LEGAL
Privacy Policy
Last updated: September 28, 2026
1. Data controller
Stance is published by Ysamihal Labs, SASU, 6 rue d'Armaillé, 75017 Paris, France. Ysamihal Labs is the data controller for personal data processed through the App.
2. Data we process
Account data from Apple or Google sign-in. The profile you enter: first name, goals, level, training days and places, equipment and favorite exercises, and, if you provide them, sex, age, height, weight, activity level and pain or injury areas.
Training data: sessions, sets, repetitions, loads, records, working weights, notes and effort ratings, backed up to your account. Nutrition entries (figures and dish names). Crew content. Subscription status, notification tokens, crash reports and product usage events.
3. Apple Health and Health Connect
With your permission, Stance reads, and never writes: on iPhone, steps, active and resting energy, heart rate, body mass, sleep and workouts; on Android (Health Connect), active and total calories, basal metabolic rate, exercise, weight and sleep.
Raw Health readings are processed on your device and are not stored on our servers. Some values derived from them can leave the device: your daily calorie target, when it is computed from Health energy data; the active calories you choose to share in a Crew chat; and, for Elite, the number of hours slept, which appears in the coach's sleep message and can therefore be part of the conversation sent to the coach.
4. AI coach
To answer you, the coach sends a request to Google Cloud Vertex AI (Gemini) containing your question, the recent conversation, and a summary of your profile and training: goals, schedule, favorite exercises, plan, recovery status, records, working weights and, when needed, up to 26 weeks of workout history.
The "Allow health data" setting is off by default. When you turn it on, the request can also include your body data, pain areas, your own coach constraints, your daily check-in (soreness, sleep quality, energy) and your nutrition targets and intake.
Our servers do not store coach conversations: the conversation is kept on your device only (the last 10 exchanges) and is erased when you sign out or delete your account. Requests are processed on Google's global endpoint and may therefore be processed outside the European Union.
5. Meal and supplement photos
When you photograph a meal or a supplement label, the image is sent to Google Cloud Vertex AI (Gemini) to estimate its nutritional content. We do not store the photo: only the resulting figures and the dish name are kept in your food journal.
6. Earlier versions of the App
Versions released before Stance 3.0 offered video form analysis and an optional body scan. When used, the clip or photos were encrypted in transit and sent to Google Cloud Vertex AI and Gemini solely for analysis, and a storage lifecycle rule removes remaining analysis files within 24 hours. Only the media-free report and derived measurements were kept. Stance 3.0 no longer records or analyzes video.
7. Crew
Crew messages, voice notes, images, group photos and the workouts you share are stored so your group can see them. Your Crew profile shows other members your height, weight, goals, lifted volume and strength summary. A deleted message is hidden from the group and its voice or image file is removed; its text is erased when you delete your account.
8. Purposes and legal bases
We use data to provide and secure the App, build and adapt workouts and meals, synchronize your training, operate nutrition, recovery, Winter Arc and Crew features, manage subscriptions, deliver the notifications you enable, diagnose crashes, understand how the product is used, provide support and meet legal duties. We rely on contract performance, your consent (Health access, health data for the coach, camera, microphone, notifications), our legitimate interests in security, reliability and product improvement, and legal obligations.
9. Providers and transfers
We use Google Firebase (authentication, database, storage, functions, app integrity) and Google Cloud Vertex AI / Gemini (AI coach and photo estimates), RevenueCat (subscriptions), Expo (push notifications), Sentry (crash reports, linked to your account identifier) and Apple or Google (sign-in and payments). Some of these providers may process data outside the European Union under their data-transfer terms. We use no advertising SDK and no third-party analytics SDK.
10. Retention, sharing and security
Account data is kept while your account is active. Product usage events are deleted after 90 days; only aggregated weekly statistics are kept. We do not sell personal data. Content is shared with other people only through actions you choose, such as posting in a Crew. We use access controls, restrictive database and storage rules, and encryption in transit.
11. Account deletion and your rights
You can delete your account in the App. This deletes your profile, training history, Crew content and files, and usage events linked to your account from our servers, and erases local data on your device, including the coach conversation. A deletion receipt without your identifier is kept for 30 days. Purchase records held by Apple or Google and RevenueCat, and existing crash reports, are handled by those providers; contact us to exercise your rights with them. You may request access, correction, deletion, restriction, objection and portability, withdraw consent at any time, and lodge a complaint with the CNIL or your local supervisory authority. Stance is not intended for children under 13.
Questions? Contact [email protected].
