Privacy Policy

North Tumbleweed LLC | Effective April 4, 2026

1. Overview

North Tumbleweed LLC ("we", "us", "our") develops and publishes mobile applications and web services. This Privacy Policy explains what information we collect, how we use it, and what rights you have regarding your data across all of our products.

By using any of our apps or services, you agree to the practices described in this policy. If you do not agree, please do not use our products.

2. Data We Collect

2.1 Data You Provide

Depending on which of our products you use, you may provide us with:

Photos you take or select from your photo library
Text, messages, or prompts you enter into our apps
Screenshots or images you import for analysis
Captions, notes, or other written content you create
Account information (email, authentication credentials) if you create an account

2.2 Data Collected Automatically

App usage selections managed by operating system frameworks (e.g., screen time or app restriction preferences), which may be opaque and encrypted by the OS
GPS coordinates when you use location-based features (only with your permission)
Clipboard content when you explicitly tap to paste into our apps (read only on your action, never in the background)
Scores, progress history, and other analytics stored locally on your device
Basic subscription status via payment processors (anonymous user identifiers)

2.3 Data We Do NOT Collect

  We do not collect your name, email address, phone number, or any personal identity information unless you voluntarily create an account. We do not use analytics SDKs, advertising trackers, or fingerprinting technologies.

3. Camera Usage

Some of our apps request camera access for the following types of features:

Body pose or motion detection — The camera is used to detect body movement during exercises. All image processing happens entirely on-device. Camera frames are analyzed in real-time and immediately discarded. No images or video are ever uploaded, stored, or transmitted.
Photo capture — The camera is used to take photos for use within the app. Photos you choose to keep are stored locally and, if you opt in, may be uploaded to cloud storage for backup.
Image analysis — The camera is used to capture images for on-device analysis and scoring. All processing happens on your device. No images are uploaded to our servers or transmitted to third parties.

  For features that process camera data on-device (such as pose detection or image analysis), camera data never leaves your device. We cannot access, view, or retrieve any camera imagery.

4. Location Data

Some of our apps request location permission to enable features such as geotagging content or placing entries on a map.

Location is captured only at the moment you use a location-dependent feature
Location data is stored locally on your device
If you upload content to cloud backup, associated coordinates may be included
You can deny location permission and still use the app. Location-dependent features will simply be unavailable.

Apps that do not use location features will never request location access.

5. Clipboard Access

Some of our apps may read your clipboard when you explicitly tap to paste content into an input field. This is a standard paste action initiated by you.

Clipboard content is used only to populate the input field
We do not read the clipboard in the background or without your action
Clipboard content is not stored, logged, or transmitted separately from your input

6. Local Storage

Our apps store data locally on your device using standard platform storage frameworks. This may include:

Your preferences and settings
Chat histories and conversation logs
Content drafts and metadata
Media playback progress and bookmarks
Analysis results and scores
Activity counts and usage preferences

  Locally stored data stays on your device and is not accessible to us. When you delete an app, all local data is removed by the operating system.

7. How We Use Your Data

We use data strictly to provide app functionality:

Purpose	Data Used
Pose or motion detection	On-device camera frames (never transmitted)
AI chat, coaching, and analysis	Your messages sent to AI providers via our backend
Photo and media storage	Photos and media you choose to upload
Content playback	Streaming from cloud storage
Image analysis and scoring	On-device camera frames and locally stored photos
Subscription management	Anonymous purchase tokens via payment processors
Location tagging	GPS coordinates at the moment of content creation

We do not sell your data. We do not use your data for advertising. We do not build user profiles.

8. Third-Party Services

Our products integrate with third-party services as needed to deliver their features. Each service has its own privacy policy governing data it receives.

8.1 Payment and Subscription Processors

We use payment processors (such as RevenueCat, Stripe, or platform-native billing) to manage subscriptions and purchases. These services receive anonymous identifiers and purchase data. They do not receive your name, email, or other personal information from us unless you provide it directly.

8.2 AI Inference Providers

Your messages and inputs may be sent to one or more AI inference providers through our backend proxy to generate responses. These providers process your input according to their own usage and privacy policies. We do not store your messages on our servers beyond the duration needed to relay the request.

8.3 Cloud Storage Providers

Some of our apps use cloud storage providers for optional content backup or media delivery. These providers act as storage and delivery infrastructure. Your content is encrypted in transit and at rest.

8.4 Operating System Frameworks

Some of our apps use operating system frameworks (such as screen time or device management APIs) to provide their features. Data managed by these frameworks is controlled by the operating system vendor and may be opaque to us. We do not have access to the underlying data these frameworks manage on your behalf.

8.5 Authentication Providers

Some of our apps offer optional account creation using third-party authentication services (such as Apple Sign-In, Google Sign-In, or email-based auth). If you create an account, your authentication credentials are managed by the auth provider. Your data may be synced through the provider for cross-device access.

9. Data Retention and Deletion

Local Data

All locally stored data persists on your device until you either delete it within the app or uninstall the app. Uninstalling removes all local data.

Cloud Data

Content uploaded to cloud storage is retained until you delete it within the app. You may request full deletion of cloud-stored data by contacting us.

AI Conversations

Messages sent to AI providers are processed in transit. Our backend proxy does not persist your messages. Refer to each provider's retention policy for their data handling practices.

Account Data

If you created an account in any of our products, you can delete your account and all associated data from within the app's settings. You may also request account deletion by contacting us.

Subscription Data

Payment processors retain anonymous subscription records as needed to manage your purchase. You can request deletion through the processor or by contacting us.

10. Children's Privacy

Our products are intended for users aged 13 and older. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will delete it promptly.

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have the following rights:

Right of Access — Request a copy of the personal data we hold about you
Right to Rectification — Request correction of inaccurate data
Right to Erasure — Request deletion of your personal data
Right to Restriction — Request that we limit processing of your data
Right to Data Portability — Request your data in a structured, machine-readable format
Right to Object — Object to processing based on legitimate interests
Right to Withdraw Consent — Withdraw previously given consent at any time

Because most data stays on your device, exercising these rights is often as simple as deleting the app. For cloud-stored data or subscription records, contact us and we will respond within 30 days.

Legal basis for processing: We process data based on (a) your consent (camera, location, photo library permissions), (b) contract performance (providing app features you use), and (c) legitimate interest (subscription management).

12. Your Rights Under CCPA (California Residents)

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with the following rights:

Right to Know — You may request the categories and specific pieces of personal information we have collected
Right to Delete — You may request deletion of personal information we have collected
Right to Opt-Out of Sale — We do not sell personal information. There is nothing to opt out of.
Right to Non-Discrimination — We will not discriminate against you for exercising your CCPA rights

To exercise these rights, contact us at the email address below. We will verify your identity and respond within 45 days.

13. Security

We implement reasonable security measures to protect data in transit and at rest:

All network communication uses HTTPS/TLS encryption
Our backend proxy does not log or persist user messages
Cloud storage uses server-side encryption
On-device data benefits from hardware encryption and the device passcode

No method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

14. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Effective" date at the top of this page. We encourage you to review this policy periodically. Continued use of our products after changes constitutes acceptance of the updated policy.

For material changes, we will make reasonable efforts to notify you within the affected product.

15. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us:

North Tumbleweed LLC
Email: contact@northtumbleweed.com
Web: northtumbleweed.com