Privacy Policy

Effective 22 September 2026

The short version: the camera never leaves your phone, an account is optional, and there are no third-party analytics or trackers in this app.

1. Who we are

repRaise is the fitness app described on this site, published by its developer, registered in Israel, who is the controller of the data described here. For anything in this policy, write to pna.apps@gmail.com.

2. The camera

repRaise uses your camera to count repetitions. Frames are analysed on the device by an on-device pose model, in memory, and discarded as soon as the next frame arrives.

No photo or video is ever saved by the app.
No photo, video or image data is ever transmitted — not to us, not to anyone.
What the counter keeps is numbers: joint angles, distances and the verdict on a rep.

We ask for camera permission because the app cannot count without it. If you decline, everything except the exercise screens still works.

3. What is stored on your phone

Workout journals — exercise, repetitions, duration, experience, coins and timestamps, written as files in the app's own storage.
Settings — theme, sound, haptics.
An install identifier — a random value generated on first run. It is not your advertising ID, is not shared between apps, and does not survive reinstalling.
Diagnostic recordings, if you switch them on in Settings — numeric pose data for debugging the counters. These stay on your device; you decide whether to send one to us.

4. What leaves your phone, and only if you sign in

Signing in is optional. If you never sign in, the app sends us nothing.

When you do sign in, these are uploaded to our server so your progress survives a lost or replaced phone:

Data	Why
Workout journal entries (exercise, reps, duration, XP, coins, time)	To restore your progress and compute the leaderboard
Install identifier, platform, app version	To merge entries from several devices and to diagnose faults
Email address and display name from Apple or Google	To identify your account; the name appears on the leaderboard

Sign-in uses Sign in with Apple or Google. We receive only what that provider hands over — an identifier, an email address and, on first authorisation, a name. We never see your password. If you use Apple's Hide My Email, we only ever see the relay address.

5. Advertising

repRaise shows one kind of ad: a full-screen rewarded video you start yourself, by tapping a button, to shorten a waiting timer. There are no banners, no interstitials, and no ad ever appears uninvited.

Ads are served by Google AdMob. To do that, Google receives your device's advertising identifier along with device and usage information, and may use it to choose which ad to show and to measure it. Google acts as an independent controller of that data under its own privacy terms.

In the EEA, the UK and Switzerland you are asked for consent before any ad is requested, through Google's consent form. You can reopen and change that choice at any time from the app's settings.
On iOS the system also asks whether repRaise may track you across other companies' apps and websites (App Tracking Transparency). Declining is fine — the rewarded video still works, the ads are simply less relevant.

We are paid per view. We do not sell your data, and we have no access to your advertising identifier ourselves.

6. Purchases

Gear can be bought through the App Store or Google Play. Payment is handled entirely by Apple or Google — we never see your card details. We receive a purchase receipt identifier so the item can be restored on a new device.

Coins are earned by exercising. They are an in-game currency with no monetary value: they cannot be bought, transferred, traded or redeemed.

7. What we do not do

No analytics SDKs. No Firebase, no Sentry, no crash-reporting service, no attribution network. None are present in the app — you can verify this from the behaviour: with no account and ads declined, the app makes no network requests at all.
We do not sell or rent personal data.
We do not build advertising profiles ourselves.
We do not use cookies on this website. It is static pages with no tracking.

8. Where the data is held

Account data and journals are stored with Supabase (PostgreSQL, EU region) and processed by our own service on Google Cloud Run (europe-west1, Belgium). 3D gear models are delivered from Cloudflare R2. These providers act as processors on our instructions, except Google AdMob, which is an independent controller as described above.

9. How long we keep it

Journal entries are kept while your account exists, because they are your progress. Delete your account and they go with it (see below). Records of purchases are kept for as long as accounting and tax rules require, with your account identifier removed.

10. Your rights

If you are in the EEA or the UK, the GDPR gives you the rights below. We extend all of them to everyone, wherever you live.

Access and portability. The app can export everything we hold for you as a machine-readable file. Ask us and we will send it if you prefer.
Deletion. Settings → Account → Delete account, in the app. It is immediate and irreversible. See the deletion page for exactly what goes and what stays.
Correction of your display name, from the app or by writing to us.
Withdrawing ad consent at any time from the app's settings.
Complaint to your local data protection authority — in the EEA or the UK, your national regulator.

Our legal bases: performing our agreement with you (your account and progress), your consent (personalised ads), and our legitimate interest in an app that works and is not defrauded.

11. Children

repRaise is not directed to children under 13, and we do not knowingly collect their data. If you believe a child has created an account, write to us and we will remove it.

12. Changes

If this policy changes in a way that matters, the app will say so before the change takes effect. The date at the top always reflects the current version.