Privacy Policy by PostPartum Workout

Effective as of September 11, 2026

Who we are

PostPartum Workout is operated by DieBunny ("we", "us", "our"), Artilerijas 25, Riga, LV-1011, Latvia. We are the data controller for the personal data described in this policy. If you have any question about it, write to us at baltaiskakis@gmail.com.

This policy explains what the app collects, what stays on your phone, what leaves it, who else is involved, and what you can ask us to do. We have tried to describe the app as it actually behaves rather than in general terms.

The short version

You do not create an account and we do not ask for your name, email address or payment details. Your answers to the health questionnaire stay on your device and are used there to choose your exercises. Three things do leave your phone: a request for each day of workout content, a request for the daily encouragement message, and — if you subscribe — the purchase receipt. Each is described below.

Health information you give us

When you set up the app you are asked about your delivery (vaginal or caesarean), tearing or episiotomy, abdominal separation, incontinence, haemorrhoids and the date of birth of your baby. This is health data, which data protection law treats as a special category deserving extra care.

Your answers are stored only in the app's own storage on your device. They are not uploaded to us, we hold no copy of them, and we cannot see them. They are used on the device to select which exercises are safe for you and to skip those that are not. Uninstalling the app deletes them.

Our legal basis for using this information is your explicit consent, which you give by completing the questionnaire. You can withdraw it at any time by clearing the app's data or uninstalling the app; the app then cannot personalise the programme.

What we send when we fetch the daily quote

The app shows a short encouragement message each day, fetched from a server we run. To choose the message, the request includes a single summary value derived from your questionnaire — one of "Csect" (caesarean), "Epis" (tearing or episiotomy), "Urin" (incontinence) or "All" (none of these applies, or you have not answered) — along with which day of the programme you are on and your app language. Your internet address is visible to the server, as it is to any server you contact.

This single value is the only health-derived information that leaves your device, and it is the only place where an inference about your recovery could in principle be drawn. It is not linked to a name, an account or a device identifier we hold, and we do not build a profile from it. The legal basis is your explicit consent, on the same terms as above. If you would rather it were not sent at all, use the app offline: the message is optional and the app falls back to the last one it showed.

Workout content

Exercise videos, images and the daily plan are downloaded from our content storage and then cached on your device so that they do not have to be fetched again. These requests reveal which day of the programme you are downloading and your internet address. They do not carry your questionnaire answers: the app downloads a day and filters it locally.

Information collected automatically

We do not use any analytics or crash-reporting service, and the app contains no such software. We therefore receive no usage statistics, no crash reports, no device identifier and no ad-tracking ID.

What our servers do see is what any web server sees when your app requests a file: your internet address, the time, and which file was asked for. These are kept in ordinary server logs by our hosting provider for a limited period and used only to operate and secure the service.

Subscriptions and Payments

PostPartum Workout offers a paid subscription that unlocks the full programme. All payments are processed by Google Play or the Apple App Store and charged to the store account you use. We never receive or store your payment card details; that information is handled by Google and Apple under their own privacy policies and the PCI-DSS standards maintained by the PCI Security Standards Council.

We use RevenueCat, Inc. to manage subscriptions and to verify purchases on our behalf. When you start a free trial, subscribe, or restore a purchase, RevenueCat receives the purchase receipt from the app store together with an anonymous identifier generated for your installation of the app. This does not include your name, email address, or payment card details, and it does not include your questionnaire answers. RevenueCat processes this information only to operate the subscription and acts as our data processor. Our legal basis is the performance of our contract with you.

• RevenueCat — Privacy Policy
• Apple Media Services & In-App Payments — Privacy Policy
• Google Play In-App Payments — Privacy Policy

Who else is involved

We keep the list of others who handle any of this data as short as we can. It is: Microsoft (Azure), which hosts the workout content and the daily-quote server; RevenueCat, Inc., which verifies subscriptions; and Google or Apple, which run the app store and take the payment. We do not sell your data, we do not share it for marketing, and no one uses it to target you.

Transfers outside your country

RevenueCat, Inc. is based in the United States, and Google and Apple operate globally, so information described above may be processed outside the European Economic Area. Where that happens it is covered by the European Commission's Standard Contractual Clauses or another transfer mechanism permitted by law, as set out in those companies' own policies linked above.

How long anything is kept

Your questionnaire answers and your progress stay on your device until you clear the app's data or uninstall it; we hold no copy to delete. Subscription records are kept by RevenueCat and the app store for as long as the subscription lasts and afterwards for the period their own policies and tax law require. Server logs are kept for a short period and then discarded.

Your rights

If the General Data Protection Regulation applies to you, you have the right to ask us for a copy of the personal data we hold about you, to have it corrected or erased, to have its use restricted, to object to its use, to receive it in a portable form, and to withdraw consent at any time without affecting what was done before you withdrew it.

In practice we hold very little: your questionnaire answers and your progress never reach us, so a request for a copy or for erasure of those is answered by the app itself — clearing the app's data or uninstalling it removes them completely. For anything connected to a subscription, write to us at baltaiskakis@gmail.com and we will act on your request, and pass it on to RevenueCat where needed, within one month.

You also have the right to complain to a data protection supervisory authority. In Latvia this is the Data State Inspectorate (Datu valsts inspekcija); if you live elsewhere in the European Economic Area you may complain to the authority in your own country.

Security

Requests between the app and our servers use encrypted connections. Your questionnaire answers and progress are held in the app's private storage, which other apps on your phone cannot read, and are excluded from device backup and from device-to-device transfer. No method of transmission or storage is completely secure, so we cannot promise absolute security.

We protect the privacy of children

The app is intended for adults recovering from childbirth. It is not directed at children, and we do not knowingly collect information from anyone under 16. If you believe a child has provided information through the app, contact us at baltaiskakis@gmail.com and we will help remove it.

Links to other websites

The app contains links to pages we do not operate, including the policies linked above. If you follow one, you are on that organisation's site under its own policy, and we have no control over and assume no responsibility for its content or practices.

Changes to this Privacy Policy

We may update this policy from time to time. The date at the top shows when the current version took effect. Where a change materially affects how your information is used, we will make that clear in the app rather than relying on you to re-read this page.

Language

The controlling language of this Privacy Policy is English; any provided translation of this Privacy Policy is for purposes of convenience only and the English version shall govern to the extent of any inconsistency.

Contact us

If you have any question about your privacy, or want to exercise any of the rights above, email us at baltaiskakis@gmail.com. We answer as quickly as we can and within one month where the law sets that deadline. Sending us feedback or a bug report is entirely voluntary.