Privacy Policy
Last updated 2 August 2026. Effective from the first public release of the Ageproof app.
Ageproof points your iPhone camera at you to measure how you move. That is about as personal as an app gets, so this policy is written to be read, not to be survived.
The short version
Your camera video never leaves your iPhone. It is analysed live on the device and thrown away. We never receive it, never store it, and could not retrieve it if we wanted to.
Your scan results live in your own iCloud. They sync between your devices through your private Apple account. We cannot read them.
We do not sell your data, and we do not track you across other apps or websites. There are no advertising networks in this app.
Who we are
Ageproof is operated by Grammar Ghost, Inc., registered in Quebec, Canada. For anything in this policy, including any request about your data, write to support@ageproofapp.com. We are the data controller for the information described below.
Your camera and your video
When you run a movement scan, the app uses the camera to measure joint angles and hold times on the device itself, using Apple's on-device vision framework. Frames are measured as they arrive and discarded immediately.
- Video is never uploaded to us or to anyone else.
- Video is never written to your photo library or to a file.
- No image, frame, thumbnail, or clip is retained after a scan ends.
What survives a scan is a small set of numbers and dates: measured angles, hold durations, which movements you completed or left out. Those are your scan results, described next.
Where your scan results live
Your scan results, your daily routine history, and your practice settings are stored on your iPhone and synced through your own private iCloud database using Apple's CloudKit. This is the same private area your other apps' iCloud data uses.
That means your results move between your devices without passing through a server of ours. We have no access to your private CloudKit database and cannot read, export, or restore its contents. If you sign out of iCloud or turn off iCloud for Ageproof, syncing stops and your data stays local to the device.
What we collect, and why
| What | Why | Who handles it |
|---|---|---|
| Purchase history — which subscription you bought, when it renews, whether it is active | To unlock what you paid for, keep it unlocked across your devices, and honour restores and refunds | Apple, and our subscription provider RevenueCat |
| An account identifier — an opaque ID from Sign in with Apple or Google, plus the subscription ID linked to it | So your subscription follows you if you delete and reinstall, or move to a new phone | Us, RevenueCat |
| Usage data — which screens are opened, which features are used, whether something failed | To find broken flows and see which parts of the app actually get used | Our analytics provider, PostHog (in app versions where analytics is active) |
| Paywall interactions — which offer was shown and what you did with it | To run and measure the subscription screens | Superwall |
Our legal basis for the purchase and account data is performance of our contract with you — we cannot deliver a subscription without it. For usage data, our basis is legitimate interest in keeping the app working and improving it; the data is collected without a name or email attached.
What we deliberately do not collect
- Camera video or images. Covered above. Nothing leaves the device.
- Health or fitness records. Ageproof does not read from or write to Apple Health. What you tell the app inside a session — how an exercise felt, how much effort it took, which movement you swapped — stays on your device and in your private iCloud. It is never sent to our analytics.
- Your name or email address from sign-in. Sign in with Apple is configured to request no name or email at all. If you sign in with Google, Google's response includes your email address; we read the account identifier from it and store nothing else. We hold no mailing list built from sign-ins. One clarification so this claim is exact: the app asks for a first name during setup so it can address you — that name stays on your device and in your private iCloud alongside your scan results, where we cannot read it. And if you email support, we naturally see your email address and keep the thread for as long as it takes to help you.
- Location, contacts, photos, microphone, or your device's advertising identifier. None of these are requested.
- Cross-app or cross-site tracking. We do not track you across other companies' apps or websites, and we do not share data with data brokers or advertising networks. This is why the app never shows you Apple's tracking permission prompt.
Who else is involved
We use a small number of service providers. They process data on our instructions and are not permitted to use it for their own purposes.
- Apple — App Store payments, Sign in with Apple, and the iCloud storage your results sync through.
- RevenueCat — subscription state. It receives an opaque identifier derived from your sign-in, never your raw Apple or Google account ID.
- Superwall — delivers and measures the subscription screens.
- PostHog — product analytics, as described above.
- Google — only if you choose Sign in with Google, and only to verify that sign-in.
If we are ever legally compelled to disclose information, we will comply only to the extent required. Note that this cannot produce your camera video or your private iCloud contents, because we do not hold either.
How long we keep things
- Camera frames — discarded within milliseconds, during the scan.
- Scan results and routine history — kept in your own iCloud until you delete them or delete the app's iCloud data. You control this, not us.
- Purchase and account records — kept while your subscription is active and for as long afterwards as tax and accounting rules require.
- Usage data — retained for up to 24 months, then deleted. In app versions where analytics is not yet active, this data is not sent at all.
Your choices and your rights
Depending on where you live — including the UK, the EU, and California — you have the right to ask what personal data we hold about you, to get a copy, to have it corrected, to have it deleted, and to object to some processing. You also have the right to complain to your local data protection regulator.
To exercise any of these, write to support@ageproofapp.com. We will respond within 30 days. There is no charge, and asking costs you nothing in the app.
Two things you can do without asking us:
- Delete your results: deleting the Ageproof app and turning off its iCloud data in Settings → your name → iCloud → Manage Account Storage removes the scan history we cannot reach anyway.
- Cancel your subscription: in Settings → your name → Subscriptions. Subscriptions are managed by Apple, so cancellations and refunds run through Apple, not us.
Children
Ageproof is built for adults and is not directed at children. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with data, write to us and we will delete it.
International transfers
Our service providers are based in the United States and the European Union, so the limited data described above may be processed outside your country. Where data leaves the UK or the EEA, transfers rely on the UK International Data Transfer Addendum or the EU Standard Contractual Clauses.
Changes to this policy
If we change what we collect, we will update this page and change the date at the top. Material changes — anything that widens what we collect or who receives it — will be surfaced in the app before they take effect, not buried here.
Contact
Questions, requests, or corrections: support@ageproofapp.com.