Privacy Policy
1. Who we are
StrikeThePose is developed and operated by Luke Czak ("we", "us", "our"). We are the data controller for the personal data processed through the StrikeThePose mobile application and website.
Contact: luke.czak@gmail.com
2. What data we process
We process the following categories of data:
- Camera frames: Live camera frames are processed entirely on your device for real-time pose coaching. No video or image data is transmitted to our servers.
- Saved photos: When you choose to save a capture to your photo library, that action occurs locally on your device. We do not access your photo library except through the iOS permissions you explicitly grant.
- Usage analytics: We collect anonymised product-usage events (e.g., feature usage, session duration, coaching-pack selection) via PostHog. Analytics are aggregated and do not identify you personally. You may opt out of analytics at any time in the app Settings.
- Crash and performance data: We collect anonymised crash reports and technical diagnostics to improve app stability. This data does not contain photos, camera frames, or personal identifiers.
- Purchase history: Subscription and in-app purchase entitlements are managed by Apple. We do not process or store your payment card details.
3. Legal basis for processing
Under the UK GDPR and EU GDPR, our legal bases are:
- Performance of a contract: providing the coaching and capture services you subscribe to.
- Legitimate interests: app stability, security, and product improvement.
- Consent: analytics and optional features (e.g., personalised coaching). You can withdraw consent at any time in Settings.
4. Data retention
- Camera frames: Ephemeral — processed in real time and never stored.
- Saved photos: Stored only on your device and in your personal photo library.
- Analytics data: Retained for up to 26 months, after which it is automatically deleted or fully anonymised.
- Crash reports: Retained for up to 12 months.
5. Your rights
Depending on your jurisdiction, you have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate data.
- Request erasure of your data ("right to be forgotten").
- Restrict or object to processing.
- Data portability — receive your data in a structured, machine-readable format.
- Withdraw consent at any time (where processing is based on consent).
- Lodge a complaint with your local supervisory authority.
California residents (CCPA/CPRA): You have the right to know what personal information we collect, request deletion of your personal information, and opt out of the sale or sharing of personal information. We do not sell personal information.
To exercise any of these rights, email us at luke.czak@gmail.com. We will respond within 30 days.
6. Data security
We implement appropriate technical and organisational measures to protect your data, including encryption in transit (TLS 1.2+), access controls, and regular security reviews. Because all image processing happens on-device, your photos and camera frames are never exposed to network transmission risks.
7. Children's privacy
StrikeThePose is not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe we have inadvertently collected such data, please contact us immediately and we will delete it.
8. International transfers
Analytics data may be processed by PostHog, which operates infrastructure in the United States and the European Union. We rely on Standard Contractual Clauses (SCCs) and adequacy decisions to ensure lawful international data transfers in compliance with UK GDPR and EU GDPR.
9. Changes to this policy
We may update this Privacy Policy from time to time. We will notify you of material changes via an in-app notice or by updating the effective date above. Continued use of StrikeThePose after changes constitutes acceptance of the updated policy.
10. Contact us
For privacy-related questions, data-requests, or complaints, contact:
Luke Czak
Email: luke.czak@gmail.com