DeskFit
Privacy Policy
In short: DeskFit stores your account details and your break/exercise history so your schedule and streaks sync across devices. Your camera is used only to count reps on your device — DeskFit never records, stores, or uploads camera images or video, to us or anyone else.
1. Introduction
DeskFit Limited ("DeskFit", "we", "us", "our") provides the DeskFit mobile application (the "App"), which schedules short movement breaks during your work day and verifies each break using your device's camera and on-device pose detection.
This Privacy Policy explains what information the App collects, how we use and protect it, and the choices you have. It applies to everyone who downloads or uses the App. By using DeskFit, you agree to the collection and use of information as described here. If you do not agree, please do not use the App.
This policy should be read together with our Terms and Conditions.
2. Information we collect
DeskFit is built to work with as little personal information as possible. Here is everything the App collects and where it comes from.
| Category | What it includes | Where it comes from |
|---|---|---|
| Account information | Email address and password (stored as a salted hash, never in plain text) | You provide it when you create an account |
| Schedule preferences | Work days, work hours, break interval, chosen exercises (squats / push-ups / both) | Set by you during onboarding or in Settings |
| Break & activity history | Timestamps of scheduled breaks, completion status, rep counts per exercise, session duration, streaks, and earned medals | Generated automatically as you complete (or skip) missions |
| Camera-derived output | A live rep count only — see Section 3 | Computed on your device while a Mission is active |
DeskFit does not currently collect: precise location, contacts, photos from your library, advertising identifiers, or health data from other apps or wearables. We do not embed third-party analytics or advertising SDKs in the App. If this changes in a future update, we will update this policy first.
3. Camera access and on-device processing
The Mission screen asks for camera access ("DeskFit needs camera access to count your reps during break missions") so it can confirm you actually did the movement before letting you dismiss a break.
- Camera frames are analyzed entirely on your device, using Apple's on-device Vision framework (iOS) or Google's ML Kit Pose Detection (Android).
- Video and image frames are never recorded, saved to your device's photo library, transmitted over the network, uploaded to DeskFit's servers, or shared with any third party.
- The camera pipeline produces only a numeric result — your rep count for that session — and it is that number, not any image or video, that is saved to your break history and, if you're signed in, synced to your account.
- You can decline or later revoke camera access in your device's system settings. Camera-verified missions won't work without it, but the rest of the App (scheduling, streaks, stats) is unaffected.
4. How we use information
We use the information described above to:
- Create and secure your account, and let you sign in across devices;
- Run the App's core functionality: scheduling breaks, showing your Mission, and confirming reps;
- Sync your schedule, break history, streaks, and medals between devices via our database provider;
- Calculate stats shown in the App — streaks, lifetime reps, weekly challenges, and your consistency heatmap;
- Respond to support requests you send to support@deskfit.ai;
- Maintain the security and integrity of the App and investigate misuse.
We do not use your information for targeted advertising, and we do not sell your personal information.
5. Storage & security
If you create an account, your schedule, break history, streaks, and medals are stored in a hosted database operated by our infrastructure provider, Supabase. Access to your records is restricted by row-level security policies so that only your authenticated account can read or write your own data. Data is encrypted in transit (HTTPS/TLS) between the App and our database provider, and passwords are never stored in plain text.
If you use the App without creating an account, your schedule and activity history are stored only in local storage on your device and are not transmitted anywhere.
No method of electronic storage or transmission is 100% secure. While we work to protect your information, we cannot guarantee absolute security.
6. Sharing & third parties
We do not sell, rent, or trade your personal information. We share information only in these limited circumstances:
- Service providers: Supabase, which hosts our database and handles account authentication, acting under our instructions and its own data protection terms.
- App marketplaces: Apple (App Store) and Google (Google Play), which process any subscription payment you make and provide us with limited transaction information (see Terms and Conditions, Section 4) — DeskFit does not receive or store your full payment card details.
- Legal requirements: if required to comply with a legal obligation, court order, or to protect the rights, safety, or property of DeskFit, our users, or the public.
- Business transfers: if DeskFit is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction, subject to this policy or a materially equivalent one.
7. Data retention
We retain your account and activity data for as long as your account is active, so your schedule and history keep syncing correctly. If you delete your account, we delete your profile, break history, and medals from our production database, other than records we're required to keep for legal, tax, or fraud-prevention purposes, which are retained only as long as necessary for that purpose.
To request account deletion, email support@deskfit.ai from the address associated with your account, or use the delete-account option in the App's Settings once available.
8. Your rights & choices
Depending on where you live, you may have some or all of the following rights over your personal information: to access it, correct it, delete it, receive a copy of it in a portable format, restrict or object to certain processing, and withdraw consent where processing is based on consent. To exercise any of these, contact us at support@deskfit.ai; we will respond within a reasonable time and in line with applicable law.
New Zealand users: We handle personal information in line with the Information Privacy Principles of the Privacy Act 2020. You may ask what personal information we hold about you and ask us to correct it. If you have a concern we haven't resolved, you can complain to the Office of the Privacy Commissioner (privacy.org.nz).
EU/UK/EEA users: Where the GDPR or UK GDPR applies, our lawful bases are: performance of a contract (running your account and syncing your data), legitimate interests (securing and improving the App), and consent (camera access, which you grant through your device's permission prompt and can withdraw at any time). You have the right to lodge a complaint with your local supervisory authority.
California users: Under the CCPA/CPRA, you have the right to know what personal information we collect, request its deletion, and not be discriminated against for exercising these rights. As noted above, we do not sell personal information.
9. International data transfers
DeskFit Limited is based in New Zealand, and our database provider may store and process data on servers located outside New Zealand. Where we transfer personal information internationally, we take reasonable steps to ensure it continues to receive an appropriate level of protection.
10. Children's privacy
DeskFit is not directed at children, and we do not knowingly collect personal information from anyone under 16 years of age. If you believe a child has provided us with personal information, contact us at support@deskfit.ai and we will delete it.
11. Notifications
DeskFit's break reminders and end-of-day recap are scheduled and delivered locally on your device — they are not routed through a remote push notification server, and no notification content is sent to DeskFit. You can turn notifications off at any time in your device's system settings, though you'll then need to check the App manually for upcoming breaks.
12. Changes to this policy
We may update this Privacy Policy from time to time, for example as the App gains new features. If we make material changes, we will update the "Effective date" above and, where appropriate, notify you in the App. Continued use of DeskFit after a change takes effect means you accept the updated policy.
13. Contact us
Questions, concerns, or requests about this policy or your personal information can be sent to:
DeskFit Limited
New Zealand
support@deskfit.ai
Last updated 26 August 2026.