POSER privacy policy

Published 18 October 2026. This notice covers POSER (also labelled Gradual Pose in the app), bundle identifier eu.gradualcoaching.posing, and its isolated service at pozzer-green.pages.dev.

Operator and contact

The known operator is Novus Agency. Contact hello@novusagency.co for privacy questions, access or deletion requests, or service issues. Novus Agency is the supplied operator name; its full legal identity, registered address, jurisdiction and role as data controller have not yet been confirmed for this release. No company registration, representative or data protection officer is asserted here.

What stays on your device

Camera frames are processed on your device for pose guidance using bundled MediaPipe model files. The inspected capture path requests video, with microphone audio disabled. Pose landmarks and pose-check results are processed locally, not sent to a remote AI review service. Saved photos, silent video clips, thumbnails, capture dates, pose/session information and local check results are kept in the app's local database. Preferences and onboarding state are stored locally. Native sign-in session credentials use the platform secure-storage plugin; the development browser uses local storage.

Without sign-in, media remain local. Signing in does not automatically assign previously anonymous or legacy captures to your account: the app offers an explicit import control. Captures made in a signed-in account can be queued for cloud backup; uploads require a server-verified subscription. Local storage can be lost if app data are cleared, the app is removed, or the operating system evicts storage. Export important files separately.

Account, backup and subscription data

If configured and used, sign-in sends the identity provider's token, one-time challenge and authorization code to the service for verification. Account records include a random user identifier, provider and provider identifier, verified email if supplied, language, creation time, subscription entitlement cache and an Apple refresh credential needed for revocation. The database also has an AI-consent flag and review storage, but these do not mean a remote AI service is available.

Optional cloud backup stores your photos or clips and their metadata: capture date/time, pose, pose set, session identifier, media type, size and device platform. Cloudflare hosts the API and private R2 media storage; D1 holds account and media metadata. Media access requires an authorized session or a short-lived signed link. Anyone with a valid signed link may use it while it remains valid; do not share those links. Links expire within two hours and are checked against the session; already downloaded or cached copies cannot be recalled.

Apple handles iOS sign-in and App Store payments. RevenueCat handles subscription SDK requests and entitlement verification, using an app-user identifier that is linked to the account after sign-in; it may use an anonymous SDK identifier before sign-in. Store transactions, product/entitlement status and technical SDK/device information are processed through these services. The app does not collect payment-card details. Google sign-in and Play Billing code exists for Android, but this iOS notice does not assert a released Android service.

Service requests, security and support

When you visit this site or use the API, Cloudflare necessarily receives connection and request information, including your IP address. API rate-limit records can contain an IP address for authentication attempts or a user identifier for uploads/revocation attempts, along with counters and reset times. API failures are logged by the worker; exact provider log settings and retention have not been established. Contacting support sends the information you choose to include by email. Do not email passwords, sign-in tokens or private photos unless a safe, necessary support process has been agreed.

The inspected application source includes no advertising network, cross-app tracking integration or separate marketing analytics SDK. This is not a claim that infrastructure or subscription providers collect no operational data. Data are used to provide local guidance, account access, optional private backup, subscription access, abuse prevention, deletion/revocation and support. The operator has not yet confirmed the applicable legal bases for each purpose; this notice does not infer blanket consent from app use.

Retention and deletion

Local captures remain until you delete them or clear app storage. Signing out hides account-scoped local records; it does not erase them. Gallery and Settings include media deletion controls. Where a cloud deletion is queued while offline or signed out, reconnect and sign in to complete synchronization; a local disappearance is not proof of server deletion.

Cloud account and media records have no automatic age-based deletion in the inspected code. They remain until an applicable deletion action completes. Subscription expiry blocks new uploads but is not an automatic deletion instruction. Successful account deletion removes the account's cloud media objects, metadata, sessions and stored reviews, and clears that account's local media in the app making the request; unrelated anonymous captures, exports and copies on other devices are not erased by that action. Account deletion requires a network connection and can fail; check its result or contact support.

Apple credential revocation can finish separately from content deletion. If Apple cannot be reached, a minimal private revocation outbox retains the refresh credential until a successful retry; no automatic retry schedule or maximum pending lifetime is established. Sessions have an authorization lifetime of 180 days unless ended earlier, but expiry is not proof that expired database rows are physically erased. Authentication challenges expire after five minutes and expired challenges are cleaned when another challenge is issued. Rate-limit reset times reset enforcement counters, not necessarily stored records.

No fixed backup, infrastructure-log, rate-limit-row, support-mail or provider-record retention period is confirmed for this release. Cloud deletion does not promise immediate removal from provider recovery copies, device caches or Apple/RevenueCat records. Contact the operator for retention details and help with provider-held records. Deleting the account does not cancel an App Store subscription; manage or cancel it in your Apple subscription settings.

Recipients, locations and your choices

The services involved are Cloudflare (hosting/database/storage), Apple (iOS identity and payments) and RevenueCat (subscriptions). The green database was provisioned with an Eastern Europe location hint and the media bucket reported Western Europe. Those resource locations are not a guarantee of EU-only processing: network delivery, support, logs and provider processing can involve other countries. Applicable processing agreements, international-transfer mechanisms and provider subprocessor details still require operator confirmation.

Use local-only mode if you do not want optional cloud copies. You can decline camera access, but capture will not function. Contact hello@novusagency.co to request access, correction, deletion, a copy of information or to raise an objection or restriction request. Rights depend on applicable law; identity verification may be needed. Where data-protection law gives you a complaint right, you can contact the relevant supervisory authority. The operator's jurisdiction and competent authority remain unconfirmed. The intended age audience and handling of minors also require confirmation; this notice does not invent an age threshold.

Before general release

The operator must confirm its legal identity and address, applicable jurisdictions and legal bases, intended age audience, provider contracts and transfer safeguards, retention and recovery-copy handling, support/deletion operations and any legally required additional disclosures. Those are unresolved facts, not assurances of compliance. If processing or features change, this notice must be reviewed and updated before the changed processing is offered.