Privacy Policy for Slouch Sniper

1. Overview

Slouch Sniper ("we," "us," "our") operates the Slouch Sniper website and desktop app that help you improve posture. This Privacy Policy explains how we handle information when you use our services. By using our products, you agree to these terms.

We keep this policy straightforward so it can guide our practices and any future changes to our business, partners, or products.

2. Scope

This policy covers information we collect through our website, desktop app, communications, and related services. It does not cover independent third-party sites or services you may access through our links.

3. Information We Collect

We collect information you provide and information generated when you use our services. This includes contact and account details, identifiers, profile and demographic data, posture-related, biometric and wellness signals when features require them, device and usage data such as interactions, diagnostics, cookies or similar technologies, payment and transaction details handled by our processors, and messages or other content you send us. Where law requires it, we request consent before collecting sensitive inputs such as camera access, and you can adjust permissions in your device or account settings, understanding that certain features may be limited without them.

The desktop app: what leaves your computer

Posture detection runs on your computer. These stay on your computer and are never sent to us:

• Your live camera video. The app never streams or records it.
• The body-position points the model calculates from each video frame.
• The calibration photos you take during setup.
• Your answers to the setup questions.

Here is what the app sends:

• Account and license checks. If you sign in, your email and password, or a request for a sign-in link, go to Supabase, our account provider. The app then regularly checks whether your license is active.
• Your email address, if you enter it during setup.
• Usage statistics, without images. App version and platform, when the app is open, progress through the setup screens, performance numbers such as frame rate and camera resolution, camera-freeze events, and, every five minutes while detection runs, the share of time you sat up straight. These are linked to your account or to a random install ID.
• Crash and error reports. Error details and basic system information such as app version, operating system and memory, plus a technical crash dump if the app crashes, go to an error tracker we host ourselves. We strip email addresses and sign-in tokens from error messages.
• Update checks (Mac version downloaded from our website). The app asks GitHub and slouchsniper.com whether a newer version exists. These requests carry no account information.
• Model download. When posture detection starts, the app fetches its pose-detection model from Google's TensorFlow Hub (tfhub.dev). No account data or images are sent. If the download fails, the app uses its built-in copy.
• Posture photos, only if you turn them on. Photo sharing is off unless you switch it on during setup or in Settings. When it is on, the app uploads a photo from your camera, labeled straight or slouching, about every 15 seconds while posture detection runs and you are in front of the camera. Photos are linked to your account email, or to a random install ID if you are not signed in. They are stored with Supabase and moved daily, through our own server, to an archive at Backblaze in the United States. We use them to train and test the posture model. You can turn sharing off anytime in Settings. To have photos you already shared deleted, email karol@slouchsniper.com.

Like any internet request, these reveal your IP address to the service that receives them.

4. How We Use Information

We use information to provide, personalize, and support the website and app; operate posture features including AI-assisted feedback and safety checks; improve, develop, and test products through analytics, research, and quality assurance; run business operations such as payments, billing, accounting, and compliance; communicate about updates, offers, and service notices with opt-out for marketing; and protect against fraud, misuse, security issues, and to enforce our terms. We may combine information from different sources for these purposes and to create aggregated or de-identified insights.

5. Sharing Information

We may share information with service providers and vendors supporting hosting, analytics, customer support, payments, communications, security, and infrastructure; with affiliates, advisors, and selected business partners for operations, research, product development, analytics, and marketing consistent with this policy; with parties to corporate transactions where data transfer is needed; with authorities or other parties when required by law or to protect rights, safety, and our agreements; and with recipients of aggregated or de-identified information that does not reasonably identify you. Third parties are expected to handle information under appropriate confidentiality, security, and data protection requirements.

6. Legal Bases

Where required, we rely on one or more of the following legal bases: your consent; performance of a contract with you; our legitimate interests in operating, improving, and securing our services; compliance with legal obligations; and, for special-category data when applicable, your explicit consent or other grounds allowed by law.

7. Retention

We keep information as long as needed for the purposes described above, to meet legal or operational requirements, or to resolve disputes. When no longer needed, we aim to delete or de-identify data.

8. Security

We use technical and organizational measures appropriate to the nature of the data, including encryption in transit, access controls, and monitored infrastructure. No system is perfectly secure; if you suspect an issue, contact us at karol@slouchsniper.com.

9. Your Choices and Rights

Depending on your location, you may have rights to access, correct, delete, restrict, object to, or port your personal data, and to withdraw consent where processing is based on consent. You can manage marketing preferences via unsubscribe links. To exercise rights, email karol@slouchsniper.com; we may verify your request.

10. Cookies and Similar Technologies

We use cookies and similar tools to operate the site, remember preferences, measure performance, and support marketing. You can control cookies through your browser or device settings; some features may not work without them.

11. International Transfers

Information may be stored and processed in countries outside your own. Where required, we use appropriate safeguards (such as standard contractual clauses or equivalent measures) to protect transferred data.

12. Changes to This Policy

We may update this policy to reflect changes in our practices or legal requirements. We will post the updated version with the effective date. Continued use of the services after changes means you accept the updated policy.