Privacy Policy

The short version

The DeskSquat app collects nothing about how you use it. Your camera is analyzed entirely on your computer, no video or image is ever transmitted or stored. The app makes only three kinds of network request, ever: a one-time exchange when you start a trial (it asks for your email — the only personal detail it ever sends) or paste your license key (details below), a weekly check of GitHub for app updates, which sends no personal data and can be switched off in Settings, and — only when you press the button — the feedback you type in Settings. This isn't a promise buried in legal text — it's how the software is built, and you can verify it with any network monitor.

What the app processes on your device

• Webcam frames are analyzed in memory by an on-device pose model at ~5 fps and immediately discarded. Nothing is ever recorded.
• Aggregate numbers — minutes sat, breaks, squat reps — are stored in a local file on your computer (macOS: ~/Library/Application Support/desksquat/, Windows: %APPDATA%\desksquat\). You can open or delete it anytime. It never leaves your machine.
• Your license key is stored locally and verified offline on every launch. There is no account.

What we process when you activate

Pasting your license key triggers a single online check that binds the key to your machine (this is what limits a license to one machine). The request contains your license key and a one-way hash of an anonymous hardware identifier — the identifier itself never leaves your machine, the hash cannot be reversed into it, and it says nothing about you or your hardware. We store that hash alongside your order record so a key can't be endlessly shared, and nothing else. After activation the app never contacts a license server again — the only other times this exchange happens are moving your license to a new machine or deactivating it.

What we process when you buy

Checkout is handled by Stripe (Stripe's privacy policy), which processes your payment details. We receive your email address and order information, used solely to deliver your license key and provide support. The license email is delivered via Resend, our email provider. We don't share or sell any data.

This website

This site uses no cookies and stores nothing on your device. To know whether the site works (page views and clicks on the buy/download buttons), we count visits with PostHog, self-configured to be cookieless and anonymous: nothing is written to your browser, no cross-site tracking, no ad networks, no session recording, and the "Do Not Track" browser setting is honored. Data is processed in the EU. Our hosting provider (Vercel) keeps standard, short-lived server logs, and we use Vercel Web Analytics for aggregate page counts — it is likewise cookieless: no cookies, no cross-site tracking, and visitors are never identified across days.

Trials and activation

When the app starts a free trial or activates a license, it sends us a one-way hash of your Mac's hardware identifier — never the identifier itself. It is what binds a key to one machine. We also count these two moments (trial started, license activated) in PostHog as anonymous events: no profile is created, no cookie is set, and the only thing attached is that same hash, so we can tell how many trials turn into purchases. Nothing about how you use the app — your camera, your workouts, your schedule — ever leaves your Mac.

The email you give for a trial

Starting a free trial asks for your email address. It is the only personal information the app ever sends, and it goes only to us: we email you a welcome note (via Resend) that you can reply to, and keep the address in our contact list so we can ask how the trial went and answer if you write. It is never joined to the anonymous trial count above, never attached to anything the app does on your machine, and never shared or sold. Occasional product updates are sent only if you tick the box when starting the trial; every such email carries an unsubscribe link, and unticked is the default. You can have the address deleted at any time — see Your rights.

Feedback you send from the app

Settings → About has a feedback box. Pressing Send transmits exactly what you typed, the reply-to address if you added one, and the app version, platform and whether you are on a trial — nothing else, and nothing unless you press the button. It arrives in our inbox and is used only to reply and to improve the app.

Your rights

The data controller is Eunggyu Lee (Dear RoRo), Rehbergstrasse 4, 81479 Munich, Germany. You can request a copy or deletion of the data we hold about you (your email, order record and any feedback you sent) at any time by writing to hello.dearroroapp@gmail.com. You also have the right to lodge a complaint with a data protection supervisory authority.