Privacy Policy

1. About This Policy

This Privacy Policy describes how SRS Tech ("we", "our", or "us") handles information when you use Postural, an iOS application developed and published by SRS Tech.

By downloading or using Postural, you agree to the collection and use of information described in this policy. If you do not agree, please do not use the app.

2. Your Posture Photos

Postural captures photos of your posture to measure five biomechanical markers and calculate your Postural Age score.

• All posture photos are stored exclusively on your device in the app's Application Support directory.
• Each photo file is flagged at the filesystem level to exclude it from iCloud backup. This is enforced by an automated test that runs on every build.
• Your photos are never uploaded to our servers or any third-party service.
• Deleting the app removes all locally stored photos permanently.

3. Information We Collect

Without signing in:

• Anonymous usage events via Firebase Analytics (e.g. "scan completed", "routine started") — no personally identifiable information is attached. Firebase derives a coarse, city-level location from your IP address for aggregate reporting only; this is not linked to your identity.
• Firebase Analytics is configured without the Advertising Identifier (IDFA), so no App Tracking Transparency (ATT) prompt is shown.
• Crash and error reports via Firebase Crashlytics including device model, iOS version, and a stack trace — no user identity is included.
• Scan history and preferences stored locally on your device only.

If you sign in (optional — Apple Sign-In or Google Sign-In):

• Your email address, stored in Firebase Authentication to identify your account. Apple Sign-In may relay a private proxy email instead of your real address.
• A device notification token (APNs/FCM) stored in Firebase Firestore so we can deliver push notifications. This token is a device identifier but is not shared with advertisers.
• Scan scores and progress data stored in Firebase Firestore, associated with your account, so your history can be preserved across device reinstalls.

4. Embedded Exercise Videos

Postural's daily stretch routines embed YouTube videos via an in-app web view (WKWebView). When a video plays:

• Your device connects directly to YouTube's servers to load the video.
• YouTube's own privacy policy applies to that connection — policies.google.com/privacy.
• We do not transmit your posture data, scan results, or identity to YouTube.

5. Notifications

Postural sends daily reminders using iOS local notifications (UNUserNotificationCenter). Daily reminders are scheduled entirely on your device.

When you sign in, the app registers a push notification token (APNs/FCM) with Apple and Firebase and stores it in your account record in Firebase Firestore. This token enables push notifications in future versions. No push notification campaigns are currently sent server-side; the token is stored in anticipation of future use only.

You can disable all notifications at any time in iOS Settings → Postural → Notifications.

6. HealthKit

If you grant permission during onboarding, Postural interacts with Apple HealthKit in two ways:

• Reads: Your year of birth from HealthKit's characteristic data, used solely to personalize your Postural Age calculation.
• Writes: Each completed daily routine is saved to HealthKit as a Mindful Session (minutes of mindfulness), so your workout time appears in the Health app.

HealthKit access is optional — you can skip it during onboarding without losing any core functionality. All HealthKit data is stored in your personal Health database on your device and governed by Apple's HealthKit privacy rules. We never upload HealthKit data to our servers.

7. How We Use Your Information

• Analytics: To understand how the app is used in aggregate and improve features and performance.
• Crash reporting: To identify and fix stability issues quickly.
• Account management: To let you preserve and delete your progress data on request.

We do not use your information for advertising, behavioral profiling, or any purpose not listed above.

8. Third-Party Services

Postural uses the following third-party services, each governed by their own privacy policy:

• Firebase Analytics & Crashlytics (Google) — firebase.google.com/support/privacy
• Firebase Authentication & Firestore (Google) — firebase.google.com/support/privacy
• Google Sign-In — policies.google.com/privacy
• YouTube (exercise video embeds) — policies.google.com/privacy
• Apple HealthKit (optional) — apple.com/legal/privacy

9. Data Retention and Deletion

Local data (posture photos, scan history, preferences) is stored only on your device and is deleted when you uninstall the app.

Account data (if signed in) is retained in Firebase until you delete your account. You can delete your account at any time from Settings inside the app. This permanently removes your Firebase account and all associated scan history.

Analytics and crash data is retained by Firebase according to their policies (typically 2 months for Analytics, 90 days for Crashlytics).

10. Children's Privacy

Postural is intended for adults (18+) and is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can delete it.

11. Your Rights

Depending on your location, you may have the right to access, correct, or delete the personal data we hold about you, or to withdraw consent at any time.

To exercise any of these rights, contact us at admin@srstech.in. You can also delete your account and all associated data directly in-app from Settings → Delete Account.

12. Medical Disclaimer

Postural is a consumer wellness application, not a medical device. Postural Age is a trend indicator based on geometric measurements from your smartphone camera. It does not constitute medical advice and cannot replace professional physiotherapy assessment. Always consult a qualified healthcare provider for clinical concerns.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Continued use of Postural after changes constitutes acceptance of the revised policy.

14. Contact

If you have questions about this Privacy Policy or your data, please contact us:

SRS Tech
admin@srstech.in
srstech.in