Privacy Policy

1. Information We Collect

When you use CaliPro, we collect the following information:

• Account information: your name and email address
• Workout videos you record or upload for form analysis. On the iOS app, your video is processed entirely on your device — the full video is never uploaded to our servers. A single representative still-frame thumbnail from your best pose is uploaded to display your result.
• Analysis results and AI coaching reports generated from your pose data
• Optional body measurements (height, weight, biological sex) you provide for personalised coaching programmes
• Onboarding questionnaire answers (training history, goals, injuries)
• Basic product usage data (features used, analyses performed)
• Subscription and payment information managed by our payment processors (we never store card details)

2. How We Use Your Data

We use your data to:

• Analyse your workout form using on-device pose estimation (MediaPipe, runs locally on your device — no video data is sent to external ML servers) and generate AI coaching reports and training programmes via the Anthropic Claude API
• Display your score history, streak, XP, and ranking on the leaderboard
• Deliver transactional emails (results, account updates) via Resend
• Manage your subscription and process payments
• Improve the reliability and performance of the Service

3. On-Device Processing (iOS App)

On the CaliPro iOS app, all pose estimation and angle measurement runs locally on your iPhone using the MediaPipe Tasks Vision framework. Your workout video is never transmitted to CaliPro's servers or any third party. Only a single JPEG thumbnail frame (your best pose) and the computed numerical scores are uploaded when you save an analysis.

4. Data Storage

Your thumbnail frames and analysis data are stored in Supabase Storage and a Supabase PostgreSQL database protected by row-level security policies. All data is stored at rest with industry-standard encryption. Data is stored on servers in the United States.

5. Third-Party Processors

We share data with the following third-party service providers only as necessary to operate the Service:

• Supabase — database, authentication, and thumbnail storage
• Anthropic (Claude API) — server-side AI generation of coaching reports and training programmes. Your video is not sent to Anthropic; only computed joint angles and anonymised score data are used as input to the coaching prompt.
• Resend — transactional email delivery
• Apple (App Store / StoreKit) — iOS in-app subscription billing. Apple processes your payment and manages your subscription. Apple's privacy policy applies to that transaction.
• Polar — web subscription billing and payment processing for users of the CaliPro web app. We never store your card details.
• Vercel — hosting and edge delivery for the web app and API

6. Data Sharing

We do not sell your personal data to any third party. Your data is shared only with the processors listed above, and only for the purpose of delivering the Service to you. We do not use your videos, thumbnails, or analysis results for advertising or to train AI models.

7. Health and Fitness Data

CaliPro collects fitness-related data including workout form scores and optional body measurements. This data is used solely to provide personalised coaching and track your progress. It is not shared with health insurers, employers, or advertising networks, and is not written to or read from Apple Health (HealthKit).

8. Data Retention

We retain your analysis data and thumbnail frames for as long as your account is active. If you delete your account or submit a deletion request, we will remove your personal data from our systems within 30 days, except where retention is required by law.

9. Your Rights

Depending on your location, you may have the right to access, correct, export, or delete your personal data. To exercise any of these rights, please contact us at the address below and we will respond within 30 days. If you are in the European Economic Area, you have additional rights under the GDPR.

10. Security

We implement industry-standard security measures, including database row-level security, HTTPS encryption in transit, and scoped API access controls. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

11. Children

CaliPro is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or via an in-app notice. Continued use of the Service after changes take effect constitutes acceptance of the updated Policy.

13. Contact

For privacy-related questions or data requests, contact us at support@calipro.app.