Privacy Policy

1. Who we are and what this policy covers

This Privacy Policy explains how Matt, the operator of pose: Pilates & Home Workout (“pose”, “we”, “us” or “our”), handles personal information in the app, on this legal website and when you contact us. Matt is the controller for processing we determine. Contact us at matt1232026@gmail.com with “pose privacy” in the subject.

pose works without a pose account. Much of your practice information stays on your device. This does not mean that every interaction is anonymous: subscription services use a persistent app identifier, internet requests expose network information, and support emails identify the sender. This policy distinguishes those activities.

For information specifically about movement, body measurements and other consumer health data, also read our separate Consumer Health Data Privacy Policy. The User Agreement describes use of the Service and purchases.

2. Practice information stored on your device

The app stores your selected goal, experience level, focus areas, practice location choice, equipment, session length, practice days and start date, movement-comfort choices, consistency barrier, challenge choice and optional display name. Optional height and weight entries, when provided, are also stored locally. A practice-location choice such as “At home” is a preference, not a geographic location measurement.

Local records also include saved workouts, completed-session dates and durations, an unfinished-session position, reminder settings, voice/music/caption/haptic settings, an optional drawn keepsake signature, and the version and date of your agreement acceptance. We use them on your device to arrange the interface, suggest a schedule, resume a session and show progress.

We do not send these local practice preferences, measurements, history or signature to RevenueCat or to a pose training-data server. We do not provide an account-based cloud library of your practice records. Your device's backup or device-transfer facilities may include app data according to your settings; those facilities are controlled by Apple and your choices. Anyone with access to an unlocked device or its backup may be able to access local information.

3. Membership and purchase information

Apple processes App Store payments. RevenueCat supplies purchase verification, membership status and subscription reporting for pose. After you accept the first-run documents, the app may communicate with RevenueCat to retrieve available offers and check access, even if you have not bought a membership.

This processing can involve a persistent, randomly generated app user identifier; purchased product and transaction identifiers; receipt or transaction verification data; purchase, renewal and expiration dates; trial, refund and subscription status; price or currency information associated with transactions; and technical request information such as app/bundle version, operating system, locale, storefront and IP address. The identifier is pseudonymous and is not the same as an account name. It can persist across sessions and can be associated with purchase records.

We do not supply your local display name, email, workout records or measurements as RevenueCat customer attributes. Automatic device-identifier collection and SDK diagnostics are disabled in our configuration. We do not access your full card number or banking credentials. Apple may hold billing details independently under its own privacy notice. RevenueCat's processing is described in its Privacy Policy.

4. Website visits and support correspondence

These public legal pages are hosted by GitHub Pages. Loading them, including from inside the app before you accept the agreement, sends the host the information needed to deliver a webpage, such as your IP address, requested path, time of request and browser or network metadata. GitHub may process operational logs for delivery, security and abuse prevention under its privacy statement. The website source code is public; your app records and support messages are not published in that source code.

If you email us, we receive your email address, message, attachments and other details you choose to send. Our contact mailbox is provided through Gmail, so Google processes correspondence as the mail-service provider. We use messages to respond, troubleshoot, fulfill rights requests and keep necessary records of a resolved concern. We do not automatically obtain your local practice records when you contact us.

Send only what is needed. Please avoid medical records, passwords, full payment-card details or sensitive information unrelated to your request. A redacted purchase reference may be sufficient for a billing issue. We will not use support correspondence to build advertising audiences or train a user-profiling AI model.

5. Why information is used

• App functionality: use local choices to arrange your plan and interface, save progress and enable the features you request.
• Membership: validate purchases, restore eligible access, identify subscription status and understand aggregated subscription performance through RevenueCat.
• Support and rights: respond to questions, identify relevant records and act on lawful requests.
• Security and compliance: prevent fraud or misuse, maintain reliable delivery, preserve necessary evidence and meet legal obligations.
• Optional reminders and sharing: act on your choices using the device's notification and sharing facilities.

We do not use local measurements or workout history to make credit, employment, insurance or other decisions with legal or similarly significant effects. A suggested practice plan is not a medical assessment and is not sold to an advertiser.

6. Legal bases where required

Where European or UK data-protection law requires a legal basis, we rely on performance of a contract or steps you request before a contract for service functionality, purchase administration and related support; legal obligations for required compliance records; and legitimate interests for proportionate security, fraud prevention, necessary service correspondence and limited operational subscription reporting. We consider the impact on individuals and do not rely on a legitimate interest when your rights outweigh it.

Where processing requires consent, we will request it for the specific purpose and you can withdraw it prospectively. Accepting a privacy notice is an acknowledgment of information, not unrestricted consent to new uses. iOS permission controls support your choices but do not replace any additional consent required by law.

Optional body or comfort entries remain on the device in the current app. We do not rely on general agreement acceptance or an advertising purpose to transmit health information to a cloud service. If a future feature requires us to collect or share special-category health data outside your device, we will provide the required notice and establish an appropriate legal basis and condition, including separate explicit consent where required, before that processing starts.

7. Providers and other recipients

We disclose information only for the described purposes and as permitted by law. Relevant recipients are:

• RevenueCat: the subscription-related information described above, to operate purchase verification, access and reporting.
• Apple: App Store purchases, system notification functions and any device backup you enable. Apple determines its own processing for its platform and billing services.
• GitHub: webpage-delivery and security information when you visit these pages.
• Google/Gmail: correspondence sent to our support mailbox.
• Recipients you choose: a sharing app or person when you send a card through the system share sheet.

Service providers may use approved infrastructure providers to deliver their services. Where they act on our behalf, applicable contractual and legal restrictions govern their processing. Some providers also act independently for their own platform security, legal or billing functions.

We may disclose necessary information to a competent authority when lawfully required, to professional advisers for a specific legal matter, or to protect rights in a proportionate way. If the Service is transferred, personal information may be transferred only subject to applicable law, notice requirements and continued protection; a transfer does not authorize an unrelated use of your health data.

8. No advertising sale or cross-app tracking

We do not sell personal information, share it for cross-context behavioral advertising, use local health or workout data for targeted advertising, or obtain your advertising identifier. The current app does not include a third-party advertising or general-purpose behavior-analytics SDK. Subscription reporting through RevenueCat is distinct from advertising tracking.

We do not collect GPS coordinates, contacts, camera images, microphone recordings or HealthKit records. Voice guidance plays existing audio; it does not record your voice. A drawn signature is kept as a graphic and is not used for biometric identification.

These legal webpages do not set our own cookies, store tracking identifiers in your browser, load external font services or run analytics scripts. The hosting provider may still process necessary network and security information. Because we do not conduct advertising sale or sharing, there is no advertising sale to opt out of. We honor applicable recognized opt-out signals, including Global Privacy Control, as a request not to start such processing.

9. Reminders and user-directed sharing

Training reminders are scheduled locally through iOS after you choose to enable them and grant permission. We do not operate a remote push-notification server for these reminders. You can change reminder settings in pose or turn notifications off in iOS Settings. We do not receive a log of whether you read a local reminder.

Choosing to share a keepsake or progress card opens the system share sheet. Content leaves your device only when you choose a sharing action or destination. We do not automatically post it to a social network. Once sent, a recipient's handling is subject to that recipient's practices; deleting the local card does not remove copies already shared.

10. Retention and deletion

Local practice information is retained on your device until you clear it, remove the app or otherwise remove the relevant app storage. Operating-system backups or previously shared copies may remain until you remove them through the corresponding service. We cannot remotely read or erase local records on your device.

Subscription records are kept for as long as needed to provide or restore access, reconcile billing, prevent fraud, meet a specific legal obligation or resolve a dispute. The exact period depends on the record, purchase status and applicable law. We do not retain identifiable records indefinitely merely because they might be useful. When a valid deletion request applies, we delete, de-identify or instruct our processor to delete relevant information, subject to lawful exceptions and necessary backup schedules.

We retain support correspondence for the time needed to answer and resolve the request and any proportionate follow-up, legal or security need. When those purposes end, we delete or de-identify it. If we must retain a particular record instead of deleting it, we will explain the applicable reason when responding to a rights request, unless prohibited by law.

Clearing local practice data does not cancel an Apple subscription or erase Apple's independent billing records. Cancel subscriptions separately through Apple. A request to delete subscription records may affect our ability to recognize or restore access; we will explain material consequences before taking an irreversible action where appropriate.

11. Your in-app controls

In Profile → Preferences, you can change audio, captions and haptic settings, adjust your plan, or select Delete local practice data. The deletion action clears the app's locally stored preferences, saved practices, history, unfinished session, keepsake signature and acceptance record and cancels locally scheduled reminders. It does not delete data already sent in an email or shared to another service.

Review notification permissions and device-backup settings in iOS. For an Apple-billed subscription, use Settings → your name → Subscriptions. If you want help with information held by us or RevenueCat for pose, contact our privacy email. You do not need to create an account to make a request.

12. EEA, United Kingdom and Swiss rights

Subject to the conditions and exceptions in the law that applies to you, you may request access to your personal information and a copy of it; correction; deletion; restriction; portability of information processed by automated means on the basis of contract or consent; and objection to processing based on legitimate interests. You may withdraw consent without affecting the lawfulness of earlier processing. We do not use your information for direct marketing in the current Service.

Email us to exercise a right. We normally respond within one month for requests governed by the GDPR or UK GDPR. If the law permits an extension for complexity or number of requests, we will explain it within that first month; the extension may be up to two additional months. Swiss requests are handled within the applicable legal time limits. Requests are ordinarily free, with limited legally permitted exceptions for manifestly unfounded or excessive requests.

You may complain to your competent data-protection authority, including the authority in your place of residence, work or the alleged infringement. UK residents may contact the Information Commissioner's Office; Swiss residents may contact the Federal Data Protection and Information Commissioner. You do not have to contact us first to use that right.

13. United States privacy rights

Depending on your state, the applicable law and whether its coverage thresholds are met, you may have rights to know and access the categories and specific pieces of information collected, obtain a portable copy, correct inaccuracies, delete information, and opt out of its sale, advertising sharing or certain profiling. You may also have rights concerning sensitive information, authorized agents, appeals and non-discrimination. We will honor applicable rights and will not penalize you for making a lawful request.

For California, our information categories, sources, purposes and recipient categories are described above. Sensitive body or movement entries are used locally for the features you choose, not advertising or unrelated inferences. We do not sell or share personal information for behavioral advertising, including information about minors. We do not offer a financial incentive in exchange for personal information.

For a California request governed by the CCPA, we generally respond within 45 days. If a permitted extension is needed, we will notify you and explain it, up to an additional 45 days where allowed. Other states' deadlines and exceptions apply to requests under their laws. An authorized agent can contact us with evidence of authority; we may need proportionate verification directly with you where legally permitted.

If we deny a request and your applicable law provides an appeal, reply with “pose privacy appeal”. We will review it and provide a reasoned response within the applicable deadline, ordinarily within 45 days unless the law specifies otherwise. You may also contact your state attorney general or other competent regulator. Consumer health-data rights are explained in the separate health-data policy.

14. Making and verifying a request

Email matt1232026@gmail.com and describe the right you wish to exercise. Tell us which interaction is relevant: an email, a purchase or locally stored app information. We may ask for limited information necessary to locate records and verify that the requester is entitled to them, such as a redacted transaction reference or an app identifier if available. We will assist you in finding a suitable reference if needed.

We will not ask for an Apple password, full payment-card number or unnecessary medical information. We use verification details only to fulfill and document the request or prevent fraud. If we cannot identify a relevant server record, we will explain that limitation and help you use the local controls. We do not collect new sensitive information solely to create a record we do not already hold.

15. Security and international processing

We limit the information sent off-device and use HTTPS for supported service communications. Platform access controls and provider security measures help protect information. No device, transmission method or service can be guaranteed completely secure. Protect your device with a passcode, keep software updated and avoid sharing sensitive material unnecessarily. We will handle reportable incidents and notices in accordance with applicable law.

Apple, RevenueCat, GitHub and Google operate infrastructure in multiple countries, including the United States. Subscription, web-delivery or email information may be processed outside your place of residence, where legal protections may differ. Where transfer safeguards are legally required for processing on our behalf, applicable provider agreements and lawful transfer mechanisms govern those transfers. RevenueCat's Data Processing Addendum provides standard contractual clauses and the UK transfer addendum for covered transfers. This statement is not a claim that every country has equivalent protection.

Contact us to ask about safeguards applicable to your information or to request an available copy, with necessary security or commercial information redacted. A provider's independent processing is also governed by its own notice and obligations.

16. Children and changes to this policy

pose is intended for people aged 18 or older. We do not knowingly solicit personal information from children. If you believe a child has sent us information, contact us so we can investigate and remove it where required. The app does not perform an age-verification check, and this statement should not be read as a claim that we verify every user's age.

We may update this policy when functionality, providers or legal requirements change. We will show the updated date and give appropriate notice of material changes, including through the app where required. If a new use requires consent, we will obtain it before that use begins. An update does not retroactively authorize an incompatible use of previously collected information.

Privacy contact: Matt · matt1232026@gmail.com
You can read these pages without signing in or buying a membership.