Privacy

The short version: your video never leaves your phone.

What stays on your device

The camera feed is processed entirely on your phone. Frames are never uploaded, and the photo attached to a result is stored locally on your device only.

What we store

• Joint coordinates and the measurements derived from them, per session.
• Your Sign in with Apple identifier, and an email address if you chose to share one.
• Subscription status, so we know what to show you.

What we do not do

• No advertising, no third-party analytics SDKs, no selling data.
• No sharing of your individual measurements with anyone.

Comparing you to other people

To tell you where your range sits against other people, we build anonymous aggregates: one distribution per movement, sex and age band, each from at least 100 people. The floor is enforced when the aggregate is computed, so a group smaller than that is never published rather than merely never shown. Those aggregates carry no account or session identifiers, we may publish them as research, and your own numbers stay yours.

Deleting your account

Settings, then Delete account. Your account, your sessions, every measurement derived from them and your subscription record are removed immediately and for good. There is no restore. An aggregate that already included you stays as it is, because it holds no record of you to remove. Cancelling a subscription is separate, and is handled through your Apple ID settings.

One thing is kept: the record that a payment happened, which we need for tax and accounting. Your account identifier is stripped from it during the deletion, so what remains is a date, an amount and a product, linked to nobody.