Privacy Policy for Daily Abs Workout
Daily Abs Workout is developed and published by Tuntini (“we,” “us”). This policy explains what happens to your information when you use the app, and it describes the app as published on the App Store and Google Play with premium subscriptions. Your use of the app is also covered by our Terms of Use.
Tuntini is the controller of the personal data described here.
In short
Your workouts stay on your phone. We never see them. If you buy a subscription, we receive subscription information tied to a randomly generated identifier for your installation, not to your name or email, because the app has no account and no sign-in. Apple and Google take your payment, and neither we nor our subscription provider ever sees your card details. There is no advertising and no analytics.
Who we are
Tuntini, a business name of Pasi Nissinen (private trader)
Business ID: 3528533-3
VAT ID: FI35285333
Entered in the Finnish Business Information System (YTJ)
Finland
info@tuntini.com
tuntini.com
Our postal address is in the Contact section at the end of this page.
What stays on your device
Your workout history, your saved workouts, and your workout statistics are stored in a database on your device and nowhere else. They are not sent to us, not sent to our subscription provider, and not backed up by us. We hold no copy of them, so there is nothing for us to look at, export, or lose.
You can remove this information at any time through your device’s app storage controls, or by uninstalling the app.
Your reminder settings and your language choice are also stored only on your device.
Notifications and reminders
If you turn on daily reminders, the app asks your device for permission to show notifications and then schedules them locally on the device. The reminders are generated by the app itself. No reminder is sent through a server, we do not register your device for push notifications, and the scheduled notification carries no information about you or your workouts.
Your subscription identifier
We use RevenueCat to manage subscriptions. When you use the app with premium available, RevenueCat creates a random identifier for your installation, called an App User ID. It is not built from your name, your email address, or any account with us, because Daily Abs Workout has no account and no sign-in. It is stored on your device and sent to RevenueCat with subscription requests.
We describe this as an automatically generated identifier rather than as anonymous data, and we treat it as personal data under the GDPR, because it can single out one installation and be connected to a purchase history.
If you restore a purchase on a new device or after reinstalling, your purchase is transferred to the new identifier for that installation, so that your premium access follows your store account.
Subscription information
Through RevenueCat we can see, for a given installation identifier: which product was bought, whether it is monthly or annual, whether a free trial is running and when it ends, when the subscription started and when it renews, whether it has been cancelled or has lapsed, whether a refund has been recorded, and whether premium access is currently active.
We use this to know whether an installation is entitled to premium access. We cannot see who you are from it.
Technical information RevenueCat receives
According to RevenueCat’s own documentation, it receives a limited set of technical information alongside the above: your device type and operating system, the last time the app was used, your language and region setting and the currency of your store, and the purchase record issued by the store — an Apple receipt file or a Google purchase token.
Like any connection to the internet, the request from your device to RevenueCat carries your IP address. RevenueCat’s documentation states that it uses the IP address to estimate a customer’s country when the store does not provide a transaction country, and that it then discards the address rather than storing it on the customer record. We do not switch on RevenueCat’s optional device-identifier collection, so no advertising identifier and no stored IP address is kept against your installation.
On iPhone and iPad, RevenueCat’s software also reports your device’s App Tracking Transparency setting, which is the system setting recording whether apps may track you. Daily Abs Workout never asks for tracking permission and does not track you across apps or services, but RevenueCat’s software sends this setting automatically and we cannot turn that off.
RevenueCat does not receive your workout history, your saved workouts, your statistics, or any record of which exercises you performed. There is no advertising in the app, and no separate analytics or crash-reporting service.
Apple and Google
Purchases are made through the App Store or Google Play, never directly with us. Apple and Google process the payment, and in the European Economic Area they are the sellers of the subscription. Your payment card and billing details go to them under their own privacy policies. Neither we nor RevenueCat receives your card number or full payment details.
Apple and Google also give us sales and subscription reporting for the app. That reporting is largely aggregated, though it can include a per-developer subscriber identifier, a device type, and a country. It does not tell us your name or contact details.
What we use this information for
We use the information described above to:
- provide premium access and restore it when you reinstall or change device;
- verify whether a subscription is active;
- help you when something goes wrong with a purchase;
- prevent misuse of subscriptions and investigate technical faults;
- meet accounting, tax, and app-store obligations where they apply.
We do not use it to profile you, to advertise to you, or to make automated decisions about you.
Legal bases
For providing and restoring premium access, verifying subscription status, and helping with purchase problems, our legal basis is performance of the contract you enter into when you subscribe (GDPR Article 6(1)(b)).
For preventing misuse and diagnosing technical faults, our legal basis is our legitimate interest in a working and non-abused service (Article 6(1)(f)).
For records we must keep for accounting, tax, or app-store reasons, our legal basis is compliance with a legal obligation (Article 6(1)(c)).
For the information that stays on your device, no legal basis is needed, because we do not process it at all.
Who processes this information
RevenueCat, Inc. acts as our processor for subscription management, under a data processing agreement. Apple and Google act as the stores and payment providers and handle your purchase under their own privacy policies, as controllers in their own right rather than on our instructions.
We do not sell your information, and we do not share it for advertising.
International transfers
RevenueCat is based in the United States and stores data in Amazon Web Services data centres there, so using a subscription involves a transfer of the information described above outside the EEA. RevenueCat’s data processing agreement relies on the European Commission’s Standard Contractual Clauses as the safeguard for that transfer. RevenueCat also engages its own subprocessors, all of which it currently lists as located in the United States, under written terms it states are no less protective than that agreement.
How long information is kept
We do not state a fixed retention period, because these records are not ours to delete on a schedule of our choosing.
Subscription and entitlement records remain in RevenueCat for as long as we use RevenueCat for this app. Under our agreement with RevenueCat, it holds them for the term of that agreement and, once it ends, deletes or returns them at our request, subject to its routine backup and archival cycles.
Apple and Google keep their own records of your purchase under their own retention rules, which we do not control and cannot shorten. Our own accounting records are based on aggregated payouts from the stores and do not identify you.
Information stored on your device stays there until you delete it or uninstall the app.
Your rights
If the GDPR applies to you, you have the right to ask us for access to the personal data we hold about you, to have it corrected or erased, to have its processing restricted, to object to processing based on legitimate interests, and to receive it in a portable form. You can also withdraw consent where processing rests on consent, though none of the processing described here does.
Write to info@tuntini.com to exercise any of these rights.
We will act on a deletion request, but we cannot always erase everything at once. Where a completed purchase is involved, records may need to be kept to meet accounting, tax, fraud-prevention, or app-store obligations, and the stores keep their own transaction records independently of us.
If you think we have handled your personal data unlawfully, you can complain to your local supervisory authority. In Finland that is the Office of the Data Protection Ombudsman (tietosuoja.fi), which must normally handle a complaint within three months.
Finding your subscription without an account
Because the app has no account, we cannot look you up by name or email address. To find a subscription we need the installation’s identifier, which the app shows as a support identifier on the subscription screen, or the receipt for the purchase from Apple or Google.
If you contact us about a purchase, please include one of those. Without them we may be genuinely unable to locate the subscription, and we would rather say so plainly than ask you for personal details that would not help.
Permissions the app requests
The app asks for permission to show notifications, and only if you choose to turn on daily reminders. On Android it also declares the permissions needed to restore scheduled reminders after the device restarts.
The app does not request access to your camera, microphone recordings, location, contacts, Health Connect, or fitness sensors. It does not need them to work.
This policy describes what we do. It does not cover diagnostic or operational data that Apple, Google, or your device’s operating system may process independently under their own privacy terms.
Children
Daily Abs Workout is not directed at children and is not designed to collect information from children.
Security
We keep the amount of information we hold deliberately small, which is the most effective protection we can offer: your workouts never leave your device, and we hold no password, address, or payment details for you. RevenueCat states that it encrypts data in transit and at rest and holds a SOC 2 Type II report.
No online service can be guaranteed completely secure, and we cannot promise that transmission over the internet is free of risk.
Health and exercise safety
Daily Abs Workout provides general fitness guidance and is not medical advice. Exercise within your abilities, stop if you feel pain or unusual symptoms, and speak to a qualified healthcare professional before starting a new routine. Our Terms of Use covers this in full.
Changes to this policy
We may update this page as the app changes. If we make a material change to how we handle information, we will update this page and its effective date.
Contact
Send privacy questions and requests to info@tuntini.com.
Tuntini, a business name of Pasi Nissinen (private trader)
Karsikkotie 3 C 6
02780 Espoo
Finland