Privacy policy
Reach has no account, no sign-up and no server of its own. Everything you record — your test levels, your sessions, your retests and your progress photos — is stored on your phone and stays there.
Who is responsible
Reach is made by Skovgaard Systems, a sole proprietorship registered in Denmark, CVR 46488776. For anything in this policy, write to support@reachstretch.app.
Under the GDPR, Skovgaard Systems is the data controller for the limited processing described below.
What stays on your phone
The app keeps the following in its own private storage on the device. None of it is transmitted anywhere, and we cannot see any of it:
- Your answers to the opening questions, including any pain you flag so the programme can avoid it
- Your level on each of the six flexibility tests, and every retest
- Which programme you are on, which sessions you completed and when
- Progress photos you choose to take or import
- Your settings: light or dark theme, session sounds, and the countdown and switch-sides breaks
This information is held in the app's sandboxed storage, which iOS keeps separate from other apps. It is included in an encrypted iPhone or iCloud backup if you make one, in the same way as the rest of your device.
What leaves your phone
Crash reports
If the app crashes or hits an error, a report is sent to Sentry (Functional Software, Inc.) so the fault can be found and fixed. Reach is configured to send these to Sentry's European ingest endpoint, so they are processed on servers in Germany.
A report contains a stack trace, the app version, the iOS version, the device model, and a trail of which screens were open. It deliberately does not contain personal information: the option that would attach an IP address or a device identifier is switched off, and session replay — screen recording — is not used, because Reach holds photographs of your body and a recording pipeline near them is not worth the debugging value.
Legal basis: our legitimate interest in a working app (GDPR Art. 6(1)(f)). Reports are deleted on Sentry's standard retention schedule.
App updates
The app checks for an over-the-air update when it opens, by contacting Expo's update service (Expo, Inc., United States). That request carries the app's version and platform, and — like any internet request — your IP address, which Expo uses to serve the response and for abuse prevention. No app content is sent.
Apple
When you download or update Reach through the App Store or TestFlight, Apple processes that under its own privacy policy and gives us anonymous, aggregated figures such as download and crash counts. We never receive your Apple ID, your name or your email from Apple.
This website
reachstretch.app is a set of static pages served by Cloudflare Pages. There are no cookies, no analytics and no trackers. Cloudflare processes standard request logs, including IP addresses, to deliver the pages and protect against attacks.
Camera and photo library
Reach asks for the camera only when you take a progress photo, and for the photo library only when you import one. The picture is copied into the app's own storage and is never uploaded. Reach does not read or scan the rest of your library, and it does not save anything back to your camera roll.
Health information
Flexibility measurements, pain flags and progress photos say something about your body, so we treat them as sensitive. They are processed only on your device, by you. They are not sent to us, to Sentry, or to anyone else. Reach does not read from or write to Apple Health.
What Reach does not do
- No advertising, and no tracking of you across other apps or websites
- No product analytics — the app does not report what you tap
- No selling or sharing of personal information, in any sense used by the GDPR or the CCPA
- No profiling and no automated decision-making with legal effects
Deleting your data
Because nothing is held on a server, you control all of it directly:
- One photo: open Progress, tap the photo, choose Delete photo.
- Everything: open the Today tab, tap the person icon to open You, then Start over. Every session, level, retest and progress photo is erased from the phone. It cannot be undone.
- The whole app: deleting Reach from the home screen removes its storage with it.
Crash reports already sent cannot be traced back to you, since they carry no identifier. If you believe a report contains something it should not, write to us with the approximate date and we will have it purged.
Your rights
If you are in the EU or the UK you have the right to access, correct, erase, restrict and object to processing of your personal data, and the right to data portability. In practice Reach holds no personal data about you that we could look up: there is no account to identify you by. The data in the app is in your hands, and the steps above exercise those rights immediately.
You can still write to support@reachstretch.app with any request. If you think we have handled your data badly you can complain to the Danish Data Protection Agency, Datatilsynet (datatilsynet.dk), or to the supervisory authority where you live.
Children
Reach is not directed at children under 13 and we do not knowingly collect anything from them. The app is rated 9+ on the App Store because it gives exercise recommendations.
International transfers
Crash reports stay in the EU. The update check reaches Expo in the United States, and this website is served from Cloudflare's global network; both rely on the European Commission's standard contractual clauses for that transfer.
Changes
If Reach gains an account system, sync, subscriptions or analytics, this policy will be updated before that ships, and the date at the top will change. Material changes will also be announced in the app.