Privacy policy

Who we are

Get That Booty is an app for iPhone, iPad and Apple Watch. It's made by Verma Technologies Limited, registered in England and Wales (company number 16558606). Our registered office is 167–169 Great Portland Street, 5th Floor, London W1W 5PF, United Kingdom.

We are the "controller" of your personal data. That means we decide how it's used and we're responsible for it.

Our representative in the EU is [EU representative name and address]. You can contact them about anything in this policy if you live in the EU.

This policy covers the Get That Booty app, the Apple Watch app, this website, our emails and our support inbox.

What we collect and why

Photos and measurements are off unless you turn them on. Photos stay on your phone, and we never upload them. Measurements are saved to our server, kept private like your health notes, with your consent. If you tap "Save image", your iPhone or iPad asks before we touch your photo library.

Apple Health. Only the Apple Watch app uses Apple Health, and only if you allow it. It saves your workouts there. It reads nothing from Apple Health, and we never receive your Health data.

Even if you don't sign in, your plan, training and set-up answers are stored on our server under your random app ID. That's how reminders and backups work. Health information is different: see below.

Where it comes from. From you, from your iPhone, iPad and Apple Watch, from Apple (whether your membership is active), and from Google or Facebook if you sign in with them.

Google sign-in. If you sign in with Google, our use of information we receive from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.

Your health information

During set-up we ask if there's anything to work around, like a sore knee, a pregnancy or a recent birth. You don't have to answer.

If you do, we ask for your clear permission first. The same permission covers tapping "Hurts, not hard" and pausing because you feel unwell. We use this only to change your moves and safety tips. It's never used for marketing. It never goes to our analytics or crash tools, and that includes those taps.

Your health answers stay on your phone until you sign in or join. Then they're saved to our server, kept apart from everything else and locked down.

If you don't give permission, a "Hurts, not hard" or unwell tap still works in that session. If you haven't agreed, we keep it only on your phone for 14 days to keep you safe, then delete it. We never see it.

You can change or delete it any time in the app: You, then Things to work around. Deleting it withdraws your consent. If you withdraw consent, we pause your plan rather than switch you to moves that may not suit you.

If you live in the US, our Consumer Health Data Privacy Policy explains this in the way some state laws require.

What we never do

• Sell your personal data, or share it for advertising.
• Use advertising IDs, or track you across other companies' apps and websites. There's no tracking prompt because there's no tracking.
• Put ad or social media tracking code in the app.
• Send you marketing emails. Our notifications are only about your training and your payments.
• Make automated decisions about you that have legal or similarly big effects.

Who helps us run the app

These companies process data for us, under contracts that only let them use it to provide their service to us.

Apple handles your payments, refunds, notifications and Sign in with Apple, under Apple's own privacy policy. In the UK and EU, Apple Distribution International Ltd sells your membership. Google and Facebook only get involved if you choose to sign in with them. Facebook gives us your name and email only: no friends list, and we never post for you.

We may also share data if the law requires it, to protect someone's safety, or if our business is sold. If it's sold, the new owner must keep to this policy.

Where your data goes

Most of your data is stored in the UK or EU. RevenueCat is in the US, and Google may store email there. AWS, PostHog and Sentry are US companies, so their staff may reach data from the US for support. The app's move photos and voice cues reach your phone from AWS servers near you (Amazon CloudFront), which see your IP address. Cloudflare, a US company, handles this website's visitor logs on its global network. When data goes outside the UK and EU, we use the UK's International Data Transfer Agreement, the EU's Standard Contractual Clauses, or the Data Privacy Framework where the company is certified. Ask us for a copy.

Wherever you live, we send your data to the UK, the EU and the US to run the app. Each company in the table above is bound by contract to protect it. Their countries' laws may differ from yours, and courts or authorities there may be able to reach it. Extra rights where you live says more for some countries.

How long we keep it

When the time's up, we delete the data so it can't be recovered, or make it fully anonymous.

Your rights and choices

You can ask us to:

• See the data we hold about you, and get a copy. In the app: You, then Privacy, then Download my data.
• Correct it, if it's wrong.
• Delete it. In the app: You, then Account, then Delete account. Or see Delete your account.
• Move it to another service, in a common file format.
• Object to or limit how we use it.
• Withdraw consent any time. This doesn't affect what we did before.

Usage counts: turn off "Help improve the app" in You, then Privacy. Outside the US and UK it starts off, and only goes on if you say yes. We ask once, in your second week. In the UK, the law allows usage statistics like these if we tell you clearly and you can say no at no cost. You can, in one tap.

Email privacy@getthatbooty.uk from the address on your account. If you never gave us an email, use Talk to a person in the app. It adds your app ID, so we can find your data. We reply within one month. We'll never charge you, unless a request is clearly unfounded or excessive.

Age

Get That Booty is for adults, aged 18 and over. We ask your month and year of birth to check. If you're under 18, the app won't build a plan for you, and we don't keep your answer. Only a note stays on your phone, until you turn 18. In some US states, the law asks the app to check your age range with Apple. Apple shares only the range, never your birth date. Your birth date is never sent to analytics.

If you're a parent and think your child gave us data, email us and we'll delete it.

US state rights

Some US states, including California, give you extra rights. These include knowing what we collect, deleting it, correcting it, and not being treated differently for using your rights. We don't sell or share personal data for advertising, so there's nothing to opt out of. We don't use sensitive data to infer things about you. To use your rights, email us. You can use someone to act for you, and we'll check it's really you. If we say no, reply with "Appeal" in the subject and we'll decide within 45 days. If you're still unhappy, you can contact your state's Attorney General.

What we collected in the last 12 months, in the words California law uses:

• identifiers (email address, sign-in ID, random app ID);
• personal records (first name);
• characteristics protected by law (your age, from your month and year of birth);
• commercial information (your membership);
• internet or app activity (usage counts, only if your switch is on, and crash reports);
• sensitive personal information (health information you choose to give).

The sources, purposes, companies and time limits are the ones in this policy. We don't sell it, share it for advertising, or give it to anyone for their own marketing.

Do Not Track and Global Privacy Control: we don't track you or sell your data, so these signals change nothing. You're already opted out.

Consumer health data: in Washington, Nevada and Connecticut, read our Consumer Health Data Privacy Policy too.

Extra rights where you live

This whole policy applies wherever you live. Some countries add rights, or ask us to tell you more. You can use any of these rights by emailing privacy@getthatbooty.uk.

Canada, including Quebec

The person in charge of protecting your personal information is our Director. Contact them at privacy@getthatbooty.uk. Your data is stored outside Canada, in the UK, the EU and the US. You can see and correct your data, withdraw consent, and, in Quebec, get it in a common file format. You can complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca). In Quebec, you can also complain to the Commission d'accès à l'information (cai.gouv.qc.ca).

Australia and New Zealand

We follow the Australian Privacy Principles and New Zealand's Information Privacy Principles. Your data goes to the UK, Germany and the US. Complain to us first. If you're not happy with our answer after 30 days, you can go to the Office of the Australian Information Commissioner (oaic.gov.au) or New Zealand's Privacy Commissioner (privacy.org.nz).

Brazil

Under the LGPD, we use your data to perform our contract with you, with your consent (health information, measurements and usage counts), for our legitimate interests (such as keeping the app secure), and to meet legal duties. You can ask us to confirm we hold your data, and to see, correct, anonymise, pause the use of, or delete it. You can also move it, learn who we share it with, learn what happens if you say no to consent, and withdraw consent. Our contact for data protection (encarregado) is privacy@getthatbooty.uk. Data goes to the UK, the EU and the US under safeguards the LGPD allows. You can complain to the ANPD (gov.br/anpd).

India

You give consent when you use the app and choose its options, and you can withdraw it any time. You can get a summary of your data, correct, complete or erase it, and name someone to use your rights if you can't. Our grievance contact is privacy@getthatbooty.uk. We answer within 90 days at most, and usually within a month. If you're unhappy with our answer, you can complain to the Data Protection Board of India.

Japan

We are Verma Technologies Limited, 167–169 Great Portland Street, 5th Floor, London W1W 5PF, United Kingdom. Our representative is our Director, Kanwar Sahib Verma. We use your data only for the purposes in this policy. Companies in the UK, the EU (Germany) and the US handle it for us, under contracts that require protection equal to Japanese law. Ask us and we'll explain those measures and the data protection rules in those countries. You can ask us to disclose, correct, stop using or delete your data, and to see records of where we sent it.

South Korea

Our privacy officer is our Director (privacy@getthatbooty.uk).

Data sent outside Korea. This transfer is needed to give you the app.

• What: the data listed in What we collect and why.
• Where and to whom: the companies and countries in Who helps us run the app. Ask us for each company's privacy contact.
• When and how: over an encrypted connection, when you use the app.
• Why: to run the app, as that table says.
• How long: as in How long we keep it.
• How to refuse: don't use the app, or delete your account. Usage counts can be turned off on their own. Without the transfer, the app can't work.

The app keeps a sign-in key in your device's keychain, so it can reconnect you to your plan. If "Help improve the app" is on, it also keeps a random usage ID (see Cookies). Turn that switch off to remove it. You can complain to the Personal Information Protection Commission, or call the KISA privacy centre on 118 (privacy.kisa.or.kr).

Switzerland

Swiss data protection law applies. Switzerland recognises the UK and the EU as safe for data. For the US, we rely on the Swiss–US Data Privacy Framework or standard contract clauses. You can complain to the Federal Data Protection and Information Commissioner (edoeb.admin.ch).

South Africa

You can ask to see or correct your data at any time. If you're not happy with how we handle a complaint, you can contact the Information Regulator (inforegulator.org.za).

Everywhere else

You have at least the rights in Your rights and choices, wherever you live.

This website

This website sets no cookies and runs no analytics or tracking. Our web host, Cloudflare, keeps short server logs, like your IP address and the page you asked for, to keep the site secure. If your browser can't reach the site, it may send Cloudflare an error report, so they can fix their network. Visits that work are never reported. See Cookies.

Keeping it safe

Your data is encrypted when it travels and when it's stored. Health information is kept apart, and only a few people can reach it, for support or safety. Each of them has their own login, and we only give access that's needed. The companies that help us are bound by contract to keep your data safe. No system is perfect. If a breach puts you at risk, we'll tell you and the regulator as the law requires.

Changes

If we change this policy in a way that matters, we'll tell you in the app before it applies. The date at the top shows the latest version.

Contact and complaints

Email privacy@getthatbooty.uk, or write to Verma Technologies Limited, 167–169 Great Portland Street, 5th Floor, London W1W 5PF, United Kingdom.

Please tell us first if you're unhappy, and we'll put it right where we can. We'll confirm we've got your complaint within 30 days.

You can also complain to the UK's Information Commission (ICO) at ico.org.uk or on 0303 123 1113, or to the data protection authority where you live in the EU. Other countries' regulators are listed in Extra rights where you live.