RepHero Privacy Policy

1. Overview: A Local-First App

RepHero is an iOS fitness game designed to run entirely on your device. We do not operate accounts, sign-in systems, or user-facing servers. We do not collect your name, email address, phone number, location, contacts, health records, or photos. The app does not upload your camera feed, your workout history, or any personal profile information to us or to any third party.

The only information that leaves your device is (i) the minimum required to process your in-app purchase through Apple and to validate your subscription entitlement through our subscription management provider (RevenueCat), and (ii) a small set of anonymous product-analytics events sent to PostHog during onboarding and on the paywall, as described below.

2. Information We Collect

2.1 Information Stored Only on Your Device

When you complete onboarding and use the app, the following data is created and stored locally on your device using Apple's on-device database (SwiftData). None of this data is transmitted to us:

• A display name (“username”) that you choose during onboarding.
• The character class you select.
• Your stated motivation for using the app, your self-reported starting push-up ability, and the 90-day goal you select during onboarding.
• A per-battle log recording, for each push-up session you complete or attempt: the opponent, duration, reps performed, per-rep timestamps, whether the session was won or lost, and XP earned.
• Your lifetime XP total, rank progression, completed pathway nodes, Endless Horde run totals, and Daily Champion attempt markers.
• The date your profile was created.

All of the above remains on your device. Deleting the app removes this data. We have no ability to access or recover it.

2.2 Camera Usage

RepHero uses the front-facing camera to count push-ups. Camera frames are processed in real time, in memory, entirely on your device using Apple's Vision framework (VNDetectHumanBodyPoseRequest) to estimate body pose and detect push-up repetitions. Camera frames and the pose landmarks derived from them are never recorded, saved, transmitted, or shared with us or any third party. The camera is accessed only while a battle is active. RepHero does not use face detection, face recognition, facial landmarks, face geometry, or any face-related APIs, and does not collect, process, store, or transmit face data of any kind.

Access to the camera requires your permission through the standard iOS camera permission prompt. You can revoke camera access at any time in iOS Settings; if you do, push-up detection will not function.

2.3 Purchase and Subscription Information

When you subscribe to RepHero Plus, we receive information necessary to confirm your entitlement:

• Your subscription tier, status, and renewal state (managed through RevenueCat, our subscription management provider).
• An anonymous user identifier generated by RevenueCat on your device to associate a purchase with your entitlement state across sessions.
• Receipt metadata provided by Apple to validate your subscription (e.g., product identifier, purchase date, expiration date, trial eligibility).

We do not collect or store your payment card details, your Apple ID, or your real name. All payment processing is handled by Apple through the App Store and managed by RevenueCat.

2.4 Anonymous Product Analytics (PostHog)

RepHero uses PostHog, a third-party product-analytics service, to collect a limited set of anonymous events so we can understand how users move through onboarding and the paywall and improve the app. Analytics are scoped to those two flows only — no analytics events are sent from gameplay, battles, Pathway, Endless Horde, Quickplay, Daily Champion, stats, or any other part of the main app.

What is sent:

• A set of manually instrumented event names capturing onboarding progression (for example, which onboarding step was viewed or completed) and paywall interactions (for example, paywall shown, plan selected, purchase attempted, paywall dismissed).
• An anonymous device-level identifier generated by the PostHog SDK on your device. RepHero does not have user accounts, and we do not link this identifier to your name, email, Apple ID, RevenueCat identifier, or any other personal information.
• Standard technical metadata automatically attached by the PostHog SDK to each event, such as app version, device model, and iOS version. IP address may be observed by PostHog at the time of ingestion for connectivity purposes.

What is not sent:

• No session replays, screen recordings, heatmaps, autocaptured taps, or surveys. We only send the specific events we manually instrument.
• No camera frames, pose data, push-up counts, battle history, XP, rank, or gameplay data.
• No name, email, phone number, Apple ID, or payment information.

PostHog processes this data in the United States on our behalf. You can learn more about PostHog's practices at posthog.com/privacy.

2.5 Information We Do Not Collect

We do not collect:

• Your name, email address, phone number, or postal address.
• Location data of any kind (no GPS, no IP-based geolocation, no inferred location).
• Contacts, calendar, photos, or files from your device.
• Health data from Apple Health or HealthKit (RepHero does not integrate with HealthKit).
• Device identifiers for advertising (IDFA), cross-app tracking data, or advertising profiles.
• Crash-reporting or attribution data (RepHero does not integrate any third-party crash-reporting or attribution SDKs). The only analytics we collect are the anonymous onboarding and paywall events described in Section 2.4.

3. How We Use Your Information

Because nearly all of your data remains on your device, most uses of that data happen locally — the app reads from its own local database to render your pathway progress, stats, rank, and battle history.

Information that does leave your device is used only to:

• Process your subscription and manage your access to RepHero Plus features.
• Validate your entitlement across sessions and devices signed in to the same Apple ID.
• Understand, in aggregate and anonymously, how users move through onboarding and the paywall, and use that information to improve those flows (via PostHog, as described in Section 2.4).
• Communicate with you about your account or important updates, if you contact us using the email address above.
• Detect and prevent fraud or abuse of the subscription system.
• Comply with legal obligations.

We do not sell your data, share it for advertising, use it to train AI models, or combine it with data from other sources to build a profile of you.

4. Sharing Your Information

We share information only with:

• Apple — for App Store distribution, in-app purchase processing, and subscription management. Your use of the App Store is governed by Aps privacy policy.
• RevenueCat — to manage subscriptions, validate receipts, and maintain entitlement state. RevenueCat receives the anonymous user identifier and purchase metadata described above.
• PostHog — to receive the anonymous onboarding and paywall events described in Section 2.4. PostHog acts as our data processor and does not receive any personally identifying information.
• Legal authorities — when required by law, to protect our rights, or to prevent fraud or abuse.
• In connection with a business transfer such as a merger, acquisition, or sale of assets, in which case we will notify you before any data is transferred.

We do not share data with advertising networks, data brokers, or AI providers. We do not sell personal information.

5. Data Storage and Security

Your personal profile, battle history, stats, and progression are stored locally on your device using Apple's standard on-device database. Access to this data is protected by iOS's app sandbox.

Subscription and entitlement data associated with your RevenueCat anonymous user identifier is stored on RevenueCat's infrastructure in the United States. Receipt validation is performed against Apple's servers. Anonymous onboarding and paywall events are stored on PostHog's infrastructure in the United States.

We use reasonable technical and oizational safeguards, but no system is completely secure. Please keep your device secure and its operating system up to date.

6. Data Retention and Deletion

Because your workout data, profile, and progression are stored only on your device, you control their retention. You can:

• Reset your progression by deleting the app from your device. This removes all locally stored data.
• Cancel your subscription at any time through iOS Settings → your Apple ID → Subscriptions. Cancellation stops future renewals; prior purchases are non-refundable except as required by law.

To request deletion of any subscription-related data associated with your anonymous RevenueCat identifier, or of the anonymous analytics events associated with your PostHog device identifier, contact us at ian@razelabs.app. We will forward verified deletion requests to RevenueCat and PostHog as applicable. Some records may be retained as required for tax, accounting, fraud prevention, or legal compliance.

7. Your Rights and Choices

Depending on your location, you may have the right to:

• Access the personal data we hold about you.
• Correcaccurate personal data.
• Delete your personal data.
• Object to or restrict certain processing.
• Receive a copy of your data in a portable format.

Because RepHero does not collect personally identifying information on our servers, in most cases the practical way to exercise these rights is to delete the app from your device (which removes all locally stored data) and cancel your subscription. To exercise rights regarding subscription data, contact us at ian@razelabs.app. We may need to verify your request before acting on it.

8. Children's Privacy

RepHero is not directed to children under 13 (or the minimum age required in your jurisdiction, such as 16 in the European Union where applicable). We do not knowingly collect personal information from children. If you believe a child has used the app and created subscription data you would like removed, contact us so we can work with you and RevenueCat to address it.

9. Health, Fitness, and Safety Notice

RepHero is a fitness game, not a medical service. The app does not provide medical advice. The rep counts, stats, and projections displayed in the app are estimates based on on-device computer vision and self-reported inputs; they are not clinical measurements. Consult a qualified health professional before beginning any exercise program. See the RepHero Terms of Service for additional disclaimers regarding fitness, safety, and the accuracy of push-up detection.

10. International Data Transfers

We operate in the United States. Subscription and entitlement data handled by RevenueCat and Apple, and anonymous analytics events handled by PostHog, are processed in the United States and other jurisdictions where those providers operate. If you are located outside the United States, your data may be transferred to the United States for processing. By using RepHero, you consent to this transfer.

11. California Privacy Rights

If you are a California resident under the California Consumer Privacy Act (CCPA), you have the right to know the categories of personal information we collect and how we use it, request deletion of your personal information, and not be discriminated against for exercising your rights. We do not sell personal information and do not share personal information for cross-context behavioral advertising.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you through the app or by updating the “Last updated” date above. Continued use of RepHero after changes take effect means you accept the revised policy.

13. Contact Us

If you have questions or concerns about this Privacy Policy or your data, contact us at:

Raze Labs, LLC
Seattle, Washington, USA
ian@razelabs.app