Privacy policy
Last updated 1 September 2026
The short version. Pay In Reps has no accounts and no sign-up. Camera frames are analysed on your device and never leave it: nothing is recorded, stored or uploaded. Your routine and the list of apps you lock stay on your device. Beyond what is needed to process and restore your purchase, the App sends only anonymous usage events (like “onboarding completed”) so we can see where the App needs fixing — never camera data, never screen contents, and never linked to your identity. We show no ads and sell nothing.
Who we are
Pay In Reps (“the App”) is made by Verto Studios (“we”, “us”), the data controller for the limited personal data described below. Contact: support@vertostudios.com.
Camera
When you run a camera-verified exercise, the App uses the front camera to count your reps with Apple’s on-device Vision body-pose detection. Specifically:
- Video is processed live, in memory, on your device.
- No photo or video is recorded, saved to your photo library, or written to disk.
- No frame, image or body-pose data is ever sent to us or to any third party.
- Only the resulting rep count is kept, on your device.
Camera access is requested the first time you use a camera-verified exercise, and you can revoke it at any time in iOS Settings → Privacy & Security → Camera.
Screen Time and the apps you lock
The App uses Apple’s Screen Time (Family Controls) framework to shield the apps you choose. Your selection is represented by opaque tokens issued by iOS: the App stores them in its own app group container on your device so the shield and the midnight re-lock can use them. These tokens do not reveal app identities to us, and we never transmit or receive them.
Data stored on your device
- Your routine (exercises, reps, durations) and settings.
- Which days you completed the routine.
- Your app-selection tokens and onboarding state.
This stays in the App’s local storage. We have no access to it. Deleting the App deletes it.
Purchases
Purchases and subscriptions are processed by Apple through your Apple Account. We never see your name, payment card or Apple Account credentials.
To check whether your subscription is active and to restore purchases across your devices, the App uses RevenueCat as a processor. RevenueCat receives a randomly generated anonymous app user ID, the App Store purchase/receipt data for your transaction, and basic technical information such as device model, OS version, app version and country. This is not linked to a name, email address or advertising identifier by us. See RevenueCat’s privacy policy and Apple’s privacy policy.
Legal basis (where the GDPR applies): processing this purchase data is necessary to perform our contract with you, delivering the paid features you bought.
Anonymous usage analytics
To understand where people get stuck (for example, how many finish onboarding or start a trial), the App sends anonymous usage events to PostHog, hosted in the European Union. Each event is a named step — such as “paywall viewed” or “routine completed” — with basic technical context (device model, OS version, app version, language). Specifically:
- Events are tied to a random identifier, not to your name, email, Apple Account or advertising identifier — we could not identify you from them if we tried.
- No screen recording or session replay: no camera frame, image, screen content or anything you type is ever captured or sent.
- Analytics are not used for advertising or shared with ad networks.
Legal basis (where the GDPR applies): our legitimate interest in understanding and improving how the App works, using data that cannot be linked to you. See PostHog’s privacy policy.
What we don’t do
- No accounts, no sign-up, no email collection in the App.
- No advertising, no ad networks, no App Tracking Transparency tracking.
- No attribution, crash-reporting or social SDKs.
- No location data, contacts, photo library, health or motion data.
- We never sell or share personal data, and never use it to build profiles.
Retention
On-device data lives on your device until you delete it or delete the App. Purchase records held by RevenueCat are retained for as long as needed to support your entitlement and to meet accounting and legal obligations. Anonymous usage events are retained by PostHog on our behalf and deleted or aggregated when no longer needed for product decisions.
Your rights
Depending on where you live (for example under the GDPR in the EU/EEA or the UK, or under the CCPA in California), you may have the right to access, correct, delete, or receive a copy of your personal data, to object to or restrict processing, and to lodge a complaint with your data protection authority. Because most data never leaves your device, you can exercise many of these rights directly by editing your routine or deleting the App. For purchase data, email support@vertostudios.com and we will respond within 30 days. We do not “sell” or “share” personal information as those terms are defined under California law.
Children
Pay In Reps is not directed to children under 13, and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, contact us and we will delete it.
International transfers
Our processors (Apple, RevenueCat) may process purchase data on servers outside your country, including in the United States, under appropriate safeguards such as the EU Standard Contractual Clauses.
Changes to this policy
If we change this policy we will update the “last updated” date above and, for significant changes, note them in the App.
Contact
Privacy questions: support@vertostudios.com