Privacy Policy

This Privacy Policy describes how Intuzu LLC ("Company," "we," "us," or "our") collects, uses, and shares information in connection with the Posture 12 application and website (collectively, the "Service"). The Service is available on Android (Google Play), iOS (Apple App Store), and the web at posture12.com and app.posture12.com.

Intuzu LLC is located at 1306 Kent Rd, Ortonville, MI 48462, United States.

By using the Service on any platform, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree, please do not use the Service.

1. Information We Collect

We collect the following categories of information across all platforms:

a. Account Information

When you create an account, we collect your email address, name, and profile information provided through our authentication provider (Auth0). We do not store your password directly.

b. Health and Wellness Data

To personalize your experience, we collect pain levels, symptom logs, body region selections, exercise completion records, relief ratings, workout preferences, and feedback you provide. This data is classified as sensitive personal information and is used solely to deliver and improve the Service.

c. Chat and Conversation Data

Messages you exchange with the AI posture coach are stored to maintain conversation history and provide contextual, personalized guidance. Conversations may include health-related information you voluntarily share.

d. Payment and Subscription Information

• Google Play (Android): Subscription purchases are processed by Google Play. We receive a purchase token and subscription status from Google to verify your subscription. We do not receive or store your payment card details from Google Play.
• Apple App Store (iOS): Subscription purchases are processed by Apple. We receive a transaction identifier and subscription status from Apple to verify your subscription. We do not receive or store your payment card details from Apple.
• Stripe (Web): Web subscription payments are processed by Stripe. We store your Stripe customer ID and subscription ID but never your credit card number. Stripe handles all payment card data in accordance with PCI-DSS standards.

e. Device and Usage Data

We collect general usage data such as features accessed, session duration, and platform type (Android, iOS, or web) to improve the Service. We do not collect device identifiers for advertising purposes.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Posture 12 service across all platforms
• Generate personalized AI-powered posture and mobility coaching
• Track pain levels, exercise effectiveness, and progress over time
• Build and adapt personalized workout routines based on your data
• Process and manage subscriptions through Google Play, Apple App Store, or Stripe
• Verify subscription status and entitlements across platforms
• Send important service-related communications (e.g., subscription changes)
• Improve the accuracy, quality, and safety of the Service
• Detect, prevent, and address fraud, abuse, or technical issues
• Comply with legal obligations

3. Data Storage and Security

Your data is stored on secure servers hosted by MongoDB Atlas (cloud database) and AWS (Amazon Web Services) for application hosting. All data is encrypted in transit using HTTPS/TLS. We implement industry-standard security measures including access controls, encryption, and regular security reviews.

Authentication is handled by Auth0, a SOC 2-compliant identity management platform. Your password is never stored on our servers.

While we take reasonable precautions to protect your data, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

4. Third-Party Services

We use the following third-party services to operate the Service:

• Auth0 — Authentication and identity management (Privacy Policy)
• Google Play Billing — Android subscription processing (Privacy Policy)
• Apple App Store — iOS subscription processing (Privacy Policy)
• Stripe — Web payment processing (Privacy Policy)
• Amazon Web Services (AWS) — Application hosting and infrastructure
• Amazon Bedrock — AI model services powering the posture coach
• MongoDB Atlas — Cloud database hosting

We share only the minimum data necessary for each service to function. Each third-party service is governed by its own privacy policy.

5. Data Sharing and Disclosure

We do not sell, rent, trade, or share your personal data or health information with third parties for advertising or marketing purposes.

We may share your information only in the following circumstances:

• Service providers: With the third-party services listed above, solely to operate the Service
• Legal requirements: When required by law, subpoena, court order, or legal process
• Safety: To protect the rights, property, or safety of Intuzu LLC, our users, or the public
• Business transfers: In connection with a merger, acquisition, or sale of assets, in which case your data would remain subject to this Privacy Policy

6. Your Rights and Choices

Depending on your jurisdiction, you may have the following rights:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your account and associated data
• Portability: Request your data in a portable, machine-readable format
• Restriction: Request that we limit processing of your data
• Objection: Object to processing of your data in certain circumstances

To exercise any of these rights, contact us at support@posture12.com. We will respond within 30 days of receiving your request.

7. Subscription Management

You can manage or cancel your subscription at any time through the platform where you subscribed:

• Android: Google Play Store > Payments & subscriptions > Subscriptions
• iOS: Settings > Apple ID > Subscriptions
• Web: Through your account settings or the Stripe billing portal

Cancellation does not result in immediate data deletion. Your account and data will be retained until you explicitly request deletion.

8. Data Retention

We retain your personal data and health information for as long as your account is active or as needed to provide the Service.

If you request account deletion, we will delete your personal data, health records, conversation history, and exercise data within 30 days, except where retention is required by law or for legitimate business purposes (e.g., fraud prevention, resolving disputes, enforcing agreements).

Anonymized, aggregated data that cannot identify you may be retained indefinitely to improve the Service.

9. Children's Privacy

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected data from a child under 18, we will take steps to delete that information promptly. If you believe a child has provided us with personal information, please contact us at support@posture12.com.

10. International Data Transfers

Your data may be transferred to and processed in the United States, where our servers and service providers are located. By using the Service, you consent to the transfer of your data to the United States. We take appropriate safeguards to ensure your data is treated securely and in accordance with this Privacy Policy.

11. Cookies and Tracking

The Posture 12 web application uses essential cookies and local storage for authentication and session management. We do not use advertising cookies or third-party tracking pixels.

The mobile applications (Android and iOS) use local device storage (AsyncStorage) to persist authentication tokens and user preferences. No third-party analytics or advertising SDKs are included in the mobile apps.

12. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• The right to know what personal information we collect, use, and disclose
• The right to request deletion of your personal information
• The right to opt out of the sale of personal information — we do not sell your data
• The right to non-discrimination for exercising your privacy rights

To exercise your CCPA rights, contact us at support@posture12.com.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised "Last updated" date, and where appropriate, via email or in-app notification. Your continued use of the Service after changes are posted constitutes acceptance of the updated Privacy Policy.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, contact us: