Privacy Policy

1. Information you provide

• Training and preferences. Exercise sessions, completion dates, daily goals, streaks, achievements, XP, challenges, reminder settings, language, theme, and a display name you choose for the league interface.
• Progress photos. Photos you take using the camera feature and their dates are saved in the app's local database. The current app does not upload these photos to our backend or use them for face recognition, biometric identification, or medical diagnosis.
• Support messages. Feedback text, message timestamps, sender and recipient identifiers, and information you voluntarily include in a message are transmitted to our support backend. If you provide an email address through the app or contact us by email, that address and your correspondence are processed to respond.
• Purchases. Apple processes payment. RevenueCat and our app process purchase records, product identifiers, subscription status, and premium entitlements. We do not receive your full payment-card number.

2. Identifiers and technical information

The app creates a pseudonymous numeric user identifier through our backend; a conventional username-and-password account is not required. Backend requests can include the app identifier and version, platform, operating-system version, and premium status. Analytics and diagnostic services may process installation identifiers, session and feature events, device information, error details, and network information such as an IP address. Country or region information may come from device settings or approximate IP-based location; the app does not request precise location permission.

3. Local storage, photos, and widgets

Training history, goals, streaks, XP, achievements, progress photos, league state, preferences, and related app data are stored using Core Data and UserDefaults, with selected training and streak information shared with Home Screen widgets through an App Group container. Camera access is requested for taking progress photos. You can decline camera permission and use features that do not require the camera. You can delete individual progress photos through the app.

Apple device backups and transfers may include app data depending on your device settings. Removing the app or clearing its local data can remove locally stored information, but does not automatically erase records already held by support, purchase, analytics, or infrastructure services.

4. Backend, support, and leagues

Our backend creates the app user identifier and handles support conversations. Account and support request bodies use the app's encrypted-request workflow. The league feature retrieves league definitions, leaderboard slots, and reference profiles from Supabase; country-based queries can include a country or region code from device settings. The display name you enter and your league state are saved locally in the current implementation. These reads do not upload your progress photos or local training database.

Network requests disclose connection information, including an IP address, to the receiving server or provider.

5. Analytics, diagnostics, and remote configuration

• Firebase Analytics measures app usage through automatic and app-defined events.
• Firebase Remote Config supplies app configuration, server routing, paywall values, and exercise-video links.
• Mixpanel processes product-usage events and event properties, including premium status and environment where supplied.
• Sentry processes crash and error diagnostics in iOS release builds.

Availability and collection depend on the app version, build configuration, and whether the relevant service is configured. These services may process app and device identifiers, operating-system information, usage events, crash details, and network information. Their handling is described by Firebase, Mixpanel, and Sentry.

6. Reminders and notifications

The app schedules local training reminders using the notification permissions and settings you choose. OneSignal is also integrated for push notifications when configured and may process a push token, subscription or installation identifier, permission status, device information, and notification interactions. Local reminders and remote push delivery are different services. You can change reminder settings in the app and notification permissions in your device settings. See OneSignal's privacy policy.

7. Purchases and RevenueCat

RevenueCat manages offerings, purchase verification, restore operations, and premium access with Apple. It may process a pseudonymous app-user identifier, product and transaction information, subscription and entitlement status, locale, and device or app metadata. See RevenueCat's privacy policy. Billing records are handled separately by your app store.

8. Exercise videos and external services

Exercise demonstrations can use embedded YouTube players. Loading or interacting with these videos can disclose network, device, browser/player, and viewing information to Google or YouTube under Google's privacy policy. Video delivery, external links, app stores, email services, and destinations you choose for sharing have their own privacy practices.

9. Purposes and disclosures

Information is processed to provide training and progress features, deliver reminders and videos, verify premium access, answer support requests, configure and improve the app, diagnose failures, and maintain security. Relevant information is shared with the service providers described above for these functions. Information may also be disclosed where required by law, to protect rights or safety, or in a business transfer subject to applicable protections. We do not sell your progress photos.

10. Retention, deletion, and your choices

Local data remains until deleted using available app controls or removed with the applicable app or device data. Server-side support records, purchase records, analytics, and diagnostics have separate retention arrangements; uninstalling the app does not itself delete those records or cancel subscriptions. We do not specify one retention period for every data category.

Contact support to request access, correction, or deletion of information linked to your app user identifier or correspondence. We may need information to locate the records and verify the request. Requests are handled subject to applicable law, technical limitations, and records that must be retained. Your rights may also include objection, restriction, portability, or a complaint to your local data-protection authority, depending on where you live. Avoid including unnecessary medical or other sensitive information in support messages.

11. Security and international processing

We use technical safeguards for app and service data, but no storage or transmission method is completely secure. Providers may process information in countries other than your own. Applicable protections and provider arrangements govern that processing.

12. Children

Jawline Max is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided information through our services, contact support so we can investigate and address it. Higher local age requirements may apply.

13. Changes and contact

This policy may be updated when the app, services, or information practices change. The date above identifies this version. For privacy questions or requests, contact Burak Eray Kayis at support@jawlinehero.com.