Privacy Policy

1. Architecture: No Account Required & Local Storage

No Account or Registration Required: Unlike traditional fitness applications, RepSnack does not require you to create an account, log in, or provide an email address, phone number, or password. You can use all core features anonymously and immediately upon installation.

Local & Private iCloud Data: All workout logs, rep milestones, schedule windows, and streak statistics are stored locally on your device in a sandboxed SwiftData database. If you have Apple iCloud enabled, your data syncs securely between your iPhone and Apple Watch via Apple's end-to-end encrypted private CloudKit container. RepSnack employees and servers do not possess decryption keys, database access, or technical means to inspect your personal data.

2. On-Device Sensor Data & Privacy Details

The table below outlines every hardware sensor, framework, and data point accessed by RepSnack, along with its purpose and storage lifecycle:

A. Apple HealthKit Data

With your explicit permission via the iOS system prompt, RepSnack interacts with Apple Health via the official HealthKit framework:

• Write-Only Permission: RepSnack requests write-only authorization for HKCategoryTypeIdentifierMindfulSession (Mindful Minutes). When you complete an hourly exercise snack, RepSnack writes a short mindful session to help you close your Apple Fitness rings.
• Zero Health Reading: RepSnack requests no read permissions for your Apple Health data. We do not read, query, inspect, or process your heart rate, step count, sleep history, medical records, or other workouts.
• Strict Ban on Commercialization: RepSnack will never disclose, sell, license, rent, or provide data obtained through HealthKit to advertising platforms, data brokers, information resellers, or marketing networks.
• Secure Device Storage: Health data written by RepSnack resides exclusively within your encrypted Apple Health database governed by Apple’s iOS hardware security enclave.

B. Camera & Apple Vision Framework (Squat Calibration)

RepSnack features an optional, one-time squat depth calibration during onboarding:

• Local Skeletal Analysis: Live video frames from your front-facing camera are processed in volatile memory using Apple's Vision framework (VNDetectHumanBodyPoseRequest) to calculate hip, knee, and ankle angles (verifying 90° parallel depth).
• Zero Recording & Zero Storage: Video sample buffers are analyzed in RAM and immediately discarded. RepSnack never records, saves, screenshots, encodes, stores, or uploads any photographs, video streams, or facial geometry.
• Completely Optional & Skippable: The calibration screen can be bypassed with a single tap. If skipped, RepSnack relies entirely on AirPods and Apple Watch motion sensors.

C. CoreMotion Sensor Fusion (AirPods & Apple Watch)

RepSnack utilizes Apple's CoreMotion framework (including CMHeadphoneMotionManager and CMMotionManager) to track your movement snacks:

• Transient Waveform Processing: Accelerometer and rotational rate streams are evaluated in memory by our on-device kinematics engine to count repetitions and provide audio cadence whispers.
• Zero Raw Data Logging: Raw sensor streams are never written to device storage or sent over any network. Only the aggregate count of verified repetitions is saved to your local daily total.

D. Calendar & EventKit Data

To prevent interruptions during meetings, RepSnack requests read access to local calendar schedules via EventKit:

• Meeting Slot Detection Only: The app inspects event start and end times to identify when you are in a scheduled meeting (events with multiple attendees or video conference links), automatically pausing snack prompts.
• Zero Information Harvesting: RepSnack never reads, stores, logs, or transmits meeting titles, calendar names, participant identities, attendee emails, meeting descriptions, or conference URLs.

E. RevenueCat & In-App Purchases

RepSnack utilizes RevenueCat to handle in-app purchase validation:

• All payments are processed directly by Apple through your Apple ID and iTunes account.
• RevenueCat receives an anonymous App Store receipt token to verify your subscription or lifetime entitlement status. RepSnack does not collect, process, or store your credit card numbers, billing addresses, or banking details.

3. Third-Party Analytics, Trackers, and Advertising

Zero Third-Party Advertising SDKs: RepSnack contains no advertising SDKs (such as Google AdMob or Meta Audience Network) and no tracking frameworks.

No Cross-App Tracking: RepSnack does not request Apple’s App Tracking Transparency (ATT) permission because we do not track you across apps or websites owned by other companies, and we do not share user identities with data brokers.

4. Data Retention & User Data Deletion

Because RepSnack does not require user accounts or maintain an external customer database, you have complete, direct control over your data retention and deletion. You can purge your data at any time through the following mechanisms:

• 1. In-App Data Reset: Open RepSnack, navigate to Settings, and tap Reset All Data. This immediately purges all locally stored session histories, streak counts, and custom preferences from your device.
• 2. Deleting the Application: Deleting the RepSnack application from your iPhone or Apple Watch immediately removes the sandboxed local application container and all associated SwiftData records.
• 3. Purging Synced iCloud Data: If you use iCloud sync, you can delete your private CloudKit records at any time directly through iOS:
  Settings > [Your Name] > iCloud > Saved to iCloud / Manage Storage > RepSnack > Delete Data.
• 4. Customer Deletion Assistance: If you have questions or wish to verify complete data erasure, you can email our support team at [email protected] with the subject line "Data Deletion Request".

5. Security & Cryptography

RepSnack adheres to industry-leading iOS security practices:

• All local database storage leverages Apple's hardware-backed Data Protection (Class A encryption), ensuring files are encrypted whenever your device is locked with a passcode or Face ID.
• All communications with Apple StoreKit and RevenueCat occur over strict HTTPS/TLS 1.3 encrypted connections.

6. Children’s Privacy

RepSnack is designed for desk workers, professionals, and adults seeking healthy movement habits. RepSnack is not directed toward children under 13 years of age, and we do not knowingly collect personal information from children.

7. International Privacy Rights (GDPR & CCPA/CPRA)

Regardless of your geographic location, RepSnack provides equal privacy protections:

• Right to Access & Portability: Your workout and movement logs reside entirely on your device and can be viewed at any time in the RepSnack Insights tab.
• Right to Erasure: You can delete all personal records instantly using the methods described in Section 4.
• No "Sale" of Personal Information: We do not sell, rent, or monetize your personal or behavioral data under the California Consumer Privacy Act (CCPA) or European General Data Protection Regulation (GDPR).

8. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect product enhancements, new iOS features, or legal updates. When changes are made, the "Last Updated" date at the top of this document will be updated.

9. Contact Us

If you have any questions, feedback, or concerns regarding your privacy or data protection while using RepSnack, please reach out directly: