Your camera video stays on your device. iOS progress is stored locally. App and website accounts store account details and optional profile photos on our servers; website sessions also store completion summaries.
1. What this policy covers
This policy explains how Posturama handles information when you use our iOS app and posturama.app website. The iOS app and website currently store progress differently. This page describes those differences so you can choose how to use them.
2. Your camera and movement
Camera access is optional until you start a camera activity. Live images are processed on your device to display a preview and, where supported, estimate face or body landmarks, face position, head rotation, smile probability and whether eyes are open. We use these signals only to check movement, provide live guidance and advance exercise timers. We do not record or upload your camera video, photos or raw landmark streams to our servers. We do not use the camera to identify who you are.
Camera observations are temporary inputs to movement checks. They are not retained as a face template or profile. Closing a session ends its camera processing. Face observations are processed in temporary device memory during the activity, not saved to disk or attached to your account. We do not share exercise-camera images or derived face observations with third parties, including Google, and do not use them for recognition, advertising or model training. You can revoke camera permission in your device or browser settings. Position checks are approximate wellness features, not clinical assessments.
Your chosen profile photo
If you choose to add a profile photo in the app or website, we resize it to a small thumbnail and save it with your account. It is used in your profile and account menu. You can replace or remove it in Edit profile. An uploaded photo may contain your face. It is used only to display your chosen avatar, not for facial recognition, exercise analysis or model training. Mobile profile photos are stored privately with Vercel Blob; website profile thumbnails are stored in our hosted PostgreSQL database. These hosting providers process the photo to store and deliver it. The active photo is retained until you remove or replace it, or delete your account. In the iOS app, use Your profile → Remove profile photo or Delete account. Removing an uploaded photo does not delete the original from your photo library. This is separate from exercise-camera processing; no exercise-camera images are saved.
3. Information stored in the iOS app
The iOS app supports email-and-password accounts. Account details and your optional profile photo are stored on our servers. Your profile name, completed activity identifiers, session durations and completion dates are stored locally on your device. They are used to show your progress, history and Daily Five. They do not currently sync to a Posturama website account.
The iOS face detector uses Google ML Kit. By default, this SDK sends diagnostic and usage metrics to Google, including device and app information, a per-installation identifier, performance measurements, API configuration, feature events and error codes. This is separate from local camera processing: camera frames and your saved Posturama history are not included in these metrics. Google processes these metrics under its ML Kit terms and privacy practices. This means the iOS app is not a data-not-collected app.
Local information remains until the app’s data is removed. Deleting the app removes local app data from that device; offloading it may retain the data. Device backups may contain app data according to your Apple settings. We cannot retrieve or erase your local app history remotely.
4. App and website accounts
If you create an app or website account, we store your email address, display name, a salted password hash, email verification information and account timestamps. We use this information to authenticate you and operate your account. Your password is not stored in plain text.
When you save a completed website session, we store the activity, difficulty, target and active duration, completion time, tracking-engine version, setup duration and summary tracking metrics, such as frames evaluated and lost-tracking events. These are session summaries, not camera images or raw facial landmarks.
Account information is kept while your account exists. In the iOS app, open Your profile → Delete account and confirm. No support email or phone call is required. Successful deletion removes the account, stored profile photos, server session history, mobile sign-in sessions and password-reset or verification tokens from our active systems. The app also clears that account’s saved progress on the device where you delete it. Local copies on other devices and device backups must be removed separately.
5. Cookies and service providers
The website uses an essential session cookie to keep you signed in, and browser storage for completed-activity information. Signing out removes the session cookie. You can clear site storage in your browser; this does not itself delete a server-side account.
Vercel hosts the website, and a hosted PostgreSQL database stores app and website account information and website session history. Vercel Blob stores uploaded mobile profile photos privately. Resend delivers account-related emails and any email features you choose to use. These services process the information needed for their function. Hosting and delivery services may process technical information such as IP addresses, request details and delivery logs for operation and security.
Browser movement features download model files and software from external delivery services, including Google-hosted models and jsDelivr. Those requests can expose ordinary network information, such as your IP address, to the file host; your camera frames are processed locally. Providers may process information in countries other than where you live.
7. Your choices and requests
You can edit your profile name in the iOS app, revoke camera permission, remove the app’s local data, and clear browser cookies or storage. To delete your account, use Your profile → Delete account in the iOS app. For additional account access or correction requests, contact support and tell us the email address associated with your account. We may need to verify ownership before acting.
Depending on where you live, you may have additional rights to access, correct, delete or obtain a copy of your information, or to object to or restrict certain processing. You may also raise a concern with your local privacy authority. Contact support to make a request; do not include your password.
8. Children and changes to this policy
Posturama is a general wellness service and is not designed to collect personal information from children under 13 through website accounts. If you believe a child has provided personal information to us, contact support so we can investigate and remove it where appropriate.
We may update this policy when the service or its information practices change. The effective date at the top of this page identifies the current version. Material changes will be explained through an appropriate service notice.
9. Contact us
For privacy questions or a request concerning your information, visit our support page. Include enough information to identify your request, but never your password.