Proof90 — Privacy Policy
1. Who we are
Proof90 is published by Royal Nation LLC, 539 W Commerce St, Dallas, TX 75208-1953, United States ("we", "us"). Questions or requests: admin@royalnationllc.com.
2. The short version
- Your camera never records. Rep counting runs entirely on your phone. No video or image from a workout is stored or sent anywhere.
- Your progress photos stay on your phone. They are not uploaded. The before-and-after video is made on your phone too — if you share it, that's you sending it, to the app you chose.
- We don't sell your data, show ads, or track you across other apps.
- What we do store is your program record — which tasks you completed on which day, and how each was confirmed — so your progress is kept safely off your phone.
3. What we collect, and why
| Data | What exactly | Why | Where it goes |
|---|---|---|---|
| Install identifier | A random code created on your phone and kept in its secure keychain. We store only a one-way scrambled version (a hash) of it | To recognise your install without asking for your name or email | Our backend |
| Program record | Your start date and time zone; each completed task, the day it was done, and whether it was verified by the phone or confirmed on your word; grace days used | To run the 90-day program and show your streak honestly | Our backend |
| Verification evidence | Numbers only: rep counts, hold durations, step counts, the share of a session spent walking or running, duration, and (if you use a tracked run) distance | So a "verified" mark means something, and so we can fix counting errors | Our backend |
| Camera frames | Processed live, on your phone, to count reps | Rep verification | Never leaves your phone; never stored |
| Motion data | Step and activity readings from after your session: on iPhone from the motion coprocessor, on Android from Health Connect (steps and distance your phone already recorded) | Cardio verification | Processed on your phone; only the numbers above are sent |
| Progress photos | Photos you take for your weekly check-in | Your before/after timeline | Stays on your phone, in Proof90's own storage, and kept out of device backups |
Purchases — payments are handled entirely by Apple or Google; we never see card details. Our subscription provider (RevenueCat) receives purchase receipts and an anonymous app user ID to confirm your subscription.
4. What we don't do
- No advertising, and no advertising or analytics SDKs that track you across apps
- No selling or renting of personal data
- No sharing of health or fitness data for marketing or data mining
- No training of AI models on your data
- No storage of health data in iCloud
5. Who processes data for us
| Provider | Role | Location |
|---|---|---|
| Convex, Inc. | Hosts our backend and database | United States (US East, N. Virginia) |
| RevenueCat, Inc. | Subscription status | United States | | Apple / Google | App distribution and payments | Their own policies apply |
6. Legal bases (EU and UK users)
- Contract — running the program you signed up for
- Explicit consent — for health and fitness data (you can withdraw at any time in the app)
- Legitimate interests — security and fixing bugs
7. International transfers
Our backend is in the United States. If you're outside it, your data is transferred there. We use Convex (United States, N. Virginia) to hold your program record and RevenueCat (United States) to hold your subscription status, under written terms that require them to protect that information and to process it only on our instructions. If you are in Australia, Royal Nation LLC remains accountable for your information under Australian Privacy Principle 8 and takes reasonable steps to see that it is handled consistently with the Australian Privacy Principles. If you are in the EEA or the UK, these transfers rely on the European Commission's Standard Contractual Clauses and the UK Addendum in our agreements with those providers. Your progress photos and camera frames are not transferred anywhere: they never leave your phone.
8. How long we keep it
We keep your program record while you use the app. Deleting your data in the app — or through https://proof90.app/delete-data — removes it from our backend within 30 days.Records are never edited during normal use (that's how streaks stay honest), but deletion always removes them. Queued actions from a deleted install are refused, so deleted data cannot come back.
9. Your rights
Depending on where you live, you can ask us to access, correct, export or delete your data, and to object to or restrict how we use it. Use Settings → Delete my data in the app, the page above, or email admin@royalnationllc.com. We'll respond within 30 days. You can also complain to your local data-protection authority.
Subscriptions are separate. Deleting your data doesn't cancel a subscription — manage that in your Apple or Google account settings.
10. Children
Proof90 is not intended for anyone under 16, and we don't knowingly collect data from them. If you believe a child has used the app, contact us and we'll delete their data.
11. Security
Data is encrypted in transit. On your phone, program data and progress photos live in Proof90's own storage, which other apps can't read, and they are left out of device backups. They are encrypted by the phone itself: on iPhone they stay encrypted whenever it is locked; on Android they are encrypted on disk and unreadable until the first unlock after the phone starts. Your install identifier is stored only as a hash on our servers.
12. Changes
We'll update this policy when our practices change, and tell you in the app before any change that affects your data takes effect.
Effective date: 20 September 2026