Privacy Policy
This Privacy Policy explains how Apex handles information when you use the Apex mobile application (the App).
Effective date: 6 August 2026
The short version
Apex uses the iPhone camera during a workout to count exercise repetitions. Camera frames and face observations are processed only on your device and in real time. Apex does not record or upload video or photos, identify you, create a face template or biometric profile, or store camera frames or facial-landmark data.
We use the information needed to provide an account, save your workout progress, deliver requested emails, and operate subscriptions. We do not sell personal data or use camera data for advertising, marketing, or data mining.
Information we handle
Depending on the features you choose, Apex may handle:
If you choose Sign in with Apple or Google, the provider sends the account details that you authorize it to share. Apple may provide a private relay email address instead of your personal email address.
Camera and face-motion tracking
The App requests camera permission only to run camera-based workouts. While a workout is active, its on-device Vision processing may detect that a face is present and measure its position or size in the current frame to infer movement. This is face detection and movement tracking, not facial recognition.
The App does not retain images, video, camera frames, facial landmarks, face embeddings, or a biometric identifier. No camera frames or facial observations are sent to our servers, Resend, Apple Health, advertisers, analytics providers, or any other third party. You can refuse or revoke camera permission in iOS Settings; camera-tracked workouts will then be unavailable.
How we use information and our legal bases
For people in the EEA, UK, or Switzerland, we process personal data where necessary to perform our contract with you (providing the App, account, workout history, and subscription), for our legitimate interests (security, preventing misuse, and responding to support requests), to comply with legal obligations, or with your consent where required. You may withdraw consent by changing the relevant device or App setting; this does not affect processing already performed.
When we share information
We share information only as needed to run Apex:
Resend sends transactional emails such as verification codes and password-reset emails on our behalf. It receives the recipient email address and the contents needed to deliver that email.
Apple provides App Store purchases, Sign in with Apple, push-notification delivery, and, if you opt in, Apple Health. Its handling is governed by Apple’s own terms and privacy practices.
Google, if you select Google sign-in, processes that sign-in according to the information and permissions you authorize.
Service providers that host or secure account and workout data may process it solely under our instructions and for operating Apex.
We require service providers to protect information consistently with this Policy. We may also disclose information when required by law or to protect the security, rights, and safety of Apex, users, or others. We do not sell personal data, run third-party advertising in Apex, or share camera data.
Retention and deletion
We retain account, profile, and saved workout information while your account remains active, then delete or anonymize it within a reasonable period after account deletion unless a longer period is required by law or needed to resolve a dispute, prevent fraud, or keep necessary financial records. Transactional-email records are retained only as long as reasonably necessary for delivery, security, and troubleshooting.
You can request deletion of your account and associated Apex data through Settings → Delete Account when that control is available, or by emailing us at [support email]. Deleting an Apex account does not cancel an App Store subscription; manage or cancel subscriptions in your Apple ID subscription settings. Information written to Apple Health is controlled by Apple Health and can be managed there.
Your privacy rights
Subject to applicable law, you may ask to access, correct, delete, restrict, or receive a portable copy of your personal data, or object to certain processing. To make a request, contact support@ap3x-fit.com. We may need to verify your identity before responding.
If the GDPR applies to you, you may also complain to the data-protection authority in your country of residence, workplace, or the place of the alleged infringement. Our lead supervisory authority is the Czech Office for Personal Data Protection (ÚOOÚ).
Children
Apex is not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child under 16 has provided personal information, contact us so that we can delete it.
Security
We use reasonable technical and organizational measures to protect information. No method of storage or transmission is completely secure, however, and we cannot guarantee absolute security.
Changes to this Policy
We may update this Policy when the App or applicable law changes. We will post the updated version in the App and revise the effective date. If a change is material, we will provide additional notice where required by law.
Contact and controller
The controller of personal data under this Policy is Mykhailo Pashynskyi, a self-employed entrepreneur registered in the Czech Republic. For privacy questions or requests, contact support@ap3x-fit.com.
Still need help? Ask the team