Only what we need.

StairSnap is a workout tracker for stair climber machines. It logs workouts from photos you take of your cardio machine's console. To do that, we store some of your data on our servers and share parts of it with the third-party services that power the app. This policy explains what we collect, how we use it, who we share it with, and the choices you have.

Information we collect and store

• Account information. Your account identifier and email address. Accounts are managed through Amazon Cognito, and you can also sign in with Apple.
• Subscription and purchase information. Your subscription status and purchase history, managed through RevenueCat and the Apple App Store. We do not receive or store your full payment-card details.
• Console photos.Photos you take (or choose from your photo library) of your stair climber's display. Photos are transmitted to our servers and to OpenAI to extract workout metrics such as duration, floors, steps, and calories. When you save a workout, the photo is stored with it so you can view it alongside that workout, and it is deleted when you delete the workout or your account.
• Workout and body data.The extracted workout metrics and any body weight you enter manually are stored with your account so the app can show your history and trends. This is health-related information, and we store it only to provide the app's features.
• Usage and operational data. Limited technical, analytics, and operational information needed to run, understand, and secure the app. Product analytics are collected through PostHog.

How we use your information

We use your information to operate StairSnap: to read your console photos, log and display your workouts and weight trend, manage your subscription, understand and improve how the app is used, and keep the app secure and working. We do not sell your personal information, and we do not use it for third-party advertising.

Third-party services we share data with

To provide StairSnap, we share data with service providers that process it on our behalf. Each handles data under its own terms and privacy policy. These include:

• Cloud infrastructure (Amazon Web Services and Cloudflare) for hosting, our database, and file storage, including storage of your console photos.
• Amazon Cognito and Apple (Sign in with Apple) for account creation and authentication.
• RevenueCat and the Apple App Store to manage subscriptions and purchases.
• OpenAI, which receives the console photos you submit in order to extract your workout metrics.
• PostHog for product analytics that help us understand and improve how the app is used.

We share information with these providers only to operate the service, and we require each provider that processes data on our behalf to protect it under terms that provide the same or an equal level of protection as described in this policy, and to use it only to perform services for us rather than for their own purposes.

Data retention

We keep your information for as long as your account is active or as needed to provide the service. Console photos are deleted when you delete the workout they belong to. When you delete your account, we delete or de-identify the personal data associated with it — including your workouts, photos, and weight entries — within a reasonable period, except where we are required to retain it to comply with legal obligations, resolve disputes, or enforce our agreements.

Security

We take reasonable measures to protect your information, including encryption in transit and restricting access to your data. No method of storage or transmission is completely secure, so we cannot guarantee absolute security.

Your choices and rights

You can delete individual workouts (and their photos) in the app, and you can delete your entire account under Settings → Account → Delete Account. You can also request access to, correction of, or deletion of your personal data by contacting us. Depending on where you live, you may have additional rights under laws such as the GDPR or CCPA, and we will respond as required by applicable law.

Children

StairSnap is not intended for children under 13 (or the minimum age required in your jurisdiction), and we do not knowingly collect personal information from them.

Changes to this policy

We may update this policy from time to time. When we do, we will revise the effective date above, and significant changes will be reflected here.

If you have questions about this policy or want to make a privacy request, contact chad.newbry@gmail.com.