Privacy Policy

This policy explains what [Legal entity name] ("DexQ", "we", "us") collects when you use the DexQ website and the DexQ apps for iPhone, iPad, Apple Watch and Mac (together, the "Services"), how we use it, and the choices you have. We have tried to keep it plain. If something here is unclear, write to us at [support@yourdomain].

The short version

• We collect your email address and a record of the desk exercises you complete. That is what powers your streak and daily target.
• Apple Health data is read on your device to time cues and show today's activity. It is not sent to our servers.
• The Mac app's camera check runs on your Mac. Camera images are not saved or sent anywhere.
• We do not sell your data, and we do not use it for advertising.
• You can delete your account from the app.

1. Information we collect

Information you give us

• Account details. Your email address, used to sign you in with a one-time code. You can optionally add a first name, last name and profile picture.
• Community invitations. If you invite someone to a challenge, we process the email address you enter in order to send the invitation.
• Support messages. What you send us when you contact us.

Information created when you use DexQ

• Exercise completions. Which exercise you finished, when, and which device you used (watch, phone, iPad or Mac).
• Breathing sessions. The sessions you complete in the Breathing tab, with their time and style.
• Work-session timing. Durations of work sessions, recorded when you open and quit the app.
• Settings. Your daily target and exercise durations.
• Challenge activity. The challenges you join and your score in each. A score is calculated on your device from your completion history and then synced.
• Streaks and stats. These are calculated from your completion history. We do not keep them as separate counters.

Information from your device

• Apple Health (optional). If you allow it, DexQ reads stand time, movement and active energy to time exercise cues and to show today's activity. If you allow writing, DexQ can record your completed desk exercises to Apple Health. DexQ does not upload what it reads from Apple Health to our servers, does not use it for advertising, and does not share it with anyone. You can change this at any time in the Health app or in iOS Settings.
• Camera (Mac app, optional). The Mac app can use your camera to detect whether you are at your desk. Detection runs on your Mac using Apple's Vision framework. Images are not stored and not transmitted.
• Notifications. Exercise cues on Apple Watch are delivered by the watch app. The phone and iPad apps do not send cues.
• Technical data. Like any web service, our servers receive your IP address, the type of device and app version making a request, and timestamps. We use these to keep the service running and secure.

What we do not collect

We do not collect your precise location, contacts, photos, or advertising identifiers. We do not currently use third-party analytics or advertising SDKs. If that changes, we will update this policy before it takes effect.

2. How we use your information

• To sign you in and keep your account secure.
• To record your completions and sync them across your watch, phone, iPad, Mac and the web.
• To calculate your streak, daily target progress and challenge scores.
• To run community challenges, including sending invitations.
• To maintain, fix and improve the Services, and to prevent abuse.
• To respond to you and to meet legal obligations.

We do not use your information to build advertising profiles, and we do not make decisions about you that have legal effects using automated means.

3. How we share it

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

• Other challenge members. If you join a challenge, the other members can see your name (or email if you have not set one), your picture if you added one, and your score in that challenge. Leaderboards exist only inside challenges you chose to join.
• Service providers. Companies that help us run the Services, such as our hosting provider and the provider that delivers sign-in code emails. They may process your data only to provide their service to us.
• Apple. The apps run on Apple's platforms. Apple's own privacy terms apply to App Store, notifications and Health.
• Legal and safety. When required by law, or to protect the rights, safety or property of you, us or others.
• Business changes. If we are part of a merger, acquisition or sale of assets, your information may transfer to the new owner, who must honor this policy.

4. Where your data lives

Your account and completions are stored in our own database (PocketBase) on a server we operate. Each device also keeps a local copy so the app keeps working offline, and syncs when it reconnects. Your information may be processed in countries other than your own. Where required, we use appropriate safeguards for those transfers.

The Apple Watch app gets its sign-in session from your iPhone over Apple's WatchConnectivity and keeps it in its own Keychain. Signing out on the phone signs out the watch.

5. How long we keep it

We keep your account data while your account is open. When you delete your account, we delete your personal information and your records, except what we must keep to meet legal obligations or resolve disputes, which we keep only as long as needed. Backups are overwritten on their normal schedule.

6. Your choices and rights

• Access and correction. You can see and edit your profile in the app.
• Deletion. In the iPhone or iPad app, go to Settings and choose Delete account. We then remove your account and data, normally within 5 business days. You can also email [support@yourdomain].
• Apple Health and camera. Turn these off at any time in your device settings.
• Sign out. Signing out on your phone also signs out your watch.

Depending on where you live, you may also have the right to ask us for a copy of your data, to correct or delete it, to object to or restrict some processing, to move your data, and to complain to a regulator. To exercise a right, email [support@yourdomain]. We may need to confirm it is you, and we will reply within the time your local law requires (generally 30 to 45 days). You will not be treated differently for using these rights.

Residents of the EEA, United Kingdom and Switzerland

We rely on these legal bases: contract, to provide the Services you asked for; legitimate interests, to keep the Services secure and working; consent, for optional device features like Apple Health and the camera, which you can withdraw at any time; and legal obligation, where the law requires it. You may complain to your local data protection authority.

Residents of US states with privacy laws

We have not sold personal information or shared it for targeted advertising in the past 12 months. You may appoint an authorized agent to make a request for you, and you may appeal a decision by replying to our response.

7. Children

DexQ is not directed at children under 13, and we do not knowingly collect their information. If you believe a child under 13 has given us personal information, write to [support@yourdomain] and we will delete it. In some places the minimum age is higher, and you must meet your local minimum.

8. Security

We use reasonable technical and organizational measures to protect your information, including encrypted connections, and we store sign-in sessions in the system Keychain on Apple devices. No system is perfectly secure. If a breach affects you, we will notify you as the law requires.

9. Not medical software

DexQ is a wellness habit tracker. It is not a medical device and is not covered by health-privacy laws such as HIPAA in the United States. Do not rely on it to store information that needs that level of protection.

10. Changes to this policy

When we make material changes, we will update the date at the top and give notice in the app or by email before they take effect. If you keep using the Services afterwards, the updated policy applies.

11. Contact

[Legal entity name] Email: [support@yourdomain]