Privacy Policy

Feron is operated by Sameer Shaboodien trading as Feron, a sole proprietor in South Africa. We are the responsible party for your personal information under POPIA.

Our Information Officer is Sameer Shaboodien. For privacy questions, email samshabz13@gmail.com.

We collect the following:

• ·Account information: Your email address, and your display name and full name if you provide them.
• ·Workout data: Exercises, sets, reps, weight, distance, duration and timestamps you log during workouts.
• ·Body weight entries: Weight measurements you choose to record over time.
• ·Training preferences: Details you give us to calculate strength scores, such as training sex, where you choose to provide them.
• ·Profile information: Display name and profile photo, if you set them.
• ·Community information: Posts, comments, likes, friendships, and groups you choose to join. Group members can see your workout days and weekly attendance count. If you accept workout-summary sharing when joining or from your existing Group, members can also see weekly workout counts, lifting mass, distance and exercise summaries used for the muscle mix, including workouts you do not post. Individual set measurements, raw sensor data, body-weight entries and locations are not shared through Groups.
• ·Sensor and velocity data: Rep velocity and bar speed captured by a connected puck, if you use one.
• ·Optional sensor training data: If you separately opt in, selected raw motion readings, detector results, confirmed rep counts and signal-quality information, so we can improve rep counting. Recordings you reject are deleted rather than uploaded.
• ·Device and crash information: Device type, operating system version, and crash or performance reports for diagnosing errors, where diagnostics are enabled in the release.
• ·Purchase and subscription information: Where subscriptions are enabled, your account identifier, product and transaction identifiers, purchase history, and entitlement status. We do not receive your payment card or bank details from Apple or Google.
• ·Website sensor orders: Your account identifier, contact name, email, phone number, delivery address, items, amounts, payment references and status, terms accepted, receipts, refund records and delivery tracking. Card details are entered on the payment provider’s checkout, not stored by Feron. We keep order records to fulfil purchases, handle support, refunds and disputes, and meet record-keeping obligations.
• ·Testing list: If you join the website testing list, we store your email address to contact you about app or sensor testing access. You can ask us to remove it at any time.
• ·Product analytics: Only if you opt in on your device: app-use, screen-view and feature-use events associated with an account or device identifier. We do not send your email address or workout content to PostHog.

Some of this, particularly body weight and workout history, says something about your physical condition. POPIA treats health-related information as deserving extra care, and we handle it on that basis. We do not ask for medical diagnoses, financial information, or government identity numbers, and you should not put them into the app.

• ·To provide the app: workout tracking, history, streaks, analytics and insights.
• ·To sync your data across your devices when you are signed in.
• ·To run the community features and workout groups you choose to use.
• ·To check community posts and comments for unsafe content and review reports from members.
• ·To improve the app by understanding how it is used and diagnosing problems.
• ·To train and evaluate rep-counting models, but only if you opt in to sensor improvement.
• ·To send you notifications you have switched on, such as comment and group check-in alerts.

Most of this processing is necessary to give you the service you asked for. Some of it, such as optional sensor improvement and optional notifications, happens only with your consent, and you can withdraw that consent at any time in Settings without losing the rest of the app.

We do not sell your personal information to third parties, and we do not use it for advertising.

We use a small number of service providers to run the app. Each one only receives what it needs, and each has its own privacy terms.

• ·Supabase: Database and authentication. Your account and workout data are stored here.
• ·Sentry: Crash and performance reports, where diagnostics are enabled in the release. Reports can contain device or app identifiers and technical error context. This is separate from optional product analytics; we do not intentionally include your credentials.
• ·RevenueCat: Where subscription billing is configured, purchase history and subscription entitlements linked to your app account identifier, so we can provide paid access, restore purchases and manage subscriptions. Apple or Google handles payment details; RevenueCat does not receive your workout content from us.
• ·Paystack and delivery providers: Where website sensor payments are enabled, Paystack receives the amount, currency, email, transaction reference and order/account identifiers needed to process payment and handle fraud, refunds and disputes. Paystack handles card or wallet details under its own privacy terms. A courier receives the recipient’s name, phone and delivery address needed to deliver the order. These providers do not receive your workout history from us.
• ·PostHog: Optional product analytics, off by default until you opt in. Events exclude your email address and workout content, but include an account or device identifier, so they are not fully anonymous. You can withdraw consent at any time in Settings → Privacy & sharing by turning off Help improve Feron on each device. This stops future collection, discards unsent events and resets the local analytics identity. It does not delete events already received by PostHog; contact us to request deletion. Your account, workouts and insights work without this consent.
• ·OpenAI: With your explicit permission, we send the text and photos you share in posts, comments and public profile edits to OpenAI for safety checks. Your private workout history and Group attendance are not sent for this purpose. New profile photos are uploaded privately until approved. Flagged content may be reviewed by us. Turn off Community & Groups in Settings → Privacy & sharing to stop future checks and new sharing, including queued retries. This does not undo checks already sent or remove previously published content; you can delete that content or contact us. Private workout logging remains available if you decline.
• ·Expo push notifications: If you enable remote alerts, Expo receives a device push token and the notification title and message needed to deliver the alert. A group alert may include a member’s display name, group name and weekly attendance progress. Group alerts are off by default on each account and device, can be muted per group, and are limited with quiet hours.
• ·Apple Live Activities: If you use them, the active exercise, weight, set and workout time may appear on your lock screen or Dynamic Island while a workout is running.

Anything you post to the community feed is shared with other users according to the sharing controls in the app. Please do not post health, contact or location details you would not want other people to see.

When you join a Group, its members can see the days you completed a workout and how many workout days you have this week. You do not need to make a public post. You can stop workout-summary sharing from Group options. Leaving the Group or turning off Community & Groups in Settings → Privacy & sharing stops future Group sharing; your own workout history remains available to you.

We may also disclose information if the law requires it, or to establish or defend a legal claim.

Our database is hosted by Supabase in Ireland (EU). Sentry, PostHog, OpenAI and RevenueCat may also process data outside South Africa.

POPIA allows personal information to leave South Africa where the receiving country is subject to a law that protects it comparably. Ireland is covered by the European Union's General Data Protection Regulation, which meets that standard. Our providers are also bound by data-processing agreements requiring them to protect your information and to process it only on our instructions.

• ·While your account is open: We keep your workout history and account data so the app works and your history stays intact.
• ·After you delete your account: Account deletion removes account and workout data from our live cloud systems. Order records are unlinked from the deleted account, but purchase, tax, refund and dispute records may be retained for legal and operational obligations. Backup copies expire through the hosting provider’s backup retention process; account deletion does not instantly erase older backups. Unsynced copies on installed devices need to be removed on those devices.
• ·Optional sensor training data: Kept for up to three years so models can be trained and re-checked. Turning the setting off stops sharing on that device immediately and requests deletion of previously shared recordings. If the device is offline or deletion fails, Privacy & sharing shows deletion as pending and retries when the app is online; you can also retry there. Your workout history is not deleted.
• ·Records we must keep: We retain order, invoice, refund and payment-status records for five years after the relevant tax return is submitted, or longer where required for an audit, dispute or legal obligation.

Under POPIA you have the right to:

• ·Ask what personal information we hold about you, and get a copy of it.
• ·Have information corrected if it is wrong, or deleted if we should no longer hold it.
• ·Object to processing that relies on our legitimate interests.
• ·Withdraw consent for anything you consented to, such as sensor improvement or notifications.
• ·Complain to us, and to the Information Regulator, if you think we have got it wrong.

You can delete your account and everything attached to it at any time from Settings, without asking us. For anything else, email us and we will respond within 30 days.

Data is transmitted over encrypted connections and stored on managed infrastructure with access controls and encrypted backups. We use appropriate technical and organisational safeguards to protect your information, review those safeguards as the service develops, and limit access to people who need it to run the service.

If there is a security compromise that affects your personal information, POPIA requires us to notify the Information Regulator and to notify you. We will do that as soon as reasonably possible, and we will tell you what happened, what it means for you, and what we are doing about it.

The app generates suggestions automatically, such as recommended exercises, strength scores and flagged muscular imbalances. These are informational only. Nothing in the app makes a decision with a legal or similarly significant effect on you, and a person is never replaced by an algorithm in any decision about your account.

We will send you service messages about your account, your orders and important changes, because those are part of providing the service.

We will only send you marketing email if you asked for it, such as by joining the waitlist, or if you are already a customer and we are telling you about something similar to what you bought. Every marketing message has an unsubscribe link, and unsubscribing never affects your account.

Feron accounts are for people aged 18 and over, and we do not knowingly collect personal information from children. If you believe someone under 18 has created an account, contact us and we will remove it.

We may update this policy, and we will always update the date at the top when we do. For small changes, such as clarifying wording or naming a new service provider, that is all we will do.

If a change is significant, for example if it would mean using or sharing your information in a way this policy does not already describe, we will tell you directly and ask you to accept the new version before it applies to you. We keep a record of which version you accepted and when.

For any privacy question, or to make a request about your data, email samshabz13@gmail.com and it will reach our Information Officer.

If you are not happy with how we have handled it, you can complain to the Information Regulator (South Africa) at POPIAComplaints@inforegulator.org.za, or visit https://inforegulator.org.za. We would appreciate the chance to fix it first, but that is your right and we will not stand in the way of it.