Privacy Policy

Last updated: October 8, 2026

1. Data that stays on your phone

The following data is kept only in the app's storage on your phone and is never sent to our servers:

• Photos: Photos you take or pick from your gallery for a measurement.
• Measurement results: Body landmarks, angle calculations, observations and your past measurements.
• Plan settings: Your goal, sensitive or resting areas, reminder time and coach choice.
• Workout records: The movements you do, active days, streaks, badges and your plan's progress.

Device backup: If your phone's backup is turned on (Google backup or iCloud), the operating system may include this data in a backup in your own account. These backups belong to your account; we cannot access them.

2. Data we process

2.1. Identity and account

When you first open the app, Firebase Authentication assigns you an anonymous user ID; no name or email is needed. If you sign in with Google or Apple, your email address, display name and user ID are processed for sign-in, and your anonymous ID is linked to that sign-in.

2.2. Free allowance

To prevent abuse of the free measurement allowance, only the following is stored in Firebase Firestore:

• The number of measurements and the time of your last measurement, linked to your user ID.
• An anonymous device hash (SHA-256) that does not identify you, and the number of measurements on that device.

These records contain no photos, measurement results or workout data.

2.3. Feedback

If you use the in-app feedback form, your message together with the app version and device information (model, OS, screen resolution) is stored in Firestore and forwarded to our support email.

2.4. Subscription

PosMetric Pro is purchased through Google Play Billing (and through the App Store once the iOS version is released). Your subscription status is verified via RevenueCat, which receives your in-app user ID for this purpose. We never see your payment details.

2.5. Usage, crash and service data

• Firebase Analytics: Screen views, session lengths, general device information and anonymous interaction events (e.g. completing a measurement, starting or finishing a workout). No photos, measurement results or information that directly identifies you.
• Advertising ID: Firebase Analytics may use the device advertising ID for usage analytics only. The app shows no ads.
• Firebase Crashlytics: When the app crashes: a crash report, device model, OS, app version and a technical identifier linked to the installation.
• Firebase App Check: An integrity check that verifies the app is running unmodified on a genuine device.
• Firebase Remote Config and Storage: Updating app settings and downloading coach voice packs. An installation identifier and your IP address are processed in the process.

3. Permissions

• Camera: Only to take measurement photos.
• Photos / gallery: So you can pick a photo for a measurement.
• Notifications (optional): For a daily reminder at the time you choose. Reminders are scheduled on your phone.

4. Data sharing

We do not sell, rent or share your personal data for marketing. Data is processed only by the following service providers we use to run the service:

• Google Firebase: Authentication, Firestore, Analytics, Crashlytics, App Check, Remote Config, Storage. policies.google.com/privacy
• RevenueCat: Subscription verification. revenuecat.com/privacy
• Google Play Billing and Apple App Store: Payment processing.
• Legal requirements: Where required by applicable law.

These providers may process data outside Türkiye and the European Economic Area, in particular in the United States.

5. Data security

• On-device data is kept in the operating system's app sandbox.
• All data sent to servers is encrypted with TLS.
• We collect only the minimum data needed.
• Uninstalling the app deletes all app data on your phone.

6. Your rights and data deletion

• Account and data deletion: Use Profile > Delete Account in the app to delete your account and its server records. If you cannot access the app, follow the steps on our account deletion page.
• Anonymous device hash: Because it does not identify you, it may be kept after account deletion to enforce the free allowance.
• Other rights: Under the GDPR and Turkish data protection law (KVKK) you can ask to access, correct or delete your data, object to processing or lodge a complaint. Just write to us.

7. Age requirement

PosMetric is intended for users aged 18 and over. We do not knowingly collect personal data from anyone under 18; if we become aware of such data, we delete it.

8. Changes

This policy may be updated from time to time. The current version is always published on this page.

9. Contact

Controller: FArk Studio · Email: info@physiometric.app