Privacy Policy

PostureMaxx is built around a simple principle: your posture data belongs to you, and it should stay on your device. This policy explains in plain language what we collect, what we don't, and the choices you have.

The short version

• We collect the email address you give us when you sign up for the TestFlight beta.
• We do not collect, transmit, or store any motion, posture, or sensor data from your AirPods or iPhone. All of that stays on your device.
• We don't use third-party analytics, advertising trackers, or fingerprinting on this website.
• You can ask us to delete your email at any time. Just email us.

1. Who we are

The data controller is Motionware di Sferruzza Matteo, doing business as PostureMaxx ("we", "us", "our"). You can reach us at hello@posturemaxx.app.

Registered office: Via A. A. Miari 49, 41034 Finale Emilia (MO), Italy.

If you are in the European Economic Area, you can also contact our lead supervisory authority, the Garante per la protezione dei dati personali (garanteprivacy.it), if you have concerns we cannot resolve.

2. What we collect

2.1 On this website

• Email address: when you submit the TestFlight signup form, your email is sent to our newsletter provider (Brevo, formerly Sendinblue) so we can send you TestFlight access and product updates. The email is stored on Brevo's infrastructure; you can read their privacy practices at brevo.com/legal/privacypolicy.
• Server logs: like virtually every website, the hosting provider (GitHub Pages) records basic request metadata (IP address, user agent, requested URL, response status) for a limited period for security and operational purposes. We do not use these logs to identify you.

2.2 In the PostureMaxx app (when installed)

• Motion data from your AirPods: sampled at high frequency from the IMU, fed into an on-device model, and used in real time to detect slouching. This data is never sent to us or to any third party. It is processed in memory and is not persisted to disk in identifiable form beyond the daily summary statistics stored locally on your phone.
• App preferences and aggregated local stats (e.g. today's posture score, streak length): stored on your device via standard iOS storage. You can clear them by deleting and reinstalling the app.
• Crash logs and diagnostics: only if you opt in through the iOS system prompt. These contain no motion data.

3. What we do not collect

• Raw or derived motion / sensor data from your AirPods or iPhone.
• Audio from your microphone. PostureMaxx has no need to access it.
• Your location, contacts, photos, or other device data.
• Cross-site advertising identifiers or advertising profiles.

4. How we use your email

We use your email address for one purpose: to send you information related to the PostureMaxx TestFlight beta, the public launch, and occasional product updates. We will not sell, rent, or share your email with third parties for their own marketing. Every email we send includes a one-click unsubscribe link.

5. Legal bases (EEA / UK)

If you are in the European Economic Area or the United Kingdom, our legal bases for processing are:

• Consent (Art. 6(1)(a) GDPR): for sending you TestFlight and product emails (you can withdraw at any time via the unsubscribe link or by emailing us).
• Legitimate interests (Art. 6(1)(f) GDPR): for the minimum server logs needed to keep the site secure and operational.

6. Your rights

Depending on where you live, you may have some or all of the following rights:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Delete your data.
• Object to or restrict processing.
• Data portability (receive a copy in a common format).
• Withdraw consent at any time, without affecting prior lawful processing.
• Lodge a complaint with your local data protection authority.

To exercise any of these rights, email hello@posturemaxx.app. We respond within 30 days.

7. California residents (CCPA / CPRA)

If you are a California resident, you have the right to know what categories of personal information we collect, to request deletion, and to opt out of any "sale" or "sharing" of personal information. PostureMaxx does not sell or share personal information for cross-context behavioral advertising, and we do not collect sensitive personal information.

8. Children

PostureMaxx is not directed at children under 13 (COPPA) or under 16 (GDPR). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact hello@posturemaxx.app and we will delete it.

9. Health data

PostureMaxx is a wellness tool, not a medical device. It does not diagnose, treat, cure, or prevent any disease or condition. We do not collect information that would qualify as "health data" under HIPAA, and we make no claims about medical benefit.

10. International transfers

Our newsletter provider (Brevo) and our hosting (GitHub Pages) may process your data in the European Union, the United States, or other countries. Brevo processes EU data inside the EU by default; where required, we rely on Standard Contractual Clauses or equivalent mechanisms for these transfers.

11. Data retention

• Email addresses: kept until you unsubscribe or ask us to delete them, whichever comes first.
• Server logs: retained for up to 90 days, then aggregated or deleted.
• App data on your device: retained until you delete the app or clear its storage.

12. Security

We use industry-standard safeguards: HTTPS in transit, encrypted at-rest storage at our providers, and strict access controls. No method of transmission or storage is 100% secure, but we work hard to protect your information.

13. Changes to this policy

If we make material changes, we will update the "Effective date" above and, for significant changes, notify subscribers by email. Continued use of the website or app after a change indicates acceptance of the updated policy.

14. Contact

Questions, concerns, or requests? Email hello@posturemaxx.app.

This policy is provided in English. An Italian translation is available on request; in case of conflict, the English version prevails. For users in Italy, this is the privacy policy of Motionware di Sferruzza Matteo.