TollGate crashes or encounters a serious error, Crashlytics collects a stack trace, the app version, device model, operating system version, and the state of the app immediately before the crash. This helps us fix bugs. Crash reports do not include camera frames or pose data.
Leaderboard data
The leaderboard is optional. If you choose to appear on it, TollGate stores the following in Firestore (a Google Cloud database):
| Field | Purpose |
|---|---|
| Display name | Shown next to your rank. Chosen by you — a real name is never required. |
| Country flag emoji | Shown next to your display name. Self-selected, not derived from your location. |
| Rep count and level | The scores the leaderboard ranks on. |
| Anonymous account ID | A random identifier used to attribute your entry to your device. Not linked to an email address or real name. |
Leaderboard entries are visible to other users of the app. You can remove yourself from the leaderboard, or reset your progress entirely, from within the app.
Subscription and purchase data
TollGate subscriptions are sold and billed by the Apple App Store or Google Play, not by TollGate directly. We never see or store your payment card number, billing address, or Apple or Google account credentials. Apple and Google share with us only what's necessary to unlock paid features on your account — your subscription status, product identifier, and transaction/purchase token. Their own privacy policies govern how they process your payment information.
How we use it
We use the information described above to:
- Run the core feature of the app — counting and verifying reps, entirely on-device.
- Understand how people use TollGate so we can fix what's broken and improve what isn't.
- Diagnose and fix crashes.
- Operate the optional leaderboard.
- Confirm and manage your subscription entitlement.
- Respond to support requests you send us.
We do not sell your data. We do not use your data to serve you third-party advertising within TollGate.
Data retention
Camera frames are never retained — they exist only for the moment it takes to process a single frame during an active toll. Session history (rep counts, XP, streak data) is kept locally on your device and is capped in size, with older entries dropped automatically. Analytics and crash data collected through Firebase are retained by Google according to Firebase's standard retention windows, after which they are deleted or anonymized. Leaderboard data persists until you remove yourself from the leaderboard or reset your account.
Deleting your data
Open TollGate and go to Settings → Reset all data to erase your local session history, streaks, XP, and settings from your device immediately. To remove your leaderboard entry specifically, use the leaderboard opt-out in Settings. If you'd like us to delete data associated with your anonymous account ID from our servers — including leaderboard records — email privacy@tollgate.cc and we'll process the request. Deleting the app from your device removes all locally stored data but does not automatically delete analytics events already recorded by Firebase; contact us if you'd like those removed as well.
Third-party services
TollGate relies on the following services to operate. None of them receive your camera feed.
- Google ML Kit — on-device pose detection. Runs locally; no data leaves your device for this purpose.
- Firebase Analytics (Google) — app-usage analytics, as described above.
- Firebase Crashlytics (Google) — crash diagnostics, as described above.
- Cloud Firestore (Google) — stores optional leaderboard entries.
- Apple App Store / Google Play — process subscription payments and share transaction status with us.
We do not share your information with data brokers or use it for cross-app advertising profiles. We may disclose information if required to by law, or to protect the rights, safety, or property of TollGate or its users.
Children's privacy
TollGate is not directed at children under 13 (or the equivalent minimum age in your country), and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact privacy@tollgate.cc and we will delete it.
Security
Data transmitted to our third-party service providers (Firebase Analytics, Crashlytics, and Firestore) is encrypted in transit. Because the camera feed and pose data never leave your device, they are not exposed to network transmission risk at all. No method of storage or transmission is perfectly secure, but we design TollGate so that the most sensitive data — what your camera sees — is never collected in the first place.
Your rights
Depending on where you live, you may have rights to access, correct, or delete personal information we hold about you, or to object to certain processing. Because TollGate doesn't require an email address, real name, or other directly identifying information to function, most of what we hold is tied to an anonymous account ID and a device — reset that device or contact us at privacy@tollgate.cc to exercise these rights, and we will respond within a reasonable time.
International users
TollGate's third-party service providers (Google Firebase) process data on infrastructure that may be located outside your country of residence. By using TollGate, you understand that your information may be processed in other jurisdictions, which may have data protection laws different from those in your own country.
Changes to this policy
We may update this policy as TollGate changes. If we make a material change, we'll update the "last updated" date above and, where appropriate, notify you in the app. Continued use of TollGate after a change takes effect means you accept the updated policy.
Contact us
Questions about this policy or your data? Email privacy@tollgate.cc.