Privacy Policy

Break The Pattern LLC ("BootyScroll," "we," "us," or "our") operates the BootyScroll mobile application. By using the App, you agree to this policy.

1. Who we are

Data controller (GDPR): Break The Pattern LLC, 1309 Coffeen Avenue, STE 1200, Sheridan, Wyoming 82801, United States.

Contact: privacy@breakthepattern.app

2. Information we collect

Information you provide

• • Identity (name/nickname, email) for account creation
• • Account credentials (hashed password or Apple ID token) for authentication
• • Profile content (workout goals, streak history, personal bests, achievements) for core functionality
• • Configuration (notification times, theme) for personalization
• • Subscription (plan and trial status via RevenueCat) for billing

Information collected automatically

• • Workout data (squat count, rep detection, session duration, calories) for fitness tracking
• • Usage events via PostHog (EU region) for analytics
• • Crash data via iOS crash reports (opt-in) for bug fixing
• • Purchase history via Apple/RevenueCat for subscription management
• • User ID (UUID at signup) for linking data

Camera

The App uses your camera to detect squats using on-device machine learning (MoveNet Lightning). NO video, images, or pose data are ever transmitted to our servers or any third party. Camera processing happens entirely on your device and is discarded after each rep is counted. Revoke access in iOS Settings → Privacy & Security → Camera.

Apple Health (HealthKit)

With your permission, the App writes squat sessions to Apple Health as strength training workouts. We do not read from HealthKit. Revoke access in iOS Settings → Privacy & Security → Health → BootyScroll.

Information we do NOT collect

Video or images from camera (on-device only, never stored or transmitted), precise geolocation, contacts, browser history, advertising identifiers (IDFA).

3. How we use your information

App functionality, personalization, authentication, subscription management, analytics (PostHog EU), HealthKit integration, service emails only (no marketing unless opted in), legal compliance.

We do not use your data for advertising or sell it.

4. Legal bases for processing (GDPR)

• • Contract (providing the service)
• • Legitimate interest (analytics, fraud prevention)
• • Consent (camera access, HealthKit, notifications — all revocable in iOS Settings)
• • Legal obligation (tax records, lawful disclosure)

5. Who we share information with

• • Supabase Inc. — database/auth hosting (US)
• • RevenueCat Inc. — subscription management (US)
• • PostHog EU — product analytics (EU)
• • Apple Inc. — auth, payments, HealthKit (US)

Camera and pose data are never shared — they never leave your device. No advertising networks, data brokers, or unlisted third parties.

6. International transfers

US-based. EEA/UK/Swiss transfers rely on EU Standard Contractual Clauses for Supabase and RevenueCat. PostHog stores analytics in the EU.

7. Data retention

• • Account + workout data: until you delete your account (via Profile → Delete Account)
• • Analytics: up to 12 months, then aggregated
• • Subscription records: 7 years
• • Backups: 30 days after deletion
• • Camera/pose data: never stored — discarded after each rep

8. Your rights

Access, correct, delete (via Profile → Delete Account), export (email privacy@breakthepattern.app), revoke camera access (iOS Settings), revoke HealthKit access (iOS Settings), object to processing, withdraw consent.

EEA/UK: right to complain to local DPA.

California (CCPA/CPRA): right to know, delete, correct, non-discrimination — we do not sell or share personal information.

Respond within 30 days.

9. Children

13+ only. Contact privacy@breakthepattern.app to report.

10. Security

TLS, Supabase Row-Level Security, hashed passwords. Camera data never stored or transmitted.

11. Changes

Material changes in-app or by email 7 days before taking effect.

12. Contact

privacy@breakthepattern.app

Break The Pattern LLC
Attn: Privacy
1309 Coffeen Avenue, STE 1200
Sheridan, Wyoming 82801