Privacy Policy

1. Information We Collect

We collect the minimum amount of information necessary to provide, secure, and improve our Services, as well as to enable your personal fitness tracking features:

• Account Information: When you register or sign in, our third-party authentication provider (Clerk) processes your account details. If you use third-party authentication (such as Google Sign-In or Apple Sign-In), we process basic profile information provided by those platforms (e.g., name and email address).
• Device Permissions & Content: To provide AI fitness analysis and maintain your workout logs, the App requires your explicit permission to access your device's Camera and/or Photo Library.
• Workout Videos: The workout videos you record or upload within the App are securely transmitted and stored on our cloud servers. This allows us to provide you with a personal workout history and video playback features.
• Technical & Device Data: We automatically collect standard technical logs required for App stability and security, including your Internet Protocol (IP) address, device type, operating system version, unique device identifiers, and App usage timestamps.
• Subscription & Billing Information: If you purchase a paid subscription, payment is processed by our payment provider, Stripe. Stripe collects your payment card details and billing address directly — we never receive or store your full card number. We receive and store your subscription plan, status, billing currency, and billing period so we can provide the features you paid for and apply the correct taxes.
• Usage Quotas: We record how many analyses you run and how many videos you store, in order to apply your plan's usage limits and to monitor service costs.

2. How We Use Your Information

We use your data strictly for the following purposes:

• To provide, operate, and maintain our Services (e.g., generating your AI fitness analysis and allowing you to replay your stored workout videos).
• To maintain your personal progress history and fitness logs.
• To authenticate your identity and protect your account security.
• To troubleshoot bugs, monitor App performance, and improve the overall user experience.
• To process subscription payments, manage your plan and usage limits, calculate applicable sales taxes, and prevent fraud.
• To comply with applicable legal obligations.

We do not sell, rent, or trade your personal information, uploaded videos, or AI analysis reports to any third parties.

3. How Your Content is Processed and Stored

Video Storage: Your original workout video files are securely hosted on our cloud infrastructure using industry-standard encryption. They are kept private and are only accessible to you through your authenticated account.

AI Processing: To generate your motion analysis, still keyframes are extracted from your video and securely transmitted via HTTPS to Google's Gemini API. The AI processes these images transiently to generate a text-based critique and feedback report. These keyframes are used solely for real-time analysis and are not retained by the AI infrastructure or used for model training purposes. The resulting text analysis is stored on our servers alongside your video to complete your workout history log.

4. Third-Party Service Providers

We partner with trusted third-party service providers to operate specific functionalities of the App:

• Clerk: For user authentication and secure account management.
• Google (Gemini API): For processing video frames and generating AI fitness insights.
• Cloudflare: For secure app hosting, API routing, database management, and global content delivery.
• Stripe: For subscription payment processing, billing, and sales-tax calculation. Stripe handles your card details directly under its own privacy policy and PCI-DSS certification.

Each provider processes data strictly in accordance with their own privacy policies and compliant data protection standards.

5. Data Retention & Account Deletion

We retain your personal data (including account history, stored workout videos, and AI analysis reports) as long as your account remains active so that you can access your historical data at any time.

Video Deletion: You have the right to delete any individual workout video within the App at any time. Once deleted by you, the video file and its associated AI report will be immediately and permanently purged from our storage servers.

Account Deletion: In compliance with App Store and Google Play regulations, you have the right to delete your account entirely at any time. You can initiate full account deletion directly within the App's settings menu, or by contacting us at privacy@rowutech.com. Upon account deletion, all your personal data, profile info, and stored video files will be permanently and irreversibly removed from our active databases.

Billing Records: Records of subscription transactions (invoices, billing country, tax collected) are retained after account deletion for as long as tax, accounting, and anti-fraud laws require, and are then deleted.

6. Your Rights & International Transfers

Wherever you live, you can access, correct, export, or delete your data at any time from within the App or by emailing privacy@rowutech.com. We respond to all verified requests within the timeframes required by applicable law. Additional rights apply in certain regions:

6.1 European Economic Area & United Kingdom (GDPR / UK GDPR)

If you are in the EEA or UK, we process your personal data on the following legal bases: performance of a contract (providing the Services and your subscription), consent (processing the workout videos you choose to upload, which contain images of your body — you may withdraw consent at any time by deleting the relevant videos or your account), legitimate interests (service security and improvement), and legal obligation (tax and accounting records).

You have the right to access, rectify, erase, restrict, or object to the processing of your personal data, the right to data portability, and the right to withdraw consent at any time without affecting prior processing. You also have the right to lodge a complaint with your local supervisory authority.

Your data is processed in data centres that may be located outside the EEA/UK. Where data is transferred internationally, we and our processors rely on safeguards such as the European Commission's Standard Contractual Clauses.

6.2 California (CCPA / CPRA)

If you are a California resident, you have the right to know what personal information we collect and how it is used (described in this policy), the right to access and delete your personal information, the right to correct inaccurate information, and the right not to be discriminated against for exercising these rights.

We do not sell or share your personal information as those terms are defined by the CCPA/CPRA, and we do not use or disclose sensitive personal information for purposes other than providing the Services you request.

6.3 Canada (PIPEDA)

We comply with the Personal Information Protection and Electronic Documents Act. You may request access to or correction of your personal information, and may withdraw consent to its collection and use (subject to legal or contractual restrictions) by contacting us. If you are unsatisfied with our response, you may contact the Office of the Privacy Commissioner of Canada.

7. Children's Privacy

Our Services are not intended for or directed to individuals under the age of 13 (or the legal age required in your country). We do not knowingly collect personal data from children.

8. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or regulatory requirements. The "Effective Date" at the top indicates when the latest changes were made.

9. Contact Us

If you have any questions, concerns, or requests regarding your privacy, data retention, or account deletion, please contact us at:

Email: privacy@rowutech.com