LEGAL
Privacy Policy
Last updated: July 11, 2026
1. Data controller
Stance is published by Ysamihal Labs, SASU, 6 rue d'Armaillé, 75017 Paris, France. Ysamihal Labs is the data controller for personal data processed through the App.
2. Data we process
We process account details, profile and training data, workout history, form reports, nutrition and recovery data, Crew content, subscription status, consent records, device diagnostics and notification tokens.
Optional Apple Health data, including steps, energy, heart rate, workouts, weight and sleep, stays on your device and is never transmitted to our servers or shared.
An optional body scan sends up to four full-body photos for analysis and deletes them immediately afterwards. Only derived proportions and lever measurements are retained. No facial-recognition data is produced or retained.
3. Ephemeral workout video
When cloud form analysis is used, the workout clip is encrypted in transit and sent temporarily to Google Cloud Vertex AI and Gemini solely to analyze movement technique. It is deleted server-side immediately after analysis. A storage lifecycle rule removes any remaining analysis file within 24 hours.
Only the media-free analysis report is retained. Offline, no clip leaves your device. A rendered clip is uploaded only when you explicitly choose to share it.
4. Purposes and legal bases
We use data to provide and secure the App, analyze movement, synchronize workouts, operate nutrition, recovery and Crew features, manage subscriptions, deliver enabled notifications, provide support and meet legal duties. We rely on contract performance, consent, legitimate interests in security and reliability, and legal obligations as applicable.
5. Providers and transfers
We use Google Firebase and Google Cloud Vertex AI/Gemini for authentication, infrastructure and analysis, RevenueCat for subscription management, and Expo for push delivery. Videos and photos sent for analysis are deleted after processing and are not used to train models.
6. Retention, sharing and security
Account data is kept while your account is active and then deleted or anonymized unless a legal duty applies. We do not sell personal data and use no advertising SDK. Reports, clips and Crew content are shared only through actions you choose. We use access controls, restrictive storage rules and encryption in transit.
7. Your rights
You may request access, correction, deletion, restriction, objection and portability, and withdraw consent. You can delete your account in the App. You may lodge a complaint with the CNIL or your local supervisory authority.
Questions? Contact nicolaslahimasy@gmail.com.