Privacy Policy

Welcome to Physly. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Physly mobile application and website (collectively, the “Service”).

Please read this Privacy Policy carefully. By accessing or using the Service, you acknowledge that you have read, understood, and agree to be bound by all the terms of this Privacy Policy and our Terms of Use.

Physly is a mobile application that helps users manage back pain, neck pain and posture through a personalized exercise program. Physly’s Camera Vision feature uses the device camera to measure the user’s range of motion during a movement assessment.

Our contact information:

• Email: apps@luminacode.lt
• Website: https://physly.luminacode.lt
• Operator: Luminacode, MB, Lithuania

3.1 Information You Provide to Us

Account Information: When you register, we collect the information necessary to create and maintain your account, such as your email address and name, including information provided through third-party sign-in services (Apple, Google).

Assessment Information: Answers you provide in the onboarding questionnaire, such as where you experience pain, how long you have had it, your activity level and your goals.

Pain and Progress Logs: Pain ratings and session completion data you enter in the app.

3.2 Information We Collect Automatically

Usage Data: Information about your activity in the Service, including exercise sessions completed, streaks, milestones, program progress, session duration and frequency.

Measurement Data: The joint angles (in degrees) calculated by Camera Vision during movement tests — see Section 3.3.

Device Information: Device type, operating system version, unique device identifiers, language, and IP address.

3.3 Camera Data and Camera Vision

How We Use the Camera. Physly uses your device’s camera for Camera Vision — measuring your range of motion (for example neck rotation, cervical flexion, forward head posture and back extension) during the movement assessment. Camera Vision uses on-device body pose estimation to locate key points on your body and calculate joint angles from them.

What We Do Not Collect. We do not record, store, upload or transmit camera video or images. All video processing happens in real time on your device and frames are discarded immediately after the angle is calculated. We do not collect facial recognition data or biometric identifiers, and we do not use the camera data to identify you.

What We Keep. Only the resulting measurements — numeric angles in degrees, the date of the test and the comparison with the normal range — are stored in your account so that you can track your progress over time. This measurement data is considered health-related data and is processed only to provide the Service to you.

Your Control. You can deny or revoke camera permission at any time in your device settings. Without camera access, Camera Vision measurements are unavailable, but you can still use the exercise program. You can delete your measurement history by deleting your account (see Section 7).

3.4 Information from Third Parties

We may receive information about you from third-party services when you choose to sign in with them (Apple, Google), limited to the information those services share with us.

We use the information we collect to:

• Provide and maintain the Service;
• Create and manage your account;
• Build and adapt your personalized exercise program based on your assessment answers and measurements;
• Display your measurements, progress, streaks and milestones;
• Send service-related notifications and reminders (which you can turn off);
• Improve and personalize the user experience and analyze usage patterns;
• Process subscriptions and prevent fraud;
• Comply with legal obligations.

We do not use your data to provide medical diagnosis or treatment. The Service is not a medical device.

We may share personal information with:

5.1 Service Providers

• Supabase — database hosting and authentication
• Superwall — paywall and subscription management
• Apple (App Store) — payment processing for subscriptions
• Mixpanel — product analytics (usage events, not camera data)
• Firebase Crashlytics — crash reporting

These providers process data only on our behalf and under contractual obligations. None of them receive camera video or images.

5.2 Legal Requirements

We may disclose your information if required by law or in response to valid requests by public authorities.

5.3 Business Transfers

If we are involved in a merger, acquisition or sale of assets, your information may be transferred as part of that transaction.

5.4 With Your Consent

We may share information with third parties when you consent to it.

We do not sell your personal information, and we do not share health-related data (assessment answers, pain logs, measurements) with advertisers.

Assessment answers, pain logs and range-of-motion measurements are health-related data. We process this data solely to provide you with the Service, on the basis of your explicit consent given when you start the assessment. You can withdraw consent at any time by deleting your account. Physly does not read from or write to Apple Health unless you explicitly enable that in the app.

We retain your personal information for as long as your account is active or as needed to provide the Service. You can delete your account and all associated data (including measurements and assessment answers) at any time from the app’s settings or by emailing apps@luminacode.lt. Deletion is completed within 30 days, unless we are legally required to retain certain records.

We implement appropriate technical and organizational measures to protect your personal information, including encryption in transit. However, no method of transmission over the Internet or electronic storage is 100% secure.

The Service is intended for users aged 13 and older. We do not knowingly collect personal information from children under 13. Users between 13 and 16 (or the applicable age in their jurisdiction) require parental consent in accordance with applicable laws, including the GDPR. If you believe a child has provided us with personal information, contact apps@luminacode.lt.

Depending on your location, you may have the right to: access your personal data; correct inaccurate data; request erasure; restrict or object to processing; receive your data in a portable format; withdraw consent at any time; and lodge a complaint with a supervisory authority (in Lithuania: the State Data Protection Inspectorate, vdai.lrv.lt). To exercise these rights, contact apps@luminacode.lt.

California residents: we do not sell or share personal information as defined by the CCPA/CPRA.

Your information may be processed in countries other than your own, including the United States (our service providers). We rely on appropriate safeguards such as Standard Contractual Clauses where required.

The website uses only strictly necessary cookies. The mobile application does not use cookies; it uses device identifiers for analytics and crash reporting as described above.

We may update this Privacy Policy from time to time. We will notify you by posting the new version on this page and updating the “Last Updated” date, and, for material changes, by an in-app notice.

• Email: apps@luminacode.lt
• Website: https://physly.luminacode.lt
• Luminacode, MB, Lithuania