RepHero Privacy Policy

1. Overview

RepHero is an iOS fitness game. Your profile, workout history, and progression are stored only on your device. We do not operate accounts, sign-in systems, or user-facing servers, and we do not collect your name, email address, phone number, location, contacts, health records, or photos. The app never uploads your camera feed.

A limited amount of information does leave your device, for three purposes:

• Subscriptions — to process your in-app purchase through Apple and validate your RepHero Plus entitlement through RevenueCat.
• Product analytics — to understand how the app is used (for example, where people drop off during onboarding) through PostHog.
• Advertising measurement — to understand whether our ads on Meta platforms (Facebook and Instagram) led to app installs and subscriptions, through the Meta SDK.

Each of these is described in detail below.

2. Information We Collect

2.1 Information Stored Only on Your Device

When you complete onboarding and use the app, the following data is created and stored locally on your device using Apple's on-device database (SwiftData). None of this data is transmitted to us:

• A display name (“username”) that you choose during onboarding.
• The character class you select.
• Your stated motivation for using the app, your self-reported starting push-up ability, and the 90-day goal you select during onboarding.
• A per-battle log recording, for each push-up session you complete or attempt: the opponent, duration, reps performed, per-rep timestamps, whether the session was won or lost, and XP earned.
• Your lifetime XP total, rank progression, completed pathway nodes, Endless Horde run totals, and Daily Champion attempt markers.
• The date your profile was created.

All of the above remains on your device. Deleting the app removes this data. We have no ability to access or recover it.

2.2 Camera Usage

RepHero uses the front-facing camera to count push-ups. Camera frames are processed in real time, in memory, entirely on your device using Apple's Vision framework (VNDetectHumanBodyPoseRequest) to estimate body pose and detect push-up repetitions. Camera frames and the pose landmarks derived from them are never recorded, saved, transmitted, or shared with us or any third party. The camera is accessed only while a battle is active.

Access to the camera requires your permission through the standard iOS camera permission prompt. You can revoke camera access at any time in iOS Settings; if you do, push-up detection will not function.

2.3 Purchase and Subscription Information

When you subscribe to RepHero Plus, we receive information necessary to confirm your entitlement:

• Your subscription tier, status, and renewal state (managed through RevenueCat, our subscription management provider).
• An anonymous user identifier generated by RevenueCat on your device to associate a purchase with your entitlement state across sessions.
• Receipt metadata provided by Apple to validate your subscription (e.g., product identifier, purchase date, expiration date, trial eligibility).
• Device information RevenueCat uses to prevent fraud and, where you have consented to tracking (see Section 2.5), to attribute your subscription to an advertising campaign: your device model and OS version, your IP address, your device's vendor identifier (IDFV), your advertising identifier (IDFA), your tracking permission status, and the anonymous Meta SDK identifier described in Section 2.5.

We do not collect or store your payment card details, your Apple ID, or your real name. All payment processing is handled by Apple through the App Store and managed by RevenueCat.

2.4 Product Analytics (PostHog)

We use PostHog, a product analytics service, to understand how RepHero is used so we can improve it. PostHog receives:

• App lifecycle events: when the app is installed, updated, opened, and sent to the background.
• Onboarding events: which onboarding screens you view and complete, and the selections you make on them (your chosen character class, stated motivation, self-reported starting push-up ability, and 90-day goal). Your chosen username is not sent.
• Paywall and purchase events: when the paywall is shown, which subscription option you select, and whether a purchase is started, completed, cancelled, or fails, along with the product and price involved.
• A randomly generated identifier created on your device the first time the app runs, used to connect these events to one another. It is not derived from your name, Apple ID, or any device hardware identifier.
• Standard device and app information: device model, iOS version, app version, language and locale, and screen size.
• Your IP address at the time an event is sent, from which PostHog may infer an approximate location (country or region). We do not collect precise location.

We have disabled PostHog's session recording, screen-view autocapture, and interaction autocapture. PostHog does not receive your camera feed, your battle history, or your workout data.

2.5 Advertising Measurement (Meta SDK)

We advertise RepHero on Meta platforms (Facebook and Instagram). To measure whether those ads work, the app includes the Meta SDK, which sends the following to Meta:

• App events: when the app is installed and opened, and when a subscription checkout is started, a free trial is started, or a subscription is purchased (including the product and price).
• Standard device and app information: device model, iOS version, app version, language, time zone, and screen size.
• Your IP address.
• An anonymous identifier generated by the Meta SDK on your device.
• Only if you allow tracking when iOS asks (the “Allow RepHero to track your activity across other companies' apps and websites?” prompt): your device's advertising identifier (IDFA). If you choose “Ask App Not to Track,” the IDFA is not collected, and Meta measures ad performance only through Apple's privacy-preserving SKAdNetwork framework, which reports aggregated results without identifying you.

Meta may combine this information with data it holds about you as a Facebook or Instagram user to attribute your install or purchase to an ad, to report aggregate campaign results to us, and to improve how Meta delivers ads. Meta's use of this data is governed by Meta's own privacy policy. We do not receive information from Meta that identifies you personally.

RevenueCat may also forward subscription events (such as trial conversions, renewals, and cancellations) to Meta on our behalf for the same measurement purposes, using the identifiers described in Section 2.3.

You can change your tracking choice at any time in iOS Settings → Privacy & Security → Tracking.

2.6 Information We Do Not Collect

We do not collect:

• Your name, email address, phone number, or postal address.
• Precise location data (no GPS). Approximate location may be inferred from your IP address by our analytics and advertising providers, as described above.
• Contacts, calendar, photos, or files from your device.
• Health data from Apple Health or HealthKit (RepHero does not integrate with HealthKit).
• Your camera feed, pose data, or workout history.
• Crash reports (RepHero does not integrate a crash-reporting service).

3. How We Use Your Information

Because your profile, progression, and workout data remain on your device, most uses of that data happen locally — the app reads from its own local database to render your pathway progress, stats, rank, and battle history.

Information that does leave your device is used to:

• Process your subscription and manage your access to RepHero Plus features.
• Validate your entitlement across sessions and devices signed in to the same Apple ID.
• Understand how people use RepHero — for example, which onboarding steps are confusing or where people stop — so we can improve the app.
• Measure whether our advertising is working and decide how to spend our advertising budget.
• Communicate with you about your account or important updates, if you contact us using the email address below.
• Detect and prevent fraud or abuse of the subscription system.
• Comply with legal obligations.

We do not sell your data, use it to train AI models, or combine it with data from other sources to build a profile of you.

4. Sharing Your Information

We share information only with:

• Apple — for App Store distribution, in-app purchase processing, and subscription management. Your use of the App Store is governed by Apple's privacy policy.
• RevenueCat — to manage subscriptions, validate receipts, maintain entitlement state, and forward subscription events for advertising measurement. RevenueCat receives the information described in Section 2.3.
• PostHog — to provide product analytics. PostHog receives the information described in Section 2.4.
• Meta Platforms, Inc. — to measure the performance of our advertising. Meta receives the information described in Section 2.5.
• Legal authorities — when required by law, to protect our rights, or to prevent fraud or abuse.
• In connection with a business transfer such as a merger, acquisition, or sale of assets, in which case we will notify you before any data is transferred.

We do not share data with data brokers or AI providers.

5. Data Storage and Security

Your personal profile, battle history, stats, and progression are stored locally on your device using Apple's standard on-device database. Access to this data is protected by iOS's app sandbox.

Subscription and entitlement data associated with your RevenueCat anonymous user identifier is stored on RevenueCat's infrastructure in the United States. Receipt validation is performed against Apple's servers. Analytics data is stored on PostHog's infrastructure in the United States. Advertising measurement data is stored by Meta in accordance with Meta's privacy policy.

We use reasonable technical and organizational safeguards, but no system is completely secure. Please keep your device secure and its operating system up to date.

6. Data Retention and Deletion

Because your workout data, profile, and progression are stored only on your device, you control their retention. You can:

• Reset your progression by deleting the app from your device. This removes all locally stored data, including the analytics identifier described in Section 2.4, so any future use of the app will not be connected to your past use.
• Cancel your subscription at any time through iOS Settings → your Apple ID → Subscriptions. Cancellation stops future renewals; prior purchases are non-refundable except as required by law.
• Withdraw your tracking permission at any time in iOS Settings → Privacy & Security → Tracking. This stops future collection of your advertising identifier.

To request deletion of subscription data associated with your anonymous RevenueCat identifier, or analytics data associated with your PostHog identifier, contact us at ian@razelabs.app. We will forward verified deletion requests to the relevant provider. Some records may be retained as required for tax, accounting, fraud prevention, or legal compliance. Data already shared with Meta is subject to Meta's retention practices and can be managed through your Facebook or Instagram account settings.

7. Your Rights and Choices

Depending on your location, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate personal data.
• Delete your personal data.
• Object to or restrict certain processing.
• Receive a copy of your data in a portable format.

Because RepHero does not collect personally identifying information on our servers, in most cases the practical way to exercise these rights is to delete the app from your device (which removes all locally stored data and your analytics identifier), decline or withdraw tracking permission, and cancel your subscription. To exercise rights regarding subscription or analytics data, contact us at ian@razelabs.app. We may need to verify your request before acting on it.

8. Children's Privacy

RepHero is not directed to children under 13 (or the minimum age required in your jurisdiction, such as 16 in the European Union where applicable). We do not knowingly collect personal information from children. If you believe a child has used the app and created data you would like removed, contact us so we can work with you and our providers to address it.

9. Health, Fitness, and Safety Notice

RepHero is a fitness game, not a medical service. The app does not provide medical advice. The rep counts, stats, and projections displayed in the app are estimates based on on-device computer vision and self-reported inputs; they are not clinical measurements. Consult a qualified health professional before beginning any exercise program. See the RepHero Terms of Service for additional disclaimers regarding fitness, safety, and the accuracy of push-up detection.

10. International Data Transfers

We operate in the United States. Data handled by Apple, RevenueCat, PostHog, and Meta is processed in the United States and other jurisdictions where those providers operate. If you are located outside the United States, your data may be transferred to the United States for processing. By using RepHero, you consent to this transfer.

11. California Privacy Rights

If you are a California resident under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), you have the right to know the categories of personal information we collect and how we use it, to request deletion of your personal information, to opt out of the sale or sharing of your personal information, and not to be discriminated against for exercising your rights.

We do not sell personal information. Sending your advertising identifier and app events to Meta for advertising measurement may be considered “sharing” for cross-context behavioral advertising under the CPRA. You can opt out of this sharing at any time by choosing “Ask App Not to Track” when iOS prompts you, or by turning off tracking for RepHero in iOS Settings → Privacy & Security → Tracking. You may also contact us at ian@razelabs.app to exercise any of these rights.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you through the app or by updating the “Last updated” date above. Continued use of RepHero after changes take effect means you accept the revised policy.

13. Contact Us

If you have questions or concerns about this Privacy Policy or your data, contact us at:

Raze Labs, LLC
Seattle, Washington, USA
ian@razelabs.app