1. Who We Are

Rep-IQ (“we”, “us”, or “our”) is a fitness technology platform providing AI-powered exercise form analysis and coaching via your device camera. Our data controller details are available on request at privacy@rep-iq.app.

This Privacy Policy explains how we collect, use, share, and protect personal data when you use the Rep-IQ app, website at rep-iq.app, or any related services (the “Services”).

2. What Data We Collect

We collect the following categories of personal data:

• Account information: Name, email address, and password when you register or join our waitlist.
• Profile data: Optional information including age, gender, height, weight, fitness goals, training experience, and preferred training days.
• Workout data: Exercise sessions, rep counts, form scores, sets, weights, duration, and session timestamps. Video is processed entirely on your device — no footage is transmitted to our servers.
• Form insight data: Aggregated, anonymised summaries of detected form issues per exercise, used to generate AI coaching insights.
• Device and usage data: Device type, operating system, app version, IP address, browser type, pages visited, and interaction events.
• Payment data: Billing is handled by Stripe. We do not store full card details.
• Communications: Any messages, support requests, or feedback you send us.
• Cookies: See our Cookie Policy for full details.

3. How We Use Your Data

• Create and manage your account and deliver the Services
• Analyse workout sessions and generate personalised form insights and coaching tips
• Process payments and manage your subscription
• Send service notifications, updates, and support communications
• Send marketing communications where you have consented or where we have a legitimate interest
• Improve and develop the platform, including training our models on aggregated, anonymised data
• Comply with legal obligations and protect the rights and security of Rep-IQ and its users
• Detect and prevent fraud or other unlawful activity

4. Legal Basis for Processing

• Contract: Processing necessary to provide the Services under our Terms of Service.
• Legitimate interests: Improving our platform, preventing fraud, and sending relevant marketing where you have not opted out.
• Consent: Where you have actively opted in, such as for marketing communications or non-essential cookies.
• Legal obligation: Where required by applicable law.

5. Data Sharing & Third Parties

We do not sell your personal data. We may share your data with:

• Stripe: Payment processing and subscription management.
• OpenAI: Aggregated, anonymised form issue data to generate coaching suggestions. No raw video or identifiable footage is shared.
• Formspree: Collection and storage of waitlist registration data.
• Cloud infrastructure providers: Hosting and delivery of the Services.
• Analytics providers: Aggregated, anonymised usage data for platform improvement.
• Legal authorities: Where required by law or to protect the safety of Rep-IQ or others.

6. Data Retention

We retain your personal data for as long as your account is active or as necessary to provide the Services. Upon account deletion, we will delete or anonymise your personal data within 30 days, except where retention is required by law. Aggregated, anonymised data may be retained indefinitely for platform improvement.

7. Your Rights

Under UK GDPR and EU GDPR, you have the right to access, rectify, erase, restrict, port, and object to processing of your personal data, and to withdraw consent at any time. Contact us at privacy@rep-iq.app. You may also lodge a complaint with the ICO at ico.org.uk.

8. International Transfers

Where personal data is transferred outside the UK and EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the relevant supervisory authority.

9. Security

We implement industry-standard technical and organisational measures to protect your personal data. All video-based pose estimation is processed entirely on your device — no footage is ever transmitted to our servers. In the event of a breach likely to affect your rights, we will notify you without undue delay.

10. Children’s Privacy

Rep-IQ is not directed at children under 16. We do not knowingly collect data from children under 16. If you believe a child has provided us with data, contact privacy@rep-iq.app and we will delete it promptly.

11. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated by email or in-app notice prior to the change becoming effective.

12. Contact Us

Rep-IQ — Data Protection
Email: privacy@rep-iq.app