1. What we collect
When you sign in with Apple or Google, we receive your email address, your name if you choose to share it, and your profile image. If you save a referral invite before installing the app, we store a hashed version of the email you enter for 90 days so the invite can be claimed at signup. While you use Suelto we also collect: a device identifier, when each session starts and how long it lasts, body-region ratings and discomfort levels you enter, your mobility assessment scores, optional age and comparison-group profile details for mobility comparisons, an optional public username for competitions, and your push-notification preferences. We do not ask for or store payment card details ourselves - purchases are handled by Apple, Google, and RevenueCat.
2. Where your data lives
Most of your day-to-day data is stored locally on your device in an encrypted SQLite database, so the app works offline. When you are signed in, your account data and session history sync to our Postgres database hosted by PlanetScale in the United States, US-east. Authentication is handled by Sign in with Apple and Sign in with Google. Subscription state is managed by RevenueCat together with Apple and Google in-app purchases.
3. How we use your data
We use your data to create and secure your account, keep your sessions and progress in sync across devices, personalize your stretching plan based on your assessment scores and discomfort ratings, calculate your mobility delta versus expected when you provide profile details, show private competition leaderboards to groups you join, deliver reminders if you have notifications turned on, and verify your subscription. We also log basic analytics events tied to your user ID, for example which sessions are completed and which features are used, so we can fix bugs and improve the app.
4. Health and wellness
Suelto is a general wellness app, not a medical device. The mobility scores, body-region ratings, and discomfort levels you record are used to tailor stretching sessions inside the app. They are not reviewed by a clinician and are not used to diagnose, treat, or prevent any medical condition.
5. Third parties we share data with
We share the minimum data needed with: Apple for Sign in with Apple and App Store in-app purchases, Google for Sign in with Google and Google Cloud services, RevenueCat for subscription status and entitlements, PlanetScale for Postgres database hosting in the US, and Vercel for hosting our API server. These providers process your data on our behalf under their own privacy and security commitments. We do not sell your personal data and we do not share it with advertisers.
6. Security
On-device data is stored in an encrypted SQLite database and authentication tokens are kept in secure device storage. All network traffic between the app and our server uses HTTPS. No internet service can promise perfect security, but we work to protect your information using industry-standard practices.
7. Deleting your account
You can delete your account from inside the app at any time. Deletion calls our server, DELETE /api/account, which cascades and removes all of your account data - sessions, assessments, ratings, analytics events, and subscription records - from our Postgres database. If you signed in with Apple, we also revoke the Apple authorization token, as required by App Store guideline 5.1.1(v). Deleting your Suelto account does not cancel an active subscription on Apple or Google - please cancel through the App Store or Play Store separately.
8. Accessing or exporting your data
If you would like a copy of the personal data we hold about you, email support@suelto.io from the address on your Suelto account and we will put together an export for you. We aim to respond within 30 days.
9. Children
Suelto is not directed at children under 13 and we do not knowingly collect personal data from children under 13. If you believe a child has signed up, contact us at support@suelto.io and we will delete the account.
10. Changes to this policy
If we make material changes to this policy we will update the effective date above and, where appropriate, notify you in the app. Continued use of Suelto after a change means you accept the updated policy.
Contact
For privacy questions or deletion requests, email support@suelto.io from the email address associated with your Suelto account.
You can also use the public account deletion request page.