Controller / Developer: Federico Balzi, an individual sole developer domiciled in Italy (the "Developer", "we", "us", or "our"). Contact: app.fitnesslab@gmail.com.
This Privacy Policy explains how personal data is collected, used, and disclosed in connection with the mobile application currently distributed under the name "SquatLock" (the "App"). By downloading, installing, or using the App you acknowledge that you have read and understood this Privacy Policy.
The App is designed to operate entirely on your device. We do not run our own servers. We do not operate any analytics or advertising infrastructure. We do not collect, receive, transmit, sell, share, or rent your personal data to third parties for advertising, profiling, or marketing purposes.
Where any data leaves your device, it does so exclusively through Apple-provided services (Sign in with Apple, StoreKit, iCloud / CloudKit) that you are already using as part of your Apple ID account. Those services are governed by Apple's own privacy policy, which you can review at https://www.apple.com/legal/privacy/.
(a) Sign in with Apple. When you sign in to the App, Apple provides us with a private, anonymised user identifier and, only if you explicitly choose to share them at the sign-in prompt, your name and an email address (which may be a private-relay address chosen by you). Your Apple ID password is never shared with us. The Apple user identifier is stored in the iOS Keychain on your device.
(b) Profile and preferences. Any name you enter, goals you select, and settings you configure are stored locally on your device and, if you use the same Apple ID on multiple devices, synchronised across your own devices via Apple's iCloud (CloudKit) service under your Apple ID. We do not have access to your iCloud contents.
(c) Exercise sessions and minutes ledger. The App counts repetitions and records short exercise sessions locally. This ledger is stored on your device and, via CloudKit, in your personal iCloud database so it can be restored on your other devices. We do not read this ledger from any server we control, because there is no such server.
(d) Camera and pose data. The App uses your device's camera and Apple's on-device Vision framework to detect body-pose landmarks and count repetitions. Camera frames and pose data are processed entirely on your device in real time and are not recorded, saved, transmitted, uploaded, or shared with any third party. Nothing from the camera leaves your device.
(e) Screen Time and the apps you choose to block. If you enable app blocking, the list of apps you choose is stored on your device as opaque tokens provided by Apple's Family Controls / Screen Time framework. Those tokens do not reveal the names of the apps to us and are not human-readable. We do not, and cannot, see the identities of the apps you block, nor your usage of them.
(f) Purchases and subscriptions. If you purchase a subscription, the transaction is processed by Apple through StoreKit and the App Store under your Apple ID. We do not receive, store, or process your payment card details, billing address, or financial information. From StoreKit we only receive transaction receipts confirming whether your subscription is currently active.
(g) Diagnostics. If you have opted in via iOS Settings ("Share iPhone Analytics"), Apple may share aggregated crash and performance data with the developer of apps installed on your device. We may use any such data solely to identify and fix bugs. This data does not identify you personally.
We do not sell your personal data. We do not share your personal data for cross-context behavioural advertising. We do not use trackers, cookies, third-party SDKs for analytics or advertising, or the Advertising Identifier (IDFA). We do not build advertising profiles about you. We do not use your data to train machine-learning models. Your pose data, camera frames, workout history, and choice of blocked apps are never uploaded to any server operated by us.
Where the EU General Data Protection Regulation (Regulation (EU) 2016/679) or the UK GDPR applies to you, we rely on the following legal bases for the limited processing described above: (i) performance of a contract with you (providing the App and its features you request); (ii) our legitimate interests in operating and improving the App and preventing fraud, provided your interests and fundamental rights do not override these; and (iii) your consent, where we ask for it (for example, when iOS requests permission to use the camera). You may withdraw consent at any time by revoking the relevant iOS permission in Settings.
Because we do not operate servers, we do not retain personal data on our own infrastructure. Data stored on your device or in your iCloud is retained under your control, for as long as you keep the App installed and your Apple ID active. Uninstalling the App removes local data. iCloud data can be removed via iOS Settings > Apple ID > iCloud > Manage Storage.
Depending on where you live, you may have the right to access, correct, delete, restrict, or object to the processing of personal data about you, to data portability, and to withdraw consent. Because virtually all of your data lives on your device or in your iCloud, you can already exercise most of these rights directly through iOS. Where you need our assistance, contact us at app.fitnesslab@gmail.com and we will respond within a reasonable time and in any event within the timeframes required by applicable law. You also have the right to lodge a complaint with your local data protection authority.
The Developer is located in Italy. The Apple services described above may transfer and store data internationally under Apple's own privacy framework and safeguards.
The App is not intended for and must not be used by anyone under 16 years of age. We do not knowingly collect any information from persons under 16. If you believe a person under 16 has used the App, please contact us and we will take steps to delete any information we hold.
We rely on the security features built into iOS, the iOS Keychain, and Apple's iCloud and StoreKit infrastructure. No method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.
We may update this Privacy Policy from time to time. If we make a material change, we will update the "Last updated" date and, where reasonably possible, notify you in-app. Continued use of the App after an update constitutes acceptance of the revised Policy.
Questions or requests about this Privacy Policy can be sent to: