Privacy Policy

1. Information we collect

• Account information, such as your username, email address, account identifiers, and optional profile picture.
• Sign-in information handled by AWS Cognito and, if you choose one, Google or Apple. Braced does not receive or store your plain-text password.
• Workout and fitness information you enter, including sessions, dates, exercises, templates, notes, sets, repetitions, weight, duration, distance, statistics, and personal records. This information may reveal details about your fitness or physical health.
• Media you choose to upload, such as profile pictures, exercise images or demonstrations, and images attached to feedback.
• Feedback and support information, including messages, problem reports, suggestions, reference links, optional attachments, app version, platform, operating-system version, and timezone.
• Subscription information, such as product and store identifiers, entitlement status, renewal or expiration status, purchase environment, management URL, and related transaction or event identifiers. Braced does not receive your full payment-card details.
• Network, request, and security metadata automatically processed by our hosting and authentication providers. Depending on their systems and settings, this may include IP address, request details, timestamps, and error or security information. Braced does not use this information for advertising.

2. Sources and device permissions

We receive information directly from you, generate information through your use of Braced, and receive limited information from service providers such as identity providers, app stores, and RevenueCat.

Braced asks for camera or photo-library access only when you choose to take or select an image. You can change these permissions in your device settings. The current app does not access precise location, contacts, HealthKit, Health Connect, or advertising identifiers.

3. How we use information

• Create and secure your account and authenticate sign-ins.
• Store, synchronize, and display your workouts, templates, media, and statistics across supported devices.
• Generate advanced statistics and AI training insights when you request them.
• Provide public workout templates created by Braced and keep your custom templates private to your account.
• Verify purchases, maintain subscription access, prevent fraud, and process billing-related events.
• Respond to feedback and support requests.
• Operate, troubleshoot, secure, and improve Braced, and comply with legal obligations.

4. AI training insights

When you request AI analysis, Braced creates a limited snapshot of relevant workout statistics, including training frequency, exercise performance, equipment and muscle distribution, and trends. The snapshot and your timezone offset are sent through the Braced backend to OpenAI to generate the analysis. The request is designed not to include direct account identifiers such as your name, email address, password, or payment-card information.

Braced stores generated insights so you can view them again and to limit repeated AI requests. AI output can be incomplete or inaccurate and is provided for general information only, not as medical advice.

5. Service providers and disclosures

We disclose information when needed to provide Braced, complete transactions, protect the service or its users, respond to legal process, or comply with law. We require providers that process information on Braced's behalf to protect it consistently with this policy and applicable law. Current providers include:

• Amazon Web Services, including Cognito, Lambda, API Gateway, database hosting, S3 file storage, and email delivery.
• OpenAI, for the workout analysis described above.
• RevenueCat, for subscription entitlement and purchase-event management.
• Apple and Google, for app distribution, store purchases, renewals, cancellations, and refunds.
• Google or Apple, if you use the corresponding sign-in option.

App stores and identity providers may also process information under their own privacy policies. We do not sell personal information, share it for cross-context behavioral advertising, or include third-party advertising SDKs in the current app.

6. Tracking and Do Not Track

Braced does not track your activity across other companies' apps or websites for advertising. The mobile app does not respond to browser Do Not Track signals because it does not perform that kind of tracking. Other parties do not collect personal information through Braced for cross-service advertising.

7. Storage, retention, and deletion

Braced keeps local app data on your device and synchronizes account data to its backend. Account and workout information is kept while your account is active. AI results, feedback, technical logs, security records, and subscription records are kept according to operational, fraud-prevention, dispute-resolution, accounting, and legal needs.

Clear Local Data removes local app records but does not delete synchronized server data or your account. Delete Account permanently removes your Braced account and associated data from our active systems, including synchronized workouts, custom exercises and templates, uploaded media, feedback and attachments, cached AI results, and Braced subscription records. Routine backup copies may remain temporarily until they are overwritten and are used only for disaster recovery, security, or legal compliance.

We also delete the customer profile associated with your Braced account from RevenueCat. This does not cancel an active app-store subscription or erase purchase history held by Apple or Google. If you later create a new Braced account and restore purchases, the store may provide the purchase again and RevenueCat may create a new customer profile. App stores and identity providers retain their own records under their policies.

8. Security and international processing

We use reasonable technical and organizational safeguards, including authenticated API access, managed cloud infrastructure, and restricted storage for uploaded files. No system can guarantee absolute security. Braced and its providers may process information in countries other than your own, including the United States and countries where Amazon Web Services operates, subject to applicable legal safeguards.

9. Your choices and privacy rights

You can update certain profile information in the app, manage device permissions in your system settings, manage subscriptions through the store, clear local data, or delete your account from Settings. Depending on where you live, you may have rights to access, correct, delete, restrict, or object to the processing of your personal information. You may also have the right to receive a copy, withdraw consent, appeal a denied request, or complain to a privacy or data protection authority.

Workout information and derived fitness insights may qualify as consumer health data under some laws. Where those laws apply, you may have additional rights concerning the collection, sharing, withdrawal of consent, and deletion of that information. See the Consumer Health Data Privacy Policy.

Contact us to exercise a right or ask a privacy question. We may need to verify your identity before completing a request, and we will not discriminate against you for making a privacy request.

10. Legal bases for EEA and UK users

Where the GDPR or UK GDPR applies, we process information as needed to provide the service you request, comply with legal obligations, and pursue legitimate interests such as securing and improving Braced. We rely on consent when it is the appropriate legal basis, including for optional device permissions. You may withdraw consent through device settings or by contacting us, without affecting earlier processing.

11. Children

Braced is not intended for children under 13, and we do not knowingly collect personal information from them. If the law where you live requires a higher minimum age to use an online service without parental authorization, that higher age applies. If you believe a child has provided personal information contrary to this rule, contact us so we can investigate and delete it.

12. Changes and contact

We may update this policy as Braced changes. We will update the effective date and provide additional notice of material changes when required.

Privacy contact: Airat Akhmadullin, operator of Braced. Email privacy@getbraced.app.