This Privacy Policy describes how the Control: Kegel Coach Men application (the "App"), operated by Surreel Studio ("we", "our", or "us"), collects, uses, and shares information about you when you use the App.
1. Information We Collect
1.1 Account
We collect the following account-level information:
- Email address, when you upgrade your account by signing in with email, Apple, or Google. We never receive your password — sign-in is handled by Supabase Auth, Apple, or Google.
- Display name, only if you set one in your profile.
- A user identifier — a Supabase UUID assigned to your account, including while you remain anonymous. When you upgrade an anonymous session to a signed-in account, we merge the anonymous data with the new account so your progress is preserved.
You may use the App anonymously. In that case no email is collected, only the device-local anonymous identifier.
1.2 Profile and onboarding answers (health data)
You may share information about your training goals, level, age range, baseline test results, lifestyle preferences, and answers to onboarding questions that include health-related responses (for example, whether you have experienced incontinence, recent pelvic surgery, or other pelvic floor concerns). We use this to recommend a training plan and personalize your experience. You can edit or delete it from the profile screen.
1.3 Exercise and fitness data
We record exercise sessions you complete (program, duration, completed repetitions, timestamps) and compute daily streaks and basic statistics from them. This data is displayed inside the App and synchronized across your devices when you are signed in.
1.4 Preferences and reminders
We store your preferences (language, theme, sound and haptic settings, daily reminder times and days). Reminders are scheduled as local device notifications; we do not send remote push messages from our servers.
1.5 Subscription information
Premium subscriptions are processed by Apple or Google. We use RevenueCat to verify entitlements and receive subscription lifecycle events. RevenueCat receives the user identifier referenced in section 1.1 and your entitlement status (active, in trial, expired). We never receive your payment card information. We may use aggregate subscription analytics (for example, trial conversion rates) to understand the health of the subscription service.
1.6 Crash diagnostics
We collect crash logs to diagnose stability issues. Crash logs are produced by the Expo platform and are not linked to your account identity — they do not include your name, email, or user identifier.
1.7 What we do NOT collect
- No precise or approximate location data.
- No advertising identifier (IDFA) or other device-level advertising data.
- No contacts, photos, audio recordings, or messages from your device.
- No browsing or search history outside the App.
- No biometric data.
- No phone numbers, SMS messages, or call data. The App does not request or use the telephony, SMS, or call-log permissions on Android, nor the corresponding entitlements on iOS.
2. How We Use Information
We use information to:
- Provide and operate the App.
- Personalize training programs and recommendations using your goals, baseline, level, and onboarding answers.
- Sync your progress across your devices when you are signed in.
- Schedule the daily reminders you have configured.
- Process purchases and manage subscriptions.
- Diagnose crashes and stability issues using non-personally-linked crash logs.
- Comply with legal obligations.
3. Tracking
We do not engage in "tracking" as defined under Apple's App Tracking Transparency framework. We do not use the IDFA. We do not share your personal data with advertising networks, data brokers, or third-party advertising analytics providers. The App does not show the App Tracking Transparency prompt because no tracking takes place.
4. Where Data Is Stored
Account, profile, exercise, settings, and subscription metadata are stored in Supabase databases located in the European Union (Frankfurt or Ireland). RevenueCat hosts subscription state. Apple and Google process payment and subscription transactions according to their own privacy practices.
5. Sharing
We do not sell your personal data. We share limited information with the service providers listed above only as necessary to operate the App:
- Supabase (database and authentication) — receives the data described in section 1 (except payment information).
- RevenueCat (subscription management) — receives the user identifier and entitlement status.
- Apple / Google (in-app purchases) — process payment and provide receipt verification.
We may disclose information where required by law.
6. Your Rights
You can:
- Access your data — tap Export data in the profile screen to receive a JSON copy.
- Correct your data — edit your profile from the profile screen.
- Delete your account — tap Delete account in the profile screen. This permanently deletes your account and all associated data, including the corresponding records in Supabase and RevenueCat.
If you are in Turkey, your rights under KVKK include access, correction, deletion, and objection. If you are in the EU or the United Kingdom, your rights under GDPR include the same, plus portability and the right to object to processing.
7. Children
The App is intended for adults aged 18 and over. We do not knowingly collect data from children.
8. Changes
We may update this policy from time to time. The version and publication date shown above reflect the latest revision.
9. Contact
Questions or requests: support@surreel.studio