Privacy Policy

1. Information We Collect

• Account info: email address, name, profile picture (optional), social login identifiers (Apple, Google)
• Health & body info: height, weight, gender, age, fitness goals, experience level, workout environment, frequency, health concerns
• Workout data: workout records, sets/reps, weight, duration, notes
• Identifiers: user ID (Supabase)
• Device & usage data: device info, ad impression/click statistics, app usage statistics

2. How We Use Information

• User authentication and service delivery
• Storing workout records, providing stats and analytics
• Serving non-personalized ads (Google AdMob)
• Analyzing usage patterns to improve the service

3. Third-Party Sharing & Processing

• Apple, Google: social login authentication
• Supabase: user data storage and authentication infrastructure (US region)
• Google AdMob: non-personalized ad delivery (advertising identifiers such as IDFA are not collected for tracking purposes)

4. App Store Connect / Play Console Data Safety

This app collects the following data categories, consistent with App Store and Google Play Data Safety disclosures. This app does not track users.

• Contact info: email, name — user identification (not used for tracking)
• Identifiers: user ID — app functionality (not used for tracking)
• User content: photos/videos (profile picture), other content (workout notes)
• Health & fitness: workout records (app functionality, analytics), body info (app functionality)
• Usage data: product interaction — analytics (not used for tracking)

5. Retention & Account Deletion

When a user requests account deletion in the app, the account is immediately deactivated and a 30-day recovery grace period is granted.

If the user signs in again with the same account within 30 days, data is restored. After 30 days, all user data (workout records, routines, settings, user-created exercises, etc.) and authentication info are permanently deleted by automated procedures.

When retention is required by applicable law (e.g., Korean Communications Privacy Act on log records), the data is stored separately for the period required by law and then destroyed.

6. User Rights

• Right to access, correct, and delete personal information
• Request deletion of all data through account withdrawal
• This app only serves non-personalized ads and does not collect IDFA for tracking purposes
• Additional ad personalization opt-out: reset advertising ID in device settings
• EU/EEA/UK/Switzerland users: GDPR rights including access, rectification, deletion, and objection to processing
• US (California, etc.) users: CCPA/CPRA right to opt out of the sale/sharing of personal information

7. Children Under 14

This service is not directed to children under 14 and does not knowingly collect personal information from children under 14.

8. Changes to This Policy

This policy may be revised due to law or service changes. Changes will be communicated through in-app notices or this page.

9. Contact

Email: contact@scenestealer.kr