Privacy Policy

Effective date: December 15, 2025

This Privacy Policy explains how YourFlex ("YourFlex", "we", "us") collects, uses, and shares information when you use the YourFlex iOS app. If you do not agree with this policy, please do not use the app.

The app does not require you to create an account. Subscriptions are purchased through Apple and are linked to your Apple ID.

1) Data we collect

We collect the following types of information:

  • Data minimization. We aim to collect only the information that is reasonably necessary to provide and improve the App, maintain security, prevent abuse/fraud, and comply with legal obligations. We do not use your information for purposes that are incompatible with those described in this Privacy Policy without providing additional notice and, where required, obtaining your consent.
  • Information you provide in the app: onboarding answers (e.g., gender, age group, body focus areas, selected conditions, reminder time, daily check-ins, flexibility self-assessment, and preferences like music/voiceover).
  • Workout activity: sessions completed and session duration.
  • AI chat content: messages you type and the generated responses.
  • Support communications: if you email us, we receive the content of your message and any attachments you include. Please do not send sensitive personal information (e.g., government IDs, payment card details, or medical records) via email.
  • Device and app usage data: app events/interactions (e.g., screens viewed, buttons tapped, paywall interactions), device and app information (e.g., device model, iOS version, app version), and diagnostics (e.g., performance data and crash-related signals). We also collect identifiers used for analytics and attribution (e.g., IP address and device identifiers). If you allow tracking via iOS App Tracking Transparency, we and our attribution/ads partners may also use the Advertising Identifier (IDFA) for measurement and attribution.
  • Subscription status: information needed to unlock paid features (payment details are handled by Apple; we do not receive your credit card details).

We do not collect precise GPS location data.

Some onboarding items (for example, selected conditions) may be health-related and are used to tailor content and display safety warnings. We do not use health-related onboarding information (such as selected conditions) for advertising, marketing, or tracking, and we do not share it with advertising/measurement partners (such as Meta or TikTok) for profiling or retargeting. We also do not combine health-related onboarding information with data received from advertising partners for profiling or targeted advertising.

We may send limited onboarding attributes (such as gender and age group) to our analytics provider to understand usage patterns and improve the app. For clarity: when we share limited onboarding attributes for analytics, we limit them to non-health attributes (for example, gender and age group). We do not share your selected conditions or other detailed health-related onboarding answers with analytics, attribution, or advertising partners.

De-identified / aggregated data. We may create and use de-identified or aggregated data (data that does not identify you) for analytics, product improvement, and reporting. We do not attempt to re-identify de-identified data except as permitted by law.

Children. The App is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided personal information to us, please contact us at yourflex.co@gmail.com and we will take reasonable steps to delete it.

2) Apple Health / HealthKit

If you choose to connect Apple Health, YourFlex can write your workout history (duration only) to Apple Health so you can keep a record of your activity.

Accuracy and storage limitations. We only write workout duration that reflects sessions you complete in the App, and we do not write false or inaccurate data into Apple Health. We do not use iCloud to store or sync HealthKit data (including workout duration written to Apple Health).

Not medical records / HIPAA. YourFlex is a fitness and wellness app and is not a healthcare provider or "covered entity" under the U.S. Health Insurance Portability and Accountability Act (HIPAA). The app is not intended to store or transmit protected health information (PHI). Please do not use YourFlex to store or share medical records.

Not medical advice. The exercise, stretching and wellness content we provide is for general informational purposes only and is not intended as medical advice, diagnosis or treatment. You should consult your physician or other qualified health-care professional before starting any new exercise program or if you have questions about a medical condition. Never disregard or delay professional medical advice because of something you read or hear in the app.

  • We do not read data from Apple Health.
  • We do not use HealthKit data for advertising, marketing, or tracking.
  • We do not disclose HealthKit data to third parties.

You can revoke Health permissions at any time in iOS Settings / Apple Health.

3) AI features

If you use AI chat or AI-generated sessions, your prompts and limited app context needed to respond (such as preferences or focus areas you selected) are sent to our AI provider (OpenAI) to generate a response. Your AI chat history is stored locally on your device. We do not require an in-app account.

Processing by OpenAI. To generate AI responses, the content of your prompt (and limited app context needed to respond) is processed by OpenAI on its servers. OpenAI may retain API inputs/outputs for a limited period for abuse monitoring and security purposes, subject to OpenAI's then-current policies and any data-retention settings we have configured.

  • We ask for your permission before you use AI features for the first time.
  • We use a pseudonymous app identifier to enforce daily prompt limits, help prevent abuse/fraud, and support internal usage analytics. We may retain limited AI interaction logs for security, abuse prevention, and service improvement. We do not use AI inputs to serve personalized ads.
  • Please do not include sensitive personal information in AI messages (for example, medical records, financial information, or government IDs).

4) Third parties

We use the following service providers to operate and improve the app:

  • Amplitude — product analytics (understand app usage and improve features)
  • Adapty — paywalls and subscription analytics
  • Adjust — attribution and measurement (understand which campaigns led to installs/subscriptions)
  • Meta (Facebook) and TikTok — advertising measurement/attribution
  • OpenAI — AI-generated responses for the AI chat/workout generator
  • Apple — App Store payments/subscriptions and platform services (such as notifications, when enabled)

Third-party privacy policies. To learn more about how our service providers handle personal data, see:

International transfers. Our service providers may process information on servers in the United States and other countries. If you use the App outside the United States, your information may be transferred to and processed in countries that may have different data protection laws than your country of residence. Where required by applicable law (for example, for transfers from the EEA/UK/Switzerland), we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses (or another lawful transfer mechanism).

App Tracking Transparency (ATT). If you allow tracking, some partners (such as Adjust/Meta/TikTok) may receive device identifiers (including the IDFA) to measure ad performance and attribute installs/subscriptions. If you decline, we do not share the IDFA for tracking. We present Apple's App Tracking Transparency permission prompt before accessing or sharing the Advertising Identifier (IDFA). Allowing tracking is optional—you can use the App if you decline, and we do not block features or content if you choose not to allow tracking.

5) Retention

We keep information for as long as needed to provide the app, maintain security, prevent fraud/abuse, comply with legal obligations, and improve our services.

Analytics and attribution data is generally retained for 24 months, after which it may be anonymized or deleted according to each provider's policies.

Legal and safety disclosures. We may access, preserve, and share information if we believe it is reasonably necessary to: comply with law, regulation, legal process, or governmental request; enforce our agreements; detect, prevent, or address fraud, security, or technical issues; or protect the rights, property, and safety of YourFlex, our users, or the public.

  • Some data is stored locally on your device (for example, your settings).
  • Analytics and attribution data may be retained by our service providers under their own retention practices.

Security. We use reasonable administrative, technical, and organizational safeguards designed to protect information. These measures may include encryption in transit, access controls and least-privilege permissions, monitoring for abuse/fraud, and contractual requirements for service providers to protect information they process on our behalf. However, no method of transmission or storage is 100% secure.

If you request deletion, we will take reasonable steps to delete or anonymize information we control and, where feasible, request deletion through our providers' GDPR-compliant deletion mechanisms (for example, Amplitude and Adjust).

Security incidents. If we become aware of a security incident involving your information, we will take reasonable steps to investigate, mitigate harm, and notify affected users and/or regulators when and as required by applicable law.

6) Opt-out and your choices

  • Notifications: manage reminders in the app and in iOS Settings. Reminder notifications are optional and are not required for the App to function. We design reminders to be generic (for example, "Time to stretch") and not to include sensitive or health-related details.
  • Apple Health: connect/disconnect and manage permissions in iOS Settings / Apple Health.
  • Tracking/ads: you can decline App Tracking Transparency and manage tracking permissions in iOS Settings.
  • Uninstall: deleting the app removes data stored on your device; it does not automatically delete data already sent to third-party analytics/attribution providers.

Where required by law (for example, in the EEA/UK), we rely on your consent for certain processing (such as Apple Health, AI features, and tracking where enabled) and our legitimate interests to operate, secure, and improve the app. Depending on where you live, you may have additional rights under applicable law (such as access, deletion, correction, portability, or objection). Depending on your location, your rights may include: the right to access your information, request correction, request deletion, object to or restrict certain processing, request portability, and withdraw consent (where processing is based on consent). You may also have the right to lodge a complaint with your local data protection authority. To exercise these rights, contact us. For security, we may ask you to provide information to verify your request before we respond.

7) Contact

Changes. We may update this Privacy Policy from time to time. We will update the effective date above and, if changes are material, we may provide additional notice in the App.

Email: yourflex.co@gmail.com

Data controller: Andrei Kavaliou (sole proprietor)

Address: Warsaw, 02-101, Poland