Privacy policy

Controller

Tobias Wissmüller
Groschenweg 41g
81825 München
Germany
Email: hello+beatrep@ramuslabs.com
More details: Imprint

In short

Beatrep works on your device and needs no account. Camera frames, poses and Apple Health data stay on your device. No ads, no tracking. Beatrep sends anonymous usage statistics to our own server; a random install ID is added only if you allow it.

Camera and reference movements

The camera is used to record reference reps and to count repetitions. Frames are analysed on your device to estimate body movement. They are not stored and not sent to us or anyone else. For a reference rep, Beatrep keeps the trimmed movement data and, on that device, a short video clip so you can review it.

Training records

Exercises, sessions and workouts (names, dates, sets, reps, optional weight and heart-rate samples) are stored on your device and are never sent to our server. If you are signed in to iCloud, records sync through your private iCloud database (CloudKit) under Apple’s terms. Video clips do not sync. We have no access.

Optional permissions

• Bluetooth connects a heart-rate sensor; readings are stored with the workout on your device.
• Apple Health lets Beatrep read body composition and heart rate and save your workouts.
• Calendar lets Beatrep put your sessions into Apple Calendar.

None of them is needed for counting reps. You control each in your device settings.

Usage statistics

On iPhone, iPad and Mac, Beatrep sends anonymous usage events to our own server (api.beatrep.ramuslabs.com, Ramus Labs, hosted in the EU). An event says which feature was used (the app was opened, an exercise or session was created, a reference was recorded, a workout was started or finished and whether the camera counted, the subscription screen was shown, a subscription was bought), when, the app version and the platform. Events never contain camera images, body or pose data, repetitions, weights, heart rate, exercise names or workout details, and no name, account or location. We do not sell them, share them with others or use them for advertising. The Apple Watch app sends no usage events.

Install ID (only with your consent). The app asks you once whether these events may also carry an installation ID: a random number created on your device. It lets us recognise the same installation over time, for example to count active installations and to see whether people keep training. If you say no, no installation ID is created and the events stay anonymous; the app works the same either way. You can change your answer at any time in Settings › Usage statistics; switching it off deletes the installation ID on your device, also from events that have not been sent yet.

Legal basis. For the anonymous events, our legitimate interest in understanding which features are used and improving the app (Art. 6(1)(f) GDPR); for the installation ID, your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG).

Retention. Usage events wait on your device until they can be sent; events that could not be sent within 30 days are deleted there. On our server each event is kept only until it has been counted, and is deleted at the latest 30 days after it arrived (usually after 3 days). If you allowed it, an event carries a random installation ID, which is deleted together with the event. We keep only daily counts per event and app version, which do not relate to any installation or person; we keep them without a time limit. Our server does not store or log your IP address: the web server writes no access logs, and the app server neither stores nor logs IP addresses, and does not log installation IDs. The app sends no device identifier, so our server stores nothing that identifies your device. Technical error logs are limited in size, older entries are overwritten, and they are deleted with every update of the server software. Our hosting provider makes daily backups of the server, each kept for 7 days, so deleted data can remain in a backup for up to 7 more days.

Subscription

Your first exercise is free; more need Beatrep Pro, billed by Apple through your Apple Account. We never see payment details.

Purchases are validated by RevenueCat, Inc. (USA). To check what you have bought, the app sends RevenueCat a randomly generated app user ID, technical device and app information (such as the operating system version) and the store transaction. RevenueCat creates the ID; it is not linked to your name, your store account or any other identity. The legal basis is the performance of the purchase contract and our legitimate interest in verifying purchases reliably (Art. 6(1)(b) and (f) GDPR). Data is transferred to the USA under the EU-US Data Privacy Framework and standard contractual clauses. See revenuecat.com/privacy.

No camera frames, movements, exercise names, workout history or health data are ever sent to RevenueCat.

App downloads

When you download or update the app, the App Store or Google Play processes data under their own privacy policies. We only receive aggregated, anonymous statistics such as download counts.

Contacting us

If you write to us, for example with “Contact support” in the app, we process your email address and message only to answer you (Art. 6(1)(b) and (f) GDPR). The app may pre-fill app version, platform and OS version; you can edit the mail before sending it.

Your rights

Under the GDPR you have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object (Art. 21). You can withdraw any consent at any time with effect for the future (Art. 7(3)). Write to hello+beatrep@ramuslabs.com.

Most data never reaches us. It stays on your device or in your own iCloud account, and you can delete it yourself at any time by removing the app or its files.

Right to lodge a complaint

You can complain to a data protection supervisory authority, in particular in the member state where you live. The authority responsible for us is: Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach.

Children

Our apps work without an account and do not ask for your age. We do not knowingly collect personal data from children under 16.

Changes

When the app or the law changes, we update this policy. The version published here applies.