Privacy Policy
Last updated 30 September 2026
The short version
- Your posture readings, sessions, scores and profile stay on your iPhone. We have no server that receives them and no account to sign in to.
- Apple Health data is read and written on the phone only. It is never sent to us, to analytics or to anyone else, and never used for advertising.
- Three services receive limited data: RevenueCat, to manage your subscription, Google Firebase Analytics, to count how the app is used, and Google Firebase Crashlytics, to report crashes. None of them receives health or posture data.
- No ads. No tracking across other companies' apps or websites. We don't sell your data.
Who we are
BodySignals (“the app”, “we”, “us”) is published by Rafael Batyrbaev, an individual developer, who is responsible for your data under this policy. Contact: support@bodysignals.app.
What the app works with, and where it stays
On your iPhone only
| Data | What it is for |
|---|---|
| Head motion from your AirPods | The head angle and movement the headphones' sensors report during a session. The app turns it into your posture readings. |
| Motion and step activity from your iPhone | Tells a walk from sitting still, and starts or ends sessions on its own. |
| Sessions, scores, insights and challenges | Your history, the Body score, the calendar and everything worked out from them. |
| Profile | The name, photo, height and weight you choose to add. A photo you take or pick stays on the phone. |
| Location, only while you record a run | GPS speed and distance for that run, if you use the running feature. It is not used at any other time. |
This data is kept in the app's storage on your device. It is included in your iPhone's own backups (iCloud or computer) according to your backup settings, which Apple, not we, controls.
Apple Health
With your permission, and only if you turn it on, the app:
- reads steps, stand time, sleep, workouts, walking asymmetry and steadiness, height and weight, to find what affects your posture and to fill in your profile;
- writes your walks as walking workouts with their distance and steps, plus walking speed and step length.
Health data is processed on the phone. We don't receive it, we don't send it to analytics or any other third party, and we don't use it for advertising or marketing. You can change or withdraw these permissions at any time in the Health app → Sharing → Apps → BodySignals.
Files you share yourself
If you export a session or send us diagnostics through the share sheet, the file goes wherever you send it. Nothing is sent this way unless you choose to.
What leaves your phone
Subscriptions: RevenueCat
Purchases are made and charged by Apple. To know whether you have Premium, the app uses RevenueCat (RevenueCat, Inc., USA). RevenueCat receives an anonymous app user ID it creates, your App Store purchase and subscription history, and basic device information (such as device model, OS version, country and IP address). It does not receive your name, email, health or posture data. We use this only to provide and restore your subscription and to understand subscription numbers.
Usage analytics: Google Firebase Analytics
To learn which parts of the app are used and where people get stuck, the app uses Firebase Analytics (Google LLC / Google Ireland Ltd.). It receives:
- an app instance ID generated for this installation (not your Apple ID, name or email, and not the advertising identifier);
- events about using the app, such as the app being opened, a screen being shown, onboarding steps, and the paywall being seen or a plan chosen;
- device and app information: model, OS version, app version, language, and approximate location at country or region level derived from the IP address.
It does not receive your posture readings, session values, scores, Apple Health data, profile photo, name, height or weight. Analytics data is kept by Google for up to 14 months and then deleted. We don't use it to show you ads and we don't combine it with data from other companies.
Crash reports: Google Firebase Crashlytics
If the app crashes or hits a serious error, Firebase Crashlytics (Google LLC / Google Ireland Ltd.) receives a report: what went wrong and where in the app's code, the device model, iOS version, free memory and disk space, a Crashlytics installation ID, and the same anonymous app user ID that RevenueCat uses, so a crash during a purchase can be traced to the right subscription. It does not receive your posture readings, session values, scores, Apple Health data, profile photo, name, height or weight. Crash reports are kept by Google for 90 days and then deleted. We use them only to find and fix bugs.
If you write to us, we receive your email address and whatever you include, and use it only to answer you.
What we don't do
- We don't show ads and don't use the advertising identifier (IDFA).
- We don't track you across apps or websites owned by other companies.
- We don't sell or rent personal data, and we don't share it for others' marketing.
- We don't ask you to create an account.
Legal bases (EEA, UK and similar laws)
- Contract: providing the app and your subscription (RevenueCat).
- Consent: Apple Health, motion and location access, which you grant in iOS and can withdraw there at any time.
- Legitimate interests: usage analytics and crash reports to keep the app working and improve it, limited to the non-health data listed above; you can object at any time (see below).
How long data is kept
- Data on your iPhone: until you delete it or delete the app.
- Analytics: up to 14 months.
- Crash reports: 90 days.
- Subscription records: for as long as needed to provide Premium and to meet tax and accounting obligations.
- Emails: as long as needed to deal with your request.
Your choices and rights
- Delete your data: deleting the app removes everything it stored on the phone. Walks already saved to Apple Health stay there until you remove them in the Health app.
- Health, motion, location: turn access off in iOS Settings or the Health app.
- Access, correction, deletion, objection, portability: depending on where you live, you can ask us for any of these for the data held by RevenueCat or Firebase. Email us with the approximate date you installed the app and, for subscription data, the date of a purchase. Because there is no account, we may need your help to find the right records.
- Complain: you can contact your local data protection authority.
International transfers
RevenueCat and Google may process data in the United States and other countries. They rely on safeguards such as the EU Standard Contractual Clauses and the EU–US Data Privacy Framework where applicable.
Children
BodySignals isn't meant for children under 13 (under 16 in the EEA), and we don't knowingly collect their data. If you think a child has used the app and data reached us, write to us and we'll delete it.
Security
Your data stays in the app's sandbox on iOS, protected by your device passcode and iOS data protection. Connections to RevenueCat and Firebase are encrypted.
Not a medical device
BodySignals helps you notice posture habits. It doesn't diagnose, treat or prevent any condition. See the Terms of Use.
Changes
If we change what the app collects, we'll update this page and the date above before the change reaches the app, and point it out in the app when it matters.