Privacy Policy
Uncurl - AI Posture Analysis
Last updated: October 14, 2026
Overview
DTC Brands US LLC, doing business as Uncurl ("we", "our", or "the App") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application.
Please read this privacy policy carefully. By using Uncurl, you agree to the collection and use of information in accordance with this policy.
Information We Collect
1. Personal Information
When you create an account, we collect:
- Email address - Required for account creation and communication
- Name (optional) - For personalization
- Password - Stored securely using bcrypt password hashing
2. Photos and Videos
- Photos and videos are processed on-device using Apple Vision when supported.
- With your explicit consent, cloud analysis sends photos/videos through Uncurl's server and temporary media storage to Google Gemini when the cloud feature is enabled.
- Media is not uploaded for successful on-device analysis. Uploaded media is scheduled for deletion after analysis; expired uploads are cleaned up periodically. Failed cleanup may delay deletion.
- Photos and videos are not intended to be retained permanently on our server.
3. Analysis Results
- Body-landmark measurements and posture assessment scores
- Identified posture issues
- Personalized exercise recommendations
- Historical analysis data (if you have an account)
4. App Activity and HealthKit
We store workout progress, journal entries, coaching conversations, preferences, and device notification tokens when you use those features. Server requests can generate operational logs.
With your permission, HealthKit activity data is read and completed posture workouts are written only on your device. HealthKit readings are never sent to Uncurl's server, Google Gemini, or a coach. You can manage Health access in iOS Settings or the Health app. Separately, in-app workout completion records are stored in your Uncurl account.
5. Purchase Information
Apple processes annual subscriptions through the App Store using StoreKit. We store verified purchase identifiers (including original transaction ID, transaction ID and product ID), an app-account identifier, purchase environment, subscription status and expiry. We do not receive your card number. Restore purchases uses Apple and our server to confirm your entitlement.
6. Coaching Referrals
If you agree to continue to Adam Trojanowski's independent booking service, we store your user ID, provider ID, disclosure consent version, creation time and a hash of a randomly generated referral token. The booking URL passes only that opaque referral identifier and generic campaign tags. We never share your name, email, posture photos, measurements or analysis data through this handoff. The coach may collect information and payment you provide directly under his own terms and privacy policy. Uncurl may receive an off-platform referral fee.
How We Use Your Information
We use your information to:
- Provide posture analysis - Measure standing body landmarks on device when supported, with consent-based cloud AI when enabled
- Personalize recommendations - Tailor exercises and tips based on your analysis
- Track your progress - Store historical data to show improvement over time
- Process payments - Verify App Store subscription entitlements
- Communicate with you - Send important updates and respond to support requests
- Improve our service - Analyze usage patterns to enhance the app
On-Device and Third-Party AI Processing
Apple Vision
On supported devices, Apple Vision detects body-pose landmarks directly on your device. Your media is not uploaded when this on-device analysis produces a reliable result.
Google Gemini AI
Important Disclosure: When enabled, Google's Gemini AI provides cloud analysis through Uncurl's server only with your consent.
When you consent to cloud processing:
- Your photos are securely uploaded to our servers
- Our servers send the photos to Google's Gemini AI API for processing
- Gemini AI analyzes the images and returns posture assessment data
- Our server attempts to delete uploaded media after analysis; periodic cleanup handles expired uploads
- Google may process your images according to their AI terms of service
What this means for you:
- Your photos and walking video are processed by a third-party AI service (Google) only with your consent when cloud analysis is enabled
- Google's AI processes the images to generate posture analysis
- We require your explicit consent before cloud AI processing occurs
- You can revoke AI consent at any time in Settings
Data Storage and Security
Where Your Data is Stored
- Account data: Stored on our backend and database hosted on Hetzner; cloud uploads use configured media storage
- Photos: Temporarily stored during analysis, then scheduled for deletion
- Analysis results: Stored in our database, linked to your account
Security Measures
- All data transmitted using TLS/SSL encryption
- Passwords hashed using bcrypt
- Database access restricted and monitored
- Access controls for authenticated account data
Data Retention
| Data Type | Retention Period |
|---|---|
| Account information | Until you delete your account |
| Photos/Videos | Deletion attempted after analysis and periodically for expired uploads |
| Analysis results | Until you delete your account |
| StoreKit subscription records | Until account deletion, subject to any legally required retention |
| Referral records | Account link removed on account deletion; de-identified referral records may remain |
Your Rights and Choices
You Have the Right To:
- Access your data - View all data we have about you in the app
- Delete your account - Delete your account and associated account data from Settings
- Revoke AI consent - Stop AI processing of your photos
- Export your data - Request a copy of your data
- Opt out of communications - Unsubscribe from non-essential emails
How to Delete Your Account
- Open Uncurl
- Go to Settings (tap your profile icon)
- Scroll to "Danger Zone"
- Tap Delete Account
- Confirm deletion
The app calls the authenticated DELETE /api/user/delete-account endpoint. It deletes:
- Your account and profile
- All analysis history
- All stored preferences
- Associated subscription records, workout history, journals and coach conversations
Referral records are de-identified by removing the account link. Deleting your account does not cancel your Apple subscription; cancel separately in Apple subscription settings. Apple and the independent coach manage information you provide to them separately.
This action cannot be undone.
Children's Privacy
Uncurl is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.
International Data Transfers
Your information may be transferred to and processed in countries other than your own. Our hosting and AI providers may process data outside your country. Contact privacy@getuncurl.com for information about processing locations and applicable transfer safeguards.
Changes to This Policy
We may update this privacy policy from time to time. We will notify you of any changes by:
- Posting the new policy in the app
- Updating the "Last Updated" date
- Sending an email notification for significant changes
Contact Us
If you have questions about this Privacy Policy or our data practices:
Email: privacy@getuncurl.com
Support: support@getuncurl.com — https://getuncurl.com/support
Address: DTC Brands US LLC, doing business as Uncurl 680 S Cache St, Ste 100-7403, Jackson, WY 83001, United States
California Privacy Rights (CCPA)
California residents have additional rights:
- Right to know what personal information is collected
- Right to know if personal information is sold or disclosed
- Right to opt out of sale of personal information
- Right to non-discrimination for exercising privacy rights
We do not sell your personal information.
European Privacy Rights (GDPR)
If you are in the European Economic Area, you have rights under GDPR including:
- Right of access
- Right to rectification
- Right to erasure
- Right to restrict processing
- Right to data portability
- Right to object
To exercise these rights, contact us at privacy@getuncurl.com.
Legal Basis for Processing:
- Consent (AI processing, marketing)
- Contract performance (providing the service)
- Legitimate interests (improving our service, security)
This privacy policy is effective as of October 14, 2026.