PostureCheck Privacy Policy

Effective date: July 11, 2026

PostureCheck is a posture-assessment app. It captures full-body photos of you, analyzes joint positions to identify postural deviations, and generates a Posture Score and exercise suggestions. Because it works with photos of your body, this policy is written to be specific about what is captured, where it goes, and who can see it.

Who we are

PostureCheck is built and operated by Jeremy Irons (sole developer). Contact: support@irons.la.

What we collect

Account information

• Email address — used for sign-in. We do not store your password; authentication is handled by Supabase Auth. PostureCheck does not offer social/OAuth sign-in.
• Display name
• Account role — whether the account is a self-assessment user or a coach (see "Coach accounts" below).

Photos and posture data

• Full-body photos — up to four views per assessment (front, back, left side, right side), captured with the in-app camera or chosen from your photo library.
• Joint/landmark coordinates — numeric body-joint positions extracted from each photo.
• Posture findings — the deviations, severities, and the composite 0–100 Posture Score computed from those coordinates.
• Notes you or your coach add to an assessment.

How photo analysis works: joint detection runs entirely on your device using an on-device pose-detection model. Your photo is not sent to any third-party analysis service. After on-device processing, the photo itself and the derived numeric data (joint coordinates, findings, score) are uploaded to your private storage folder so they sync across your sessions and devices.

Coach accounts and client records

PostureCheck supports an optional coach/client relationship: a coach account can generate a time-limited invite code, and a client who redeems it links their account so the coach can view that client's photos, assessments, and exercise plans.

• If you use PostureCheck as a coach, you may also enter records for people you work with directly, including name, date of birth, and notes for that person, if that person is not themselves a PostureCheck account holder. If you enter another person's information this way, you are responsible for having their permission to do so; email us if that person wants their record accessed or removed.
• Coach invite codes, and the record of which coach and client accounts are linked, are also stored.

Exercise plans

• Exercise plans and items (name, sets/reps/duration, notes) assigned to an account, generated from assessment findings or added by a coach.

Where your data is stored

All data — account information, photos, joint coordinates, findings, notes, and exercise plans — is stored using Supabase (Postgres database and file storage), our sole backend provider. Photos are stored in a private storage bucket; each account can only read or write files inside its own folder. Photos are never public — when the app displays a photo, it uses a short-lived signed link (expires after about an hour) rather than a permanent public URL.

Who can see your data

• By default, only you can see your photos, joint data, findings, Posture Score, and notes. PostureCheck has no public profiles, feed, or discovery — other users cannot find or view your assessments.
• If you link with a coach (by redeeming their invite code), that coach can view your photos, assessments, findings, and exercise plans, so they can guide your program. You can unlink at any time, which ends the coach's access to new activity.
• If you are a coach and enter a client record directly, that client's name, date of birth, and notes are visible to you as the coach who created the record.
• Your email address is never shown to other users.

Third-party services we use

Supabase — hosts our database, authentication, and file storage. That is the entire list. PostureCheck does not use advertising SDKs, attribution trackers, analytics SDKs, or crash reporters, and it does not send your photos to any third-party AI or analysis API. We do not sell or rent your data, and we do not use your photos or data to train AI models.

How long we keep your data

Your account, photos, assessments, findings, notes, and exercise plans are kept for as long as your account exists. PostureCheck does not currently have a self-service "delete account" button in the app; to delete your account and all associated data, email us at the address below and we will delete it. Backups may retain data for up to 30 days after deletion before being overwritten.

If you unlink from a coach, or a coach unlinks from you, the coach loses access to your data going forward, but historical assessments already viewed are not retroactively "unseen."

Your rights

• Access — you can see your own photos, assessments, findings, and exercise plans directly in the app. Email us for a full data export.
• Correction — you can edit notes and re-take assessments in the app.
• Deletion — email us to delete individual photos/assessments or your entire account.
• Unlink — you can end a coach relationship at any time in the app.

If you live in the EU, UK, or California, you have additional rights under GDPR, UK GDPR, and CCPA — including data portability and the right to complain to your local data protection authority. Email us to exercise any of these rights.

Sensitive data

Photos of your body, and the posture findings derived from them, can reveal information about your physical condition. We treat this data as sensitive: it is stored privately per account, is never public, is not shared with advertisers or analytics providers, and is not used for any purpose beyond providing the posture assessment and coaching features described in this policy.

Not medical advice

PostureCheck provides educational, general-wellness information. It is not a medical device and does not diagnose or treat any condition. Findings, scores, and exercise suggestions should not replace advice from a qualified healthcare provider.

Children

PostureCheck is not directed at children under 13, and we do not knowingly collect data from anyone under 13. If we learn that a child under 13 has an account, we will delete it.

Changes to this policy

If we change this policy, we'll update the effective date at the top. Material changes will be surfaced in the app before they take effect.

Contact

Questions, requests, or concerns: support@irons.la.

← All privacy policies