Privacy policy

Last updated: 13 October 2026

NOT READY is made by Psyche Vibes Ltd, a company registered in England and Wales (company number 17229667) ("we", "us"). This policy explains how data is handled through the NOT READY iPhone app and the youarenotready.app website, why, and what you can do about it. The short version: your workout and location data stay on your phone and are not uploaded to us. Normal device backups remain your choice. Apple and RevenueCat handle subscription information separately. We do not sell your data.

Who is responsible

Psyche Vibes Ltd is the data controller. Questions or requests: privacy@youarenotready.app.

What we do not receive

• Your workout history, fitness-test answers, rep counts, location coordinates or motion-sensor observations. These are processed locally, not uploaded to us.
• Your contacts, photo library or health records. The current launch app does not request access to them.
• Camera images or microphone recordings from normal exercise counting. Processing happens on your phone; these recordings are not saved or sent to us.

The website

• Waitlist. If you join the waitlist, we store your email address, the date you signed up, the signup source and a country code provided by Cloudflare when available. The country code is approximate, not GPS or a precise location. We use your email only to tell you when the app launches. We do not add you to any other list.
• Hosting. The site runs on Cloudflare, which processes standard technical information (such as IP address and browser type) to deliver and protect the site.
• Fonts. The website loads its fonts from Google Fonts. Your browser connects to Google to download them, which exposes normal connection information such as your IP address and browser details to Google.
• Cookies. The website does not use advertising or analytics cookies.

The app

• Local progress. Your alarm times, chosen exercises, fitness-test results, rep counts, streak, run summaries, profile and settings are stored on your device. There is no app-operated cloud sync of this progress.
• Run 5K location and motion. If you grant location permission, the running companion uses GPS during an active run to estimate distance and pace. It may also use the phone's motion sensors to distinguish on-foot movement, standing still and vehicle travel. Tracking can continue while an active run is in the background; it stops when you pause or end the run. Coordinates are temporary: the app saves run summaries, not a route or location trail. Location and motion data are not uploaded to us or sent as RevenueCat customer attributes. If location permission is off, you can still use the run timer and voice guidance without distance or pace tracking.
• Camera counting. With your permission, camera frames are analysed on-device to estimate exercise repetitions, not to identify you. Normal exercise sessions do not save video or images.
• Count out loud. If you choose this fallback and grant microphone and speech-recognition permissions, supported on-device recognition turns spoken numbers into rep counts. It does not fall back to server recognition if on-device recognition is unavailable. Audio and transcripts are not saved; the resulting rep count can be stored with your progress.
• Local usage diagnostics. App events, such as an alarm firing or orders being completed, are kept in a limited on-device diagnostics queue. They are not uploaded to us or an external workout-analytics provider.
• Device backups. Depending on your Apple and device settings, normal iCloud or computer backups may include local profile and progress data. These are your device backups, not an upload to us, and are controlled through Apple's backup settings.
• Developer tests. Development builds can include a separately enabled diagnostic-recording option. With explicit consent, it saves camera video and tracking logs locally for a test, without audio. Those diagnostic files are excluded from device backups. They leave the phone only if you explicitly choose to share or export them; this option is not included in the release app.
• Subscriptions. Payments are handled by Apple. We never see your card details. We use RevenueCat to check subscription access and display the paywall and subscription-management interface. RevenueCat receives a random app user ID, purchase and renewal history, and related subscription, paywall and operational information. These billing services require network requests; the promise that workout data stays local does not mean the whole app is offline or sends no data. We do not send your workout history, fitness answers, location or motion data as RevenueCat customer attributes.

Why we use it (legal basis)

• Waitlist emails: your consent, which you can withdraw at any time.
• Subscriptions: to provide the service you paid for (performance of a contract).
• Local app processing: to provide the alarm, exercise-counting and running features you choose. Camera, microphone, speech, location and motion access are subject to the permissions you grant in iOS.
• Website delivery and security: our legitimate interest in delivering and protecting the website.

Who we share it with

The services used are Apple (App Store, payments and any device backups you enable), RevenueCat (subscription access, paywall and subscription management), Cloudflare (website hosting and waitlist storage), and Google Fonts (website font delivery). The data involved is limited to the purposes described above; workout and location data are not uploaded to our servers. These providers may process information outside the UK under their applicable privacy and data-protection terms. We do not sell your data or share it with advertisers.

How long we keep it

• Waitlist emails: until shortly after launch, or until you ask us to delete them, whichever comes first.
• Subscription records: as long as needed for accounting and legal obligations.
• Data on your phone: until you clear the relevant local data or delete the app. The diagnostics queue is limited and older events are replaced. Copies in device backups are subject to your backup settings and Apple's retention rules.

Your rights

Under UK and EU data protection law you can ask to see, correct or delete your data, object to or restrict how we use it, and withdraw consent. Email privacy@youarenotready.app and we will respond within one month. If you are unhappy with our answer, you can complain to the UK Information Commissioner's Office at ico.org.uk.

How we protect it

Your workout, alarm and progress data stays on your phone and is protected by iOS. The website and all our connections to service providers use encrypted HTTPS. Waitlist emails are stored with Cloudflare and are accessible only to Psyche Vibes Ltd. We review access to our accounts regularly and use two-factor authentication where available.

US privacy rights

If you live in California or another US state with a consumer privacy law, you have the right to know what personal information we collect, to access and delete it, to correct it, and not to be discriminated against for exercising these rights.

• We do not sell your personal information, and we do not "share" it for cross-context behavioural advertising.
• In the last 12 months, the categories we may have collected are identifiers (your waitlist email address, a random app user ID), commercial information (subscription and purchase history via Apple and RevenueCat) and internet activity needed to deliver the website (such as IP address, handled by Cloudflare).
• We do not use sensitive personal information to infer characteristics about you.

To make a request, email privacy@youarenotready.app. We will verify your request using information you have given us, and you can use an authorised agent. We will respond within 45 days.

Children

NOT READY is not intended for anyone under 16, and we do not knowingly collect data from children.

Changes

If we change this policy, we will update the date at the top. If a change materially affects how we use your data, we will tell you in the app or by email at least 30 days before it takes effect.