سياسة الخصوصية

This privacy policy explains what data the Rock app and the rockkegel.app website collect, why we collect it, and what choices you have.

Who we are

Rock: Kegel Exercises For Men (“Rock”, “the app”) and the website rockkegel.app are operated by Tinybiohacks Private Limited, a company registered in Singapore (“we”, “us”).

For any question about privacy, or to use your rights, email hello@rockkegel.app. This address also reaches our Data Protection Officer.

The short version

• Rock has no accounts. We do not ask for your email address or your real name.
• Your training history, settings, reminders and your answers to the onboarding questions stay on your device. We do not receive them.
• We collect app usage data (analytics) and subscription data so that the app works and so that we can improve it.
• We do not show ads, we do not track you across other apps or websites, and we do not sell or share your personal data for advertising.

Data that stays on your device

The following data is stored only on your phone. We do not receive a copy of it:

• Your training history: sets, minutes, levels, streaks and badges.
• Your settings, such as audio and vibration cues and custom mode timings.
• Your reminder times. Reminders are local notifications that your phone schedules. They do not come from a server.
• Your answers to the onboarding questions, such as the name you want the app to use, your age range, your goals and your training preferences.

You can export your training data as a CSV file from Settings → Manage Data. The file goes only where you choose to send it. You can delete all of this data from Settings → Manage Data → Delete All Data, or by deleting the app.

Data we collect

App usage data (analytics)

We use Amplitude to understand how people use Rock, so that we can fix problems and improve the app. When you use the app, it sends events such as “app opened”, “set started”, “set completed”, steps of the subscription screen, and whether we showed a review prompt.

With these events, Amplitude receives technical data: a random device identifier, your device model, operating system version, app version, language, and an approximate country or region that is derived from your IP address.

Analytics events do not contain your name, your onboarding answers or your training details.

Purchases and subscriptions

Payments for Rock Pro go through Apple’s App Store (or Google Play). We never see your card details.

We use RevenueCat to manage subscriptions. RevenueCat receives an anonymous app user ID that the app creates, your purchase and subscription history (product, price, currency, store country, dates and renewal status), and device identifiers: the identifier for vendor (IDFV) on iOS and your IP address. We use this data to unlock Rock Pro, restore purchases, prevent fraud, and understand subscription numbers.

Messages you send us

If you email us, we receive your email address and the content of your message. We use it only to reply to you.

The website

rockkegel.app is hosted by Vercel. When you visit the website, Vercel processes technical data such as your IP address and browser type to deliver the pages and to protect the service. The website does not use cookies, analytics or advertising tags.

Data we do not collect

• We do not use the advertising identifier (IDFA), and the app does not ask for permission to track you.
• We do not collect your precise location, contacts, photos, camera, microphone or health data from Apple Health.
• We do not sell your personal data, and we do not share it for cross-context behavioral advertising.

How we use data

We use the data above to:

• Provide the app and its features, and unlock and restore your subscription.
• Understand how the app is used, find and fix bugs, and improve the app.
• Prevent fraud and abuse.
• Reply to your messages.
• Comply with the law, for example accounting and tax rules for purchases.

If you are in the European Economic Area or the United Kingdom, our legal bases are: performance of a contract (to provide the app and your subscription), our legitimate interests (to understand and improve the app and to prevent fraud), and legal obligations (for purchase records).

Who receives data

We share data only with service providers that process it for us under contract:

Provider	Purpose	Privacy policy
Amplitude, Inc. (United States)	App usage analytics	amplitude.com/privacy
RevenueCat, Inc. (United States)	Subscription management	revenuecat.com/privacy
Apple Inc. / Google LLC	App Store and Google Play purchases	apple.com/legal/privacy
Vercel Inc. (United States)	Website hosting	vercel.com/legal/privacy-policy

We may also disclose data if the law requires it, or to protect our rights, our users or the public.

International transfers

Our service providers process data in the United States and other countries. When we transfer personal data out of Singapore, the European Economic Area or the United Kingdom, we rely on the safeguards that the law requires, such as standard contractual clauses.

How long we keep data

We keep analytics and subscription data only as long as we need it for the purposes in this policy. After that, we delete it or make it anonymous. We keep purchase records for as long as accounting and tax laws require. Data on your device stays there until you delete it or delete the app.

Your rights

Depending on where you live, you can ask us to:

• Give you access to the personal data we hold about you, or a copy of it.
• Correct personal data that is wrong.
• Delete your personal data.
• Stop or limit some processing, or object to it.
• Withdraw your consent, where we rely on consent.

Under Singapore’s Personal Data Protection Act (PDPA), you can ask for access to and correction of your personal data, and you can withdraw consent. If you are in the EEA or the UK, you also have the right to data portability and the right to complain to your local data protection authority. If you are a California resident, you have the right to know, to delete and to correct your personal information, and the right not to receive discriminatory treatment for using these rights. We do not sell or share personal information as the CCPA defines these terms.

To make a request, email hello@rockkegel.app. Rock has no accounts, so we may need details such as your App Store purchase receipt or order ID to find your data. We reply within the time that the law sets.

Age limit

Rock is for adults aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you think that a person under 18 has given us personal data, contact us and we will delete it.

Health information

Rock is a training app. It does not diagnose or treat any medical condition. Your onboarding answers about your goals stay on your device, and we do not receive them.

Security

We use service providers with industry-standard security, and data in transit is encrypted with HTTPS. No method of transfer or storage is fully secure, so we cannot guarantee absolute security.

Changes to this policy

We may update this policy. When we do, we change the effective date at the top. If a change is significant, we will tell you in the app or on this page.

Contact

Tinybiohacks Private Limited, Singapore Email and Data Protection Officer: hello@rockkegel.app