Privacy Policy

Introduction

We built Today, Just This to help people with chronic stiffness and pain move at their own pace, without judgment. We take your privacy as seriously as we take your comfort.

Arkalogy LLC ("we," "our," or "us") operates Today, Just This (the "App"), an adaptive daily movement companion. This Privacy Policy explains what information we collect, how we use it, and the choices you have.

By using the App, you agree to the collection and use of information as described in this policy. If you do not agree, please do not use the App.

Information We Collect

Account Information

When you create an account, we collect:

• Email address — used for authentication, account recovery, and service communications
• Password — stored securely using industry-standard hashing; we never have access to your plaintext password
• Display name — provided during sign-up or retrieved from Apple Sign-In (first name only)
• Profile photo — an optional avatar you upload, stored in our cloud file storage and synced to your account

Health & Profile Information

During onboarding and in your profile settings, you may optionally provide:

• Age range and gender — used to tailor movement recommendations
• Health conditions — such as ankylosing spondylitis or fibromyalgia, used to adapt exercises and avoid contraindicated movements
• Primary body areas — areas of stiffness or discomfort, used to prioritize relevant exercises

This information is stored locally on your device and, for premium subscribers, synced to our cloud servers. We never share your health information with advertisers, employers, or insurers.

App Usage Data

As you use the App, we store the following to provide its core functionality:

• Check-in responses — your daily energy level, body areas of focus, and context tags
• Session history — which movements you performed, duration, and completion status
• Session notes and photos — optional text notes and photos you attach to sessions (premium feature)
• Preferences and settings — notification times, sound preferences, movement blocklist, custom routines

This data is stored locally on your device. For premium subscribers, it is also synced to our cloud servers so you can access it across devices.

Apple Health (HealthKit)

If you choose to connect Apple Health, the App reads your recent workouts — such as walks, runs, rides, and swims — along with their duration, distance, step count, and originating app, so your other movement can sit alongside your sessions in one history.

• Access is read-only and requires your explicit permission. The App never writes to Apple Health.
• When you browse this activity, it is read live from Apple Health and not stored. Once a workout is added to your history, a summary of it is saved in your encrypted on-device database and — for premium subscribers with cloud sync — synced to our servers under the same protections as your other app data.
• Apple Health data is used solely to display your activity inside the App. We never use it for advertising or marketing, never sell it, and never share it with third parties.
• You can review or revoke the App's access at any time in iOS Settings → Privacy & Security → Health → Today, Just This.

Subscription Information

If you subscribe to premium features, the following is collected by Apple and shared with our subscription management provider (RevenueCat):

• Purchase receipts — used to verify and manage your subscription status
• Subscription status — active, expired, trial, or cancelled

We do not receive or store your payment method details (credit card, billing address, etc.). All payment processing is handled by Apple.

Device Information

• Push notification token — a device identifier used solely to deliver push notifications you have opted into
• Device type and OS version — collected automatically for crash reporting and compatibility

Analytics and Diagnostics

We collect usage analytics to understand how the App is used and improve it. This includes screens visited, features used, and session counts. For authenticated users, analytics may be associated with a pseudonymous user identifier to help us understand usage patterns across sessions. We do not use analytics data for advertising or share it with advertisers.

For crash and error reporting, we collect device type, OS version, error context, and your account identifier to help us diagnose issues efficiently.

How We Use Your Information

• Provide the service — generate personalized movement sessions, store your history, and sync data across devices
• Send notifications — daily reminders and session-related notifications you have configured
• Communicate with you — account-related emails (password reset, security alerts) and, if you opt in, product updates and tips
• Improve the App — analyze usage patterns to fix bugs, improve features, and guide development
• Process payments — manage your subscription through Apple's App Store and our payment processor
• Ensure stability — detect and fix crashes and errors

Third-Party Services

We use the following third-party services to operate the App. Each has its own privacy policy governing how it handles data:

Service	Purpose	Data Shared
Supabase	Authentication, cloud database, file storage	Email, password (hashed), synced app data, session photos, profile photo, imported Apple Health workout summaries (premium)
RevenueCat	Subscription management	Pseudonymous app user ID, purchase receipts (via Apple)
Apple (App Store & APNs)	Payment processing, push notifications	Purchase transactions, device push token
Sentry	Crash and error reporting	Device type, OS version, error context, account identifier
PostHog	Product analytics	Pseudonymous user ID, usage events (screens, features, session counts)

We do not sell, rent, or trade your personal information to any third party.

Data Storage and Security

Your data is stored locally on your device in an encrypted database (SQLCipher, AES-256). The encryption key is stored in the iOS Keychain, meaning your data is unreadable without your device's secure hardware.

For premium subscribers, data is also stored on Supabase servers (hosted on AWS in the United States) with row-level security enforced at the database level. All data in transit is encrypted via HTTPS/TLS.

Sign-out vs. account deletion: Signing out preserves your local data so you can sign back in seamlessly. Deleting your account permanently removes your data from both your device and our servers.

Data Retention

• Active accounts: We retain your data for as long as your account is active.
• Deleted accounts: When you delete your account, we promptly remove your personal data from our servers. Anonymized, aggregated statistics may be retained.
• Analytics data: Retained for up to 12 months, then deleted or aggregated.
• Crash and error logs: Retained for up to 90 days, then automatically purged.
• Local data: Remains until you uninstall the App or clear its data.

Data Breach Notification

In the unlikely event of a data breach affecting your personal information, we will notify affected users within 60 days via email and/or in-app notification.

Your Rights

Depending on your location, you may have the following rights:

• Access — request a copy of your personal data
• Correction — request correction of inaccurate data
• Deletion — request deletion of your account and associated data
• Data portability — request your data in a machine-readable format
• Opt out of marketing — unsubscribe from promotional emails at any time

To exercise any of these rights, contact us at [email protected]. You can also delete your account directly within the App.

California Privacy Rights (CCPA)

If you are a California resident, you have the right to know what personal information we collect, request deletion, and not be discriminated against for exercising your privacy rights.

We do not sell or share personal information as defined under the CCPA/CPRA. Contact [email protected] to make a request.

International Users

If you are located outside the United States, your data is processed and stored in the United States. By using the App, you consent to the transfer of your information to the United States.

If you are in the EEA or UK, our legal basis for processing is: (a) your consent, (b) performance of a contract, and (c) our legitimate interests. You also have the right to restrict processing, object to processing, and withdraw consent at any time. You may lodge a complaint with your local data protection authority.

Health-related information — such as the conditions you choose to share — is a special category of personal data under the GDPR. We process it only on the basis of your explicit consent, which you may withdraw at any time by removing the information in the App or deleting your account.

Children's Privacy

The App is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, please contact us and we will promptly delete it.

Health Disclaimer

Today, Just This is a movement companion, not a medical device. It does not diagnose, treat, cure, or prevent any disease or condition. Always consult a qualified healthcare professional before starting any exercise program.

Website Analytics

This website uses Google Analytics to collect anonymized visitor statistics. This is governed by Google's Privacy Policy.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy in the App or sending you a notification.

Contact Us

• Email: [email protected]
• Company: Arkalogy LLC, Fort Collins, Colorado, USA