Privacy Policy

Last updated: June 16, 2026

This Privacy Policy explains how Seraphim Labs, Inc. ("Brad," "we," "us," or "our") collects, uses, shares, and protects information when you use the Brad: Lifting Form Coach mobile application (the "App").

Brad is a weightlifting form-analysis app. It uses your device's camera to analyze your lifting technique, gives you real-time and post-set coaching, and can talk with you through an AI voice coach. Because the App works with video, audio, and movement data, we want to be specific about what is processed on your device, what is sent to third-party AI providers, and what choices you have.

By using the App, you agree to the practices described in this Privacy Policy.

1. Summary (the short version)

• By default, your data stays on your device. Your recorded videos, the body-movement (pose) data we extract from them, your form scores, and your workout history are stored locally on your iPhone. You can use the App without an account.
• Accounts and cloud backup are optional. You may choose to sign in with Sign in with Apple and turn on cloud backup. If you do, we create an account for you and back up your data — including your videos, pose/movement metrics, workout history, and AI-coach transcript — to our backend so it can sync across your devices. This is off until you sign in and consent. See Sections 2g and 4c.
• Some data is sent to AI providers to power coaching. To analyze your form and run the live voice coach, short video clips, camera frames, microphone audio, and derived movement metrics are sent to our backend and to third-party AI providers (OpenAI and Google). See Section 4.
• We collect anonymous onboarding analytics. During onboarding we send anonymous, aggregated funnel events tied to a random device identifier (not your account) to help us improve the sign-up flow. See Section 2h.
• We do not sell your data, and we do not use it for cross-app tracking or advertising. We do not use the Advertising Identifier (IDFA).
• You are in control of permissions. Camera, microphone, and photo-library access are all requested with your permission and can be turned off at any time in iOS Settings.
• You can delete everything. Deleting the App removes your on-device data. If you created an account, you can permanently delete your account and all backed-up data from within the App (Profile → Delete account).

2. Information We Collect

a. Camera and video

When you record a lift or use the live coaching feature, the App captures video and individual image frames from your device's camera (the live coach uses the front camera). When you choose to analyze an existing video, the App accesses the video you select from your photo library. Recorded videos are saved on your device in the App's storage.

b. Microphone and audio

During a live voice coaching session, the App captures audio from your microphone so the AI coach can hear and respond to you in real time. Audio is streamed to our AI provider for the duration of the session (see Section 4).

c. Body-movement (pose) data

The App analyzes your video to estimate the positions of your body joints (for example, shoulder, elbow, hip, knee) and to compute movement metrics such as joint angles, range of motion, movement path, control, and consistency. This pose analysis runs on your device. The resulting landmark data and metrics are stored locally and, for certain features, may be sent to AI providers along with the relevant clip or frame (see Section 4).

d. Workout and performance data

We store, on your device, information about your sessions: lift type, rep count, form scores and sub-scores, detected form faults, timestamps, and similar workout metadata.

e. Profile and onboarding answers

If you complete onboarding, we store your answers locally — for example, your training goal, experience level, the lifts you care about, and training frequency. This information stays on your device.

f. Purchase and subscription information

If you purchase a subscription, the transaction is processed by Apple through the App Store. We use RevenueCat to manage and validate subscriptions and entitlements. We receive subscription status (for example, whether you have an active subscription, trial status, and renewal/expiration information) and related purchase events. We do not receive your full credit-card number or Apple ID password.

g. Account and cloud backup (optional)

The App can be used without an account. If you choose Sign in with Apple, we receive an Apple-provided account identifier and, when you share it, your name and email address (which may be an Apple private-relay address). We use this to create and operate your account. If you enable cloud backup, we upload and store your videos, pose/movement metrics, form scores, workout history, and AI-coach transcript to our backend (Supabase) and object storage (Cloudflare R2), keyed to your account, so your data can sync across your devices. Cloud backup is off by default and only runs after you sign in and consent. You can delete your account and all backed-up data at any time (see Section 7).

h. Onboarding analytics

During onboarding, the App sends anonymous, aggregated funnel events (such as which onboarding step you reached, the variant shown, and the lifts you selected) to our backend. These events are tied to a random, app-generated device identifier that is not linked to your account, your Apple ID, or your name/email, and is not used to track you across other apps. We use this only to measure and improve onboarding conversion.

i. Device and diagnostic information

We may process basic technical information such as your device model, operating-system version, and the App version, primarily to operate features and store them as local metadata for your sessions. When the App connects to our backend or to AI providers over the internet, those services receive standard network information (such as your IP address) inherent to any internet connection.

j. What we do not collect

• We do not collect precise or coarse location.
• We do not use Apple Health / HealthKit. We do not read or write any Health data.
• We do not collect contacts, calendars, browsing history, or files outside the App.
• We do not use the Advertising Identifier (IDFA) and we do not track you across other companies' apps or websites.
• We do not require an account to use the core App. An account (Sign in with Apple) is optional and only needed for cloud backup/sync; we never ask for a password (Apple handles authentication).

3. How Data Is Processed: On-Device vs. Cloud

On your device (no network transmission):

• Pose/body-landmark estimation from your video (using on-device machine-learning models).
• Form scoring, rep detection, and fault analysis.
• Storage of your videos, pose data, scores, workout history, and onboarding answers.
• "Ask Brad" text coaching, when available, runs on Apple's on-device Apple Intelligence (Foundation Models) on supported hardware (iPhone with Apple Intelligence enabled). Your questions and the workout context used to answer them are processed on your device and are not sent to us or to a third-party AI provider for this feature.

Sent to the cloud (see Section 4 for who receives what):

• Live voice coaching audio and camera frames.
• Short video clips, image frames, and derived movement metrics submitted for AI form analysis.
• Subscription/entitlement validation.
• Anonymous onboarding-analytics events (tied to a random device id, not your account).
• If you sign in and enable cloud backup: your videos, pose/movement metrics, form scores, workout history, and AI-coach transcript, stored under your account so they sync across your devices.

4. Third Parties and AI Providers

To deliver core features, the App shares specific data with the service providers below. These providers process data on our behalf to provide the App's functionality. They are not permitted to use your content to serve you advertising.

a. OpenAI — live voice coaching and message classification

• Live coach: When you start a live coaching session, your microphone audio and periodic camera image frames are streamed to OpenAI's Realtime API so the AI coach can perceive your set and respond by voice in real time.
• Message routing: When you speak to the coach, a short text transcription of what you said may be sent to OpenAI to classify whether your question is on-topic, off-topic, or safety-related, so the coach can respond appropriately.
• OpenAI processes this data to generate coaching responses. Per OpenAI's API policies, data submitted through the API is not used to train OpenAI's models.

b. Google (Gemini) — video form analysis

• When you analyze a recorded or uploaded lift, short video clips, image frames, and derived movement metrics (such as joint angles and ranges) are sent for analysis by Google's Gemini models, which return coaching feedback.
• These requests are routed through our backend (see Supabase below). Google processes this data to generate the analysis. Per Google's paid/API terms, data submitted is not used to train Google's models.
• Some spoken coaching cues may be converted to audio using Google's text-to-speech service; in that case the text of the cue is sent to Google.

c. Supabase and Cloudflare R2 — backend infrastructure, accounts, and backup

• We use Supabase to host the backend service that securely relays analysis requests to Google's Gemini models (this also keeps our AI provider keys off your device). Video clips, frames, and metrics pass through this backend to be processed.
• If you choose to sign in with Apple, Supabase also stores your account record (account identifier, and name/email when shared). If you enable cloud backup, your synced workout data (pose/movement metrics, form scores, workout history, AI-coach transcript) is stored in Supabase and your backed-up videos are stored in Cloudflare R2 object storage, each keyed to your account so only you can access them. We also store anonymous onboarding-analytics events (not tied to your account) in Supabase. If you do not sign in, we do not maintain a cloud account or backup for you.

d. RevenueCat — subscription management

• We use RevenueCat to manage and validate in-app subscriptions. RevenueCat receives a device-generated identifier and your subscription/purchase events in order to determine your entitlements.

e. Apple — payments and on-device AI

• Apple processes in-app purchases and subscriptions through the App Store. The "Ask Brad" text feature, where available, uses Apple's on-device Apple Intelligence; that processing happens on your device under Apple's terms.

We may also disclose information if required by law, to protect our rights or the safety of users, or in connection with a merger, acquisition, or sale of assets (in which case we will provide notice as required).

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

5. How We Use Information

We use the information described above to:

• Analyze your lifting technique and generate form scores and coaching feedback.
• Power the real-time AI voice coach and "Ask Brad" coaching.
• Maintain your on-device workout history and personalize coaching to your goals and progress.
• Operate, secure, troubleshoot, and improve the App.
• Process and validate your subscription and provide the features you've paid for.
• Comply with legal obligations.

6. Data Retention

• On-device data (videos, pose data, scores, workout history, onboarding answers) is retained on your device until you delete it within the App or uninstall the App. Deleting the App removes this on-device data from your device.
• AI-processing data (audio, clips, frames, metrics) is transmitted to provide a feature in real time. We do not retain a long-term copy of your coaching audio or analyzed video on our backend for our own purposes. Our AI providers may retain submitted API data for a limited period to provide the service and for abuse-monitoring, in accordance with their own retention policies, after which it is deleted.
• Account and backed-up data (account record; synced videos, pose/movement metrics, scores, workout history, and coach transcript) is retained for as long as your account exists so it can sync across your devices. When you delete your account in the App, we permanently delete this account data and your backed-up media from our backend and object storage.
• Anonymous onboarding-analytics events are retained in aggregate to analyze onboarding conversion; they are not tied to your account and contain no name, email, or account identifier.
• Subscription records are retained by Apple and RevenueCat as needed to manage your subscription and meet legal/financial obligations.

7. Your Choices and Rights

• Permissions: You can grant or revoke Camera, Microphone, and Photo Library access at any time in iOS Settings → Brad. Revoking camera or microphone access will disable the features that depend on them.
• Delete your data: You can delete individual sessions within the App, or remove all on-device data by uninstalling the App.
• Delete your account: If you signed in, you can permanently delete your account and all backed-up data (synced videos, metrics, history, and transcript) at any time in Profile → Delete account. This is immediate and cannot be undone.
• Subscriptions: Manage or cancel your subscription in iOS Settings → [your name] → Subscriptions. You can restore purchases from within the App.
• Regional rights: Depending on where you live (for example, the EEA, UK, or California), you may have rights to access, correct, delete, or restrict processing of your personal information, and to object to certain processing. For data stored on your device you can exercise most of these rights directly in the App; if you created an account, you can delete it and all backed-up data in Profile → Delete account. For other requests, or requests involving data handled by our service providers, contact us using the details in Section 13. We will not discriminate against you for exercising your rights.

8. Health, Fitness, and Medical Disclaimer

Brad provides general fitness and form-coaching information for educational purposes only. It is not medical advice and is not a substitute for professional medical or physical-therapy guidance. The App's coaching, including any comments related to form or injury risk, is generated in part by automated AI systems and may be incomplete or incorrect. Always consult a qualified professional before beginning or changing an exercise program, and stop and seek help if you experience pain or injury. You use the App and follow its suggestions at your own risk.

9. Children's Privacy

The App is not directed to children under 16, and we do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, please contact us and we will take appropriate steps to delete it.

10. Security

We use commercially reasonable technical and organizational measures to protect your information, including processing most data on your device and relaying cloud requests over encrypted connections. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. International Data Transfers

Our service providers (including OpenAI, Google, Supabase, Cloudflare, RevenueCat, and Apple) may process data in the United States and other countries where data-protection laws may differ from those in your country. Where required by law, we rely on appropriate safeguards for these transfers.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above and, where appropriate, provide additional notice within the App. Material changes to how we handle your data will be reflected here before the new practices take effect.

13. Contact Us

If you have questions about this Privacy Policy or your data, contact us:

• Email: privacy@getbrad.app
• Web: https://getbrad.app/privacy