privacy policy

Who We Are

For UK data protection purposes, [DEVELOPER LEGAL NAME] is the controller of the personal information that Capacity collects directly from you.

You can contact us using the details in the Contact Us section below.

Information We Collect

Account Information

Capacity may require you to create or pair an account using Sign in with Apple or Google Sign-In.

When you create or pair an account, we may receive and store:

• your email address, including an Apple private relay email address where applicable;
• an account or authentication identifier needed to create and maintain your Capacity account; and
• information necessary to determine whether your account has access to paid features.

We do not intentionally collect your name, postal address, phone number, contacts, photos, precise location, health records, or other profile information as part of your Capacity account.

tretching Routines, Custom Routines, and Statistics

Capacity allows you to follow stretching routines, adjust exercise difficulty, create custom routines on an eligible paid plan, and view your progress and statistics.

This information is stored on your device. Capacity does not upload or store your routine history, custom routines, exercise progress, or statistics on our own servers.

Because this information is stored locally, deleting the app, resetting or replacing your device, or otherwise removing local app data may cause this information to be lost. Capacity does not operate a server-side backup service for this data.

Subscription and Purchase Information

Capacity offers monthly and yearly subscriptions through Apple’s App Store.

Payments are processed by Apple, and subscription entitlement management is supported by RevenueCat. We do not receive or store your full payment-card or bank-account details.

Apple and RevenueCat may process information necessary to complete purchases and determine subscription status, such as:

• purchase and subscription history;
• product and transaction identifiers;
• renewal, cancellation, and entitlement status; and
• an app-specific user or customer identifier where required to associate a subscription with your Capacity account.

We use this information only to provide, restore, and manage paid access and to operate the subscription features of Capacity.

Anonymous Analytics

Capacity uses PostHog to understand how users move through onboarding and to improve the onboarding experience.

We configure this analytics so that the events we send to PostHog are anonymous usage events and are not intentionally associated with your Capacity account, email address, stretching statistics, custom routines, or other exercise data.

Examples may include events such as:

• starting or completing an onboarding step;
• moving between onboarding screens; or
• completing an onboarding flow.

We do not use this analytics information for targeted advertising or to build advertising profiles.

Anonymous analytics data is retained for [INSERT POSTHOG RETENTION PERIOD OR RETENTION CRITERIA].

Because these analytics events are not linked to your Capacity account, deleting your Capacity account may not remove anonymous events that have already been recorded.

How We Use Information

We use the limited information described above to:

• create, authenticate, and maintain your Capacity account;
• pair your account across the authentication and subscription systems we use;
• determine whether you have an active paid subscription;
• provide and restore paid features;
• process account-deletion requests;
• maintain the security and reliability of Capacity;
• understand anonymous onboarding usage and improve the app; and
• comply with legal obligations where necessary.

We do not use your account information, stretching statistics, routines, or subscription information for targeted advertising.

Our Lawful Bases for Processing

Where UK data protection law applies, we rely on the following lawful bases as appropriate:

Contract

We process your account information and subscription-entitlement information where necessary to create and maintain your account and provide the features and services you request.

Legitimate Interests

Where permitted by law, we may rely on our legitimate interests to operate, secure, troubleshoot, and improve Capacity, including understanding anonymous onboarding usage. We aim to minimise the information involved and avoid linking anonymous analytics to your account identity.

Where applicable law requires consent before analytics technology stores or accesses information on your device, we will rely on consent instead.

Legal Obligation

We may process or retain limited information where necessary to comply with applicable law, legal process, regulatory requirements, or valid requests from public authorities.

Service Providers and Third Parties

We do not sell your personal information.

We use a small number of third-party services that are necessary to operate Capacity:

Apple

Apple distributes Capacity through the App Store, processes in-app purchases and subscriptions, and may provide authentication through Sign in with Apple.

Apple processes information under its own terms and privacy practices.

Google

If you use Google Sign-In, Google provides the authentication service used to sign in to or pair your Capacity account.

Google processes information under its own terms and privacy practices.

RevenueCat

RevenueCat helps us manage subscription status and paid-feature entitlements. RevenueCat may process purchase information, subscription status, transaction identifiers, and app-specific customer identifiers needed to provide this service.

We do not use RevenueCat for advertising.

PostHog

PostHog processes the anonymous onboarding usage events described in this Privacy Policy on our behalf.

We do not intentionally send your Capacity account email, stretching statistics, custom routines, or exercise progress to PostHog.

Legal or Safety Disclosures

We may disclose limited information if we reasonably believe disclosure is required by law, legal process, or a valid governmental request, or where necessary to protect the security, rights, or integrity of Capacity or its users.

No Sale of Personal Information or Advertising Tracking

Capacity does not:

• sell your personal information;
• rent your personal information;
• use your stretching statistics or routines for advertising;
• share your account information with advertisers; or
• use third-party advertising SDKs to track you across unrelated apps or websites.

The third-party services described above are used to provide authentication, subscriptions, analytics, and operation of the app.

International Processing

Capacity is operated from the United Kingdom.

Some service providers, including Apple, Google, RevenueCat, and PostHog, may process information in countries outside the United Kingdom.

Where personal information is transferred internationally and UK data protection law requires safeguards, we take reasonable steps to use appropriate contractual or other lawful transfer mechanisms provided by or agreed with our service providers.

Data Retention

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected.

In general:

• Account information: retained while your Capacity account remains active and deleted or de-identified after account deletion, except where limited retention is required by law or reasonably necessary for security or dispute-resolution purposes.
• Subscription information: retained or processed for as long as necessary to determine and administer your subscription entitlement, subject to records maintained by Apple and RevenueCat under their own legal and operational requirements.
• Anonymous PostHog analytics: retained for [INSERT POSTHOG RETENTION PERIOD OR RETENTION CRITERIA].
• Stretching statistics, routines, and progress: stored on your device rather than on Capacity’s servers.

We periodically review the information we retain and aim not to keep personal information longer than necessary.

Account and Data Deletion

You can initiate deletion of your Capacity account from within the app.

When you delete your account, we will delete or de-identify the account information we control, including your stored account email and associated Capacity account identifiers, except where we are legally required or otherwise permitted to retain limited information.

Your locally stored routines, statistics, and app data can also be removed by deleting the relevant data within the app where available or by deleting the app from your device.

Important: subscriptions are managed separately

Deleting your Capacity account does not automatically cancel an active App Store subscription.

If you have an active monthly or yearly subscription, you should cancel it through Apple’s subscription-management controls. Otherwise, Apple may continue billing the subscription until it is cancelled.

Your Privacy Rights

Depending on where you live and the law that applies, you may have rights over your personal information.

Under UK data protection law, these may include the right to:

• request access to personal information we hold about you;
• request correction of inaccurate personal information;
• request deletion of your personal information;
• request restriction of certain processing;
• object to certain processing;
• request transfer of information where the right to data portability applies; and
• withdraw consent where processing is based on consent.

These rights are not absolute and may depend on the circumstances and our lawful basis for processing.

You can also make a complaint to the UK Information Commissioner’s Office (ICO) if you believe your data protection rights have been infringed.

To exercise a privacy right, contact us using the details below. We may need to verify your identity before completing certain requests.

Security

We use reasonable technical and organisational measures intended to protect the limited personal information we hold.

However, no electronic storage or transmission system can be guaranteed to be completely secure. You are responsible for maintaining the security of your device, Apple or Google account, and any credentials used to access Capacity.

Children’s Privacy

Capacity is a general fitness and stretching application and is not intended to collect more personal information than is necessary to provide an account and subscription access.

If a user is below the age at which they can lawfully consent to the relevant processing or agree to the service without parental or guardian involvement, they should use Capacity only with appropriate permission where required by law.

If we become aware that we have collected personal information from a child in circumstances where parental or guardian authorisation was legally required and was not obtained, we will take appropriate steps to delete the information or otherwise comply with applicable law.

Changes to This Privacy Policy

We may update this Privacy Policy when Capacity, our service providers, or applicable legal requirements change.

If we make a material change, we will take reasonable steps to make the updated policy available through the app, our website, or another appropriate method.

The date at the top of this Privacy Policy shows when it was last updated.

Contact Us

f you have questions about this Privacy Policy, want to exercise a privacy right, or need support with your account, contact:

[DEVELOPER LEGAL NAME]
[SUPPORT / PRIVACY EMAIL OR SUPPORT URL]
United Kingdom