privacy policy
posè does not collect your photos, video, or any content you create. all AI features run entirely on your iPhone — nothing from the camera ever leaves your device.
we use two third-party services: RevenueCat for purchase management and TelemetryDeck for anonymous usage analytics. both are disclosed in full below. neither is used for advertising, and neither tracks you across other apps or websites.
1. camera & on-device processing
posè requires access to your iPhone's camera to provide real-time photography coaching. camera data — including live video frames, pose tracking output, and aesthetics scores — is processed entirely on-device using Apple's ARKit, Vision, and Core ML frameworks.
no camera data is ever transmitted to any server, by us or any third party. it is processed in real time and immediately discarded. we do not store, save, or retain photos or video in any form.
2. in-app purchases — RevenueCat
we use RevenueCat to validate App Store receipts, manage subscriptions, and check entitlements. RevenueCat acts as a data processor on our behalf under a Data Processing Agreement.
when you make or restore a purchase, the following data is sent to RevenueCat:
- Apple receipt — your in-app purchase history for posè
- device metadata — device type, OS version, locale, currency code
- last seen timestamp — the date and time you last opened the app
- IP address — used only to infer your country code at request time, then immediately discarded; the IP itself is never stored by RevenueCat
- anonymous user identifier — a random string generated by RevenueCat (
$RCAnonymousID) that is not linked to your name, email address, or Apple ID
we do not pass your email address, name, phone number, or any personal identifier to RevenueCat. we do not enable RevenueCat's advertising identifier (IDFA/IDFV) collection.
3. usage analytics — TelemetryDeck
we use TelemetryDeck to understand how posè is used — for example, which features are most used and whether the app is stable — so we can improve it over time. TelemetryDeck is designed from the ground up to be privacy-preserving and does not collect personally identifiable information.
for each analytics event, TelemetryDeck receives:
- anonymised user identifier — your identifier is salted and SHA-256 hashed on-device before transmission. TelemetryDeck's servers then apply a second salt and hash using a daily-rotating secret. the result cannot be reversed and cannot be correlated across different days. neither TelemetryDeck nor we can determine who you are from this value.
- event name — e.g. "app launched" or "feature used"
- timestamp — rounded to the nearest hour
- device metadata — OS version, app version, device model (e.g. "iPhone15,2"), language, locale, screen size, accessibility settings
IP addresses are never stored by TelemetryDeck — not in databases, not in log files, not anywhere. no cookies are used. TelemetryDeck does not track you across other apps or websites.
4. Apple App Store privacy label
in accordance with Apple's App Privacy requirements, posè discloses the following data types. all are used for analytics and app functionality only — none for advertising or cross-app tracking.
| category | type | purpose | linked to you? | for tracking? |
|---|---|---|---|---|
| purchases | purchase history | app functionality, analytics | no | no |
| identifiers | device ID | analytics | no | no |
| usage data | product interaction | analytics | no | no |
we do not collect: contact information, precise or coarse location, health or fitness data, financial data, sensitive information, browsing history, search history, messages, or camera / microphone content.
5. data we do not collect
this list describes the posè app. the website you are reading it on is covered separately in section 10.
- photos or video footage of any kind
- your name, email address, phone number, or Apple ID
- location data — GPS, IP-based, or otherwise
- advertising identifiers (IDFA, IDFV)
- health, fitness, or biometric data
- content from other apps on your device
- contacts, messages, or any communication
6. data retention & deletion
RevenueCat retains purchase data for as long as needed to provide subscription management and comply with legal obligations. to request deletion of your RevenueCat data, contact us at the address below and we will submit a deletion request on your behalf.
TelemetryDeck data is fully anonymised and cannot be attributed to you. because no record is associated with your identity, per-user deletion is not technically possible.
7. your rights (UK & EU)
if you are in the UK or European Economic Area, you have the right to access, correct, or erase personal data we hold; restrict or object to its processing; request portability; and lodge a complaint with a supervisory authority. in the UK, this is the ICO at ico.org.uk.
given that posè collects only anonymous identifiers through third-party processors, the personal data involved is minimal. contact us at the address below to exercise any right.
8. international data transfers
RevenueCat's servers are located in the United States. data transfers are governed by RevenueCat's Data Processing Agreement and comply with applicable data protection legislation, including UK GDPR and EU GDPR standard contractual clauses.
TelemetryDeck processes and stores all data within the European Union.
9. children's privacy
posè is not directed at children under 13 (or under 16 where applicable). we do not knowingly collect data from children. if you believe a child has provided data through our app, please contact us and we will take steps to address it.
10. this website
this page is hosted by Netlify, and we look at its traffic: how many people visited, which pages they read, which links sent them, and roughly which countries they were in. those figures come from the server's own request logs — the record any web server keeps of what it was asked for, which includes the requesting IP address. the country is derived from that and the logs are not used to build a profile of you.
there is no analytics script on posè's pages, and the one cookie they can set is a language choice. if you switch the site between english and russian, your browser keeps a cookie called lang holding those two letters and nothing else, for a year, so the site can remember which language you asked for. nothing else is written to your browser by these pages and nothing follows you to another site. the one exception on this website is the quiz for our other app, beans, at /beans-coffee/quiz/, which these pages do not link to: if you press accept on its first screen, it loads Meta's Pixel and Meta's cookies are set. it is described in the beans privacy policy. this concerns the website only; section 5 covers the app, which collects no location data of any kind.
11. contact
questions about this policy or your data:
human made things
help@humanmadethings.co.uk
humanmadethings.co.uk/pose/
we aim to respond to all privacy enquiries within 30 days.
12. changes to this policy
if we update this policy in a material way, we will revise the "last updated" date above. continued use of the app after changes are posted constitutes your acceptance of the revised policy.