privacy.
67 is built to know as little about you as possible. this page lists what the app, the chrome extension and this website handle, and what they don't.last updated september 27, 2026.
- who we are.
67 is made by Justin LI, Taiwan. questions about any of this: kobs666666@gmail.com
- the camera.
67 uses the front camera to count reps of the 6-7 gesture. camera frames are processed on your phone, with apple's vision framework.
frames are not saved and not uploaded. no video, no photos. the only things that come out of the camera view are the rep count and whether the room is too dark, and they stay in the app.
- the apps you block.
67 blocks apps through apple's screen time api. the apps, categories and websites you pick are stored on your phone as tokens issued by apple.
67 can't read the names behind those tokens, and they are not sent anywhere. not to us, not to anyone.
- no account.
there is no account and no login. 67 never asks for your name, email or phone number.
- anonymous usage.
67 sends anonymous events so we can see what works and what doesn't. things like “a challenge was finished”, “the unlock was declined” or “the camera couldn't start”.
each event carries a random id made on your phone, the app version, your ios version, your phone model and your language. it never carries the names of the apps you block, anything from the camera, or an advertising id. we don't record your screen.
events are handled by posthog. your ip address is used to work out roughly where you are, down to the city, and is then discarded. the address itself is never stored.
- the chrome extension.
67 for chrome blocks the websites you pick until you do the 6-7 gesture on camera. like the app, it has no account and no login.
the camera: frames are processed inside chrome, on your computer, by a pose model that ships inside the extension. frames are not saved and not uploaded. the only thing that comes out of the camera view is the rep count.
the sites you block: your list, your settings and your unlock times are stored in chrome on your computer. they are not sent anywhere.
access to websites: the extension asks chrome for access to all sites, so that any site you add can be sent to the challenge page. it checks the address of the page you open against your list, on your computer. it doesn't read what's on the page, and it never records or sends the pages you visit.
anonymous usage: the extension sends anonymous events to posthog, like “a challenge was finished” or “the camera couldn't start”. each event carries a random id made by the extension, the extension version, your chrome version and your language. it never carries a web address, a site name, your browsing history or anything from the camera. where a number of sites is sent, it's how many, never which. your ip address is handled the same way as for the app.
the extension's use of this information follows the chrome web store user data policy, including its limited use requirements. it is not sold, not used for ads, and not used to decide creditworthiness or for lending.
removing the extension deletes everything it stored in chrome.
- feedback.
if you send us feedback from the app, we receive what you wrote, plus the same app and ios version. if you add a way to reach you, we use it only to reply.
the feedback page on this website works the same way. we receive what you wrote, the contact if you added one, the page's language and your two-letter country code. it is sent through posthog. to keep scripts from flooding the form, your ip address is scrambled into a key that is deleted within two hours. the address itself is not stored.
- 67+ purchases.
67+ is bought through apple's in-app purchase. apple handles the payment, and 67 never sees your payment details.
67 uses revenuecat to check whether a subscription is active. revenuecat receives a random app user id, apple's purchase receipt, and standard device information such as phone model, ios version, app version, language and country.
- notifications.
any notification from 67 is created on your phone. 67 has no push server and collects no push token.
- children.
67 is not directed to children under 13, and we don't knowingly collect personal information from them. if you believe a child has sent us personal information, write to kobs666666@gmail.com and we'll delete it.
- deleting your data.
deleting the app, or removing the extension, removes everything 67 stored on your device. to have the anonymous ids held by posthog or revenuecat deleted, write to kobs666666@gmail.com.
- where it's processed.
posthog, revenuecat, vercel and upstash process data on servers outside your country, including in the united states.
- this website.
this website counts visits with posthog. one first-party cookie holds a random id, so that coming back counts as the same visitor and not a new one. it holds no name, no email and nothing about you, and it is never used for ads or shared with other sites.
what gets counted: the pages you open, the site you came from, your country, your device type and browser, and whether you press the download buttons.
visits are also recorded as session replays, so we can see how the site is used and where it breaks: the pages, scrolling, mouse movement and clicks. anything you type, such as your email address, is masked in your browser before it is sent, and the camera on /play is never recorded. replays are kept for 30 days, then deleted.
the country is a two-letter code that our hosting provider, vercel, works out from your ip address. that code is all that is passed on. posthog discards the ip address itself and never stores it.
this website sets no advertising cookies. if you pick a language from the menu, one more cookie remembers that choice.
the android waitlist keeps the email address you enter, with the date, the page's language and your country, in a database run by upstash. it is used for one email, when 67 for android is out, and the list is deleted after that. it is not shared, and it is not sent to posthog. to be removed earlier, write to kobs666666@gmail.com.
the game at /play adds your taps to your country's score. what is kept is the two-letter country code and a number, in a database run by upstash. to stop one machine from flooding the board, your ip address is scrambled into a key that is deleted within a minute. the address itself is not stored.
the game can also count the 67 on camera, if you turn the camera on. frames are processed in your browser, by a pose model served from this website. they are not saved and not uploaded. the only thing that comes out of the camera view is the count. the camera turns off when you switch back to tapping or leave the page.
your own count, the sound switch and whether you have seen the card at 67 taps stay in your browser. a link you share carries your country and your count in its url, and nothing else.
our hosting provider, vercel, processes standard request data such as ip address and browser type, to serve the site and keep it secure.
- changes.
if this page changes, the date at the top changes with it.