What we collect, in plain words.

The camera

Every five minutes by default, the app opens your webcam for a moment, hands the picture to the posture detector, keeps thirteen numbers (where your head and shoulders sit, tilt, lean, and how confident the detector was), and closes the camera. The picture is never written to disk, never kept in memory past the reading, and never sent anywhere. While a nudge is on screen the app checks every two seconds instead, so the nudge can clear as soon as you reset.

What stays on your Mac

Your readings, your calibration, your settings and the short notes the assistant writes live in one plain database file in your Library folder. You can open it, copy it or delete it. Removing that file clears your local posture history and settings. Optional assistant keys and account credentials use macOS secure storage. If secure storage is unavailable, new credentials cannot be saved. Sign out and remove your assistant key in Settings before deleting the app.

Connections from your Mac

• Update check. Thirty seconds after launch, then every six hours, the installed app asks GitHub whether a newer version exists. It sends the version you have. Block github.com for BetterPosture to stop it.
• Install ping and launch check-in. One anonymous ping after you finish onboarding, and a check-in each time the app opens: app version, macOS version, chip type and a random id generated on your Mac. Never posture data. The switch for anonymous install and launch counts is in Settings and is also shown during onboarding. It is on by default. Off means nothing is sent, not even the check-in. These events go to PostHog.
• Assistant notes. Off by default. If you turn them on and paste your own API key, the app sends daily totals to Anthropic to phrase a note. Anthropic bills usage separately from your Pro purchase. Those totals include upright percentage, minutes watched, nudges, days watched, this week against last. Never a frame, never a body measurement, never a single reading. Turn it off in Settings and the notes fall back to local wording.

Optional Pro activation also uses your purchase email and access records. The connections and a firewall test are on the verify page.

Optional Pro access

Free detection, profiles, history, built-in notes and weekly reviews do not need an account. Pro requires sign-in with your purchase email. Your verified email and purchase/access records are handled by our account and payment services. Your camera frames, body measurements, calibration and reading history stay on your Mac.

Saved Pro access works for up to seven days after a successful online check. Connect again to refresh it. Your sign-in session lasts up to 30 days before you need to sign in again. Online checks apply changes such as a refund. This is separate from posture detection, which works without an account or connection.

Page views

The site uses PostHog to count page views and page leaves, with a random identifier stored in your browser so repeat visits are not double counted. It records the page, your browser type and the country PostHog infers from your connection. No name, no email, no cross-site tracking, no advertising. The data is processed on PostHog's US servers. You can block the site’s PostHog requests with a tracker blocker. Page counting is separate from the site’s purchase and account features.

The two waitlists

If you leave your email for an Intel or Windows build, or for Pro, it is stored in PostHog as a contact with the date you signed up and which list you joined. It is used for that one email and nothing else. Write to us and we delete it.

Buying Pro

Checkout happens on Stripe. Stripe handles your card and your billing address; we never see your card number. Stripe passes us your email, your billing country (for tax), and the order reference. Your order and access records let you recover your purchase and let us apply refunds. An offline Mac may keep its current access until the next online check or the seven-day offline period ends. Stripe's own privacy policy covers what Stripe keeps.

Optional account access

Your app contacts betterposture.app/api/account to sign in and refresh access. Our server uses Supabase for authentication and account/access records, and Resend to deliver sign-in codes. These services do not receive your webcam frames, calibration or posture reading history. Signing in does not turn on AI notes.

Support email

Anything you send to hello@betterposture.app is kept as a normal email thread so we can answer. If you ask for a quote to be used on the site, it is used only with your written yes.

• See or delete any email or account records we hold for you (waitlists, purchase, support). Write to hello@betterposture.app from that address.
• Delete app data. It is yours already: remove the app and the database file in your Library folder. This removes your local history. It does not remove purchase records or daily totals already sent to Anthropic with your permission.
• Turn things off. The install ping and the assistant notes each have a switch in Settings. A tracker blocker can block the site’s analytics requests.
• Report a mistake. If the app or the site does something this page does not say, tell us and this page is corrected first, then the code.