Privacy Policy

01 Who we are

Poise is developed and operated by an individual sole developer ("the operator") located in Australia, not a registered company. For the purposes of the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), the operator is the entity responsible for the personal information described in this policy. This policy also addresses the rights of users in the European Economic Area, the United Kingdom, and California, who are covered by their own laws (see Your rights & choices).

This policy covers the Poise apps for macOS and iPhone and the backend services that support them. It does not cover third-party products (such as Apple hardware or the App Store), which are governed by their own privacy policies.

02 Information we collect

Poise is designed to collect as little as possible, and to keep the most sensitive processing on your device. Here is everything we handle:

a. Account information

When you sign in with Sign in with Apple, we receive and store your email address and — only on your very first sign-in, and only if you allow it — your name. We store a pseudonymous account identifier to link your data across your devices. If you use Apple's "Hide My Email" feature, we only ever see the relay address Apple provides.

b. Onboarding answers (including health-related information)

During onboarding you may tell us about your occupation, how many hours a day you sit at a desk, your posture and neck-pain history (including where you feel pain, how severe it is, and how often), your goals, and some optional profile details such as age range, and — if you choose to provide them — sex and height. Some of these are health-related and sensitive (see Health & sensitive information). Providing them is optional and used to personalise your experience.

c. Posture & usage data

Poise measures how hard your neck is working using the motion sensors in your AirPods. The raw, continuous motion signal is processed on your device. What syncs to your account is a set of summaries: your daily load score and peak strain, per-session totals (start and end time, session score, average sustained neck angle, and a breakdown of time spent in each posture zone), calibration counts, and basic information about your devices (a device name and model, and whether a device is currently recording) so the app can coordinate live tracking across them.

d. Subscription & purchase information

If you subscribe to Poise Pro, your purchase is processed by Apple and managed through RevenueCat. We receive your subscription status and metadata — the product purchased, the store, whether it is active, whether it will renew, trial/introductory status, and purchase and expiry dates. We never receive your full payment-card number or billing address; those are handled entirely by Apple.

e. Product analytics

We use PostHog to understand how people move through the app (for example, which onboarding steps are completed) so we can improve it. We send only event names and low-detail, non-identifying metadata, tied to your pseudonymous account identifier. We do not send your posture/pain values, demographics, name, or email address to analytics.

f. Technical & log data

Our hosting and infrastructure providers automatically process limited technical data (such as IP address and request timestamps) as a normal part of delivering and securing the service. This is used for operation and abuse prevention, not to build a profile of you.

03 What we don't collect

• No camera or microphone content — Poise uses motion sensors, never your camera.
• No raw, continuous motion stream leaves your device — only the summaries described above.
• No advertising SDKs, no ad networks, and no cross-app tracking for advertising.
• No precise location tracking, contacts, photos, or other unrelated device data.
• We never sell your personal information, and we never share it for others' advertising.

04 How we use your information

• To provide the app — measure your posture load, keep your history, and sync it across your Mac and iPhone.
• To personalise — tailor onboarding and the experience to the goals and history you share.
• To manage subscriptions — determine your entitlement to Poise Pro and provide subscription self-service.
• To communicate — send you essential service messages, and, if you have opted in, lifecycle and product emails (you can unsubscribe at any time).
• To improve and secure — analyse aggregate, non-identifying usage to fix bugs and improve the product, and to protect against fraud and abuse.
• To meet legal obligations — where we are required to by law.

Legal bases (for EEA/UK users). We process your information to perform our contract with you (providing the app and subscription), on the basis of your consent (health-related onboarding answers and marketing email — which you may withdraw at any time), and for our legitimate interests in operating, securing, and improving the service.

05 Health & sensitive information

Some onboarding answers — such as neck-pain location, severity, and frequency, and optional details like sex and height — are sensitive information under the Privacy Act (and "special category" / health data under the GDPR). We collect this information only with your consent, and only to personalise Poise for you.

We treat this data with extra care: your health-related and demographic answers are stored in our secure backend and are never forwarded to our email or analytics providers. You can withdraw your consent and delete this data at any time by deleting your account (see Your rights & choices).

06 Who we share it with

We do not sell your data. We share it only with the service providers ("sub-processors") that make Poise work, and only to the extent each needs to perform its function:

We may also disclose information if required by law, to enforce our terms, or to protect the rights, safety, and security of our users and the public. If the operation of Poise is ever transferred to another operator, your information may be transferred as part of that change, subject to this policy.

07 Overseas storage & transfers

Some of our sub-processors store and process data on servers located outside Australia, including in the United States and other countries. By using Poise you acknowledge that your information may be handled overseas. Where we transfer personal information internationally, we take reasonable steps to ensure it is handled in line with this policy and applicable law, including — for EEA/UK users — appropriate safeguards such as standard contractual clauses where required.

08 How long we keep it

We keep your personal information for as long as you have an account, so that your history and settings remain available to you. When you delete your account, your account and its associated data are permanently deleted from our backend, and deletion requests are sent to our sub-processors. We may retain limited records where we are legally required to (for example, tax or transaction records held by Apple), and de-identified, aggregate analytics that can no longer be linked to you may be retained.

09 How we protect it

We take reasonable technical and organisational measures to protect your information, including encryption in transit, authenticated access, and strict database access rules that ensure you can only ever read and write your own data. No method of transmission or storage is completely secure, so we cannot guarantee absolute security — but we work to protect your information and to promptly address any issue that arises.

10 Your rights & choices

• Access & correction. You can view and update much of your information in the app. You can also ask us for a copy of the personal information we hold about you, or ask us to correct it.
• Deletion. You can permanently delete your account and its data at any time from Settings → Delete Account in the app. This removes your data from our backend and triggers deletion requests to our sub-processors.
• Marketing opt-out. Every marketing email includes an unsubscribe link, and you can opt out at any time. We will still send essential service messages.
• EEA/UK users. You have rights under the GDPR / UK GDPR, including access, rectification, erasure, restriction, portability, and objection, and the right to withdraw consent. You may also lodge a complaint with your local supervisory authority.
• California users. You have rights under the CCPA/CPRA, including to know, delete, and correct your personal information, and to opt out of "sale" or "sharing" — which we do not do. We will not discriminate against you for exercising these rights.

To exercise any right, use the in-app controls or email support@poisefit.co. We will respond within the timeframes required by applicable law.

11 Children

Poise is not directed to children. You must be at least 16 years old to create an account and use the app. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us personal information, contact us and we will delete it.

12 Not a medical service

Poise is a consumer measurement and wellbeing tool. It is not a medical device, and it does not provide medical advice, diagnosis, or treatment. The information it produces — including any export you may share with a health professional — is for general awareness only and should not be relied on as a substitute for professional advice.

13 Changes to this policy

We may update this policy from time to time as the app evolves or the law changes. When we do, we will revise the "Last updated" date above, and for material changes we will provide a more prominent notice (such as in the app). Your continued use of Poise after an update means you accept the revised policy.