Privacy Policy

Version 1.0 - 25 November 2025

1. Introduction

Obenyx Ltd ("we," "our," or "us") operates the SetStar mobile application ("App") and the website setstar.app ("Website"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our App and Website.

By using SetStar, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Information You Provide to Us

Account Information:

  • Email address (required for account creation and authentication)

  • Password (encrypted and stored securely)

  • Name

  • Age or date of birth

  • Gender

  • Height and weight

  • Fitness goals and preferences

  • Experience level

  • Workout frequency

  • How you heard about SetStar

Workout Data:

  • Exercise names and details

  • Sets, reps, and weights

  • Workout sessions and dates

  • Session duration, warmup, and cooldown times

  • Workout ratings

  • Break times between sets

  • Goals and achievements

  • Progress metrics and statistics

Financial Information:

  • Subscription purchase information (processed through Apple App Store and RevenueCat)

  • Payment transaction details (handled by Apple, not directly by us)

2.2 Automatically Collected Information

Usage Data:

  • App features used

  • Time spent in the app

  • Frequency of use

  • Navigation patterns

  • Feature interactions

Diagnostics Data:

  • Crash reports and error logs

  • Performance metrics

  • Device information (model, operating system version)

  • App version information

Location Data:

  • General location information (if enabled) for analytics and service improvement

  • Location data is not used to track your precise location or movements

2.3 Information from Third-Party Services

We may receive information from:

  • Firebase Authentication: Account verification and authentication status

  • RevenueCat: Subscription status and purchase history

  • Apple App Store: Purchase confirmations and subscription management

3. How We Use Your Information

We use the collected information for:

  • Service Delivery: Provide and maintain the App, including workout tracking, progress visualization, goal setting, and achievement tracking

  • Account Management: Create and manage your account, authenticate users, and sync data across devices

  • Cloud Synchronization: Store and sync your workout data securely in the cloud using Firebase Firestore

  • Subscription Management: Process and manage premium subscriptions through RevenueCat and Apple App Store

  • Service Improvement: Analyze usage patterns to improve features, fix bugs, and enhance user experience

  • Communication: Send account-related notifications, verification emails, and service updates

  • Support: Respond to inquiries and provide customer support

  • Legal Compliance: Comply with legal obligations and protect our rights

4. Data Storage and Security

4.1 Local Storage

Your data is stored locally on your device using iOS UserDefaults and user-scoped storage. This allows the App to function offline and provides fast access to your information.

4.2 Cloud Storage

When you create an account, your data is automatically synced to Firebase Firestore, a secure cloud database service provided by Google. This enables:

  • Data backup and recovery

  • Access to your data across multiple devices

  • Data persistence if you uninstall and reinstall the App

4.3 Security Measures

We implement security measures to protect your data:

  • Encryption in transit (HTTPS/TLS)

  • Secure authentication via Firebase Authentication

  • Access controls and user-scoped data isolation

  • Regular security assessments of our infrastructure

However, no method of transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

5. Third-Party Services

SetStar uses the following third-party services that may collect and process your information:

5.1 Firebase (Google)

  • Firebase Authentication: User authentication and account management

  • Firebase Firestore: Cloud database for storing your workout data

  • Firebase Analytics: Usage analytics and app performance monitoring

  • Firebase Crashlytics: Crash reporting and diagnostics

Firebase's privacy practices are governed by Google's Privacy Policy: https://policies.google.com/privacy

5.2 RevenueCat

  • Subscription Management: Processing and managing premium subscriptions

  • Purchase Verification: Validating subscription status and entitlements

RevenueCat's privacy practices are governed by their Privacy Policy: https://www.revenuecat.com/privacy

5.3 Apple App Store

  • In-App Purchases: Processing subscription payments

  • Purchase History: Managing subscription renewals and cancellations

Apple's privacy practices are governed by Apple's Privacy Policy: https://www.apple.com/privacy/

6. Data Sharing and Disclosure

We do not sell your personal information. We may share your information only in the following circumstances:

  • Service Providers: With third-party service providers (Firebase, RevenueCat) who assist in operating the App

  • Legal Requirements: When required by law, court order, or governmental authority

  • Business Transfers: In connection with a merger, acquisition, or sale of assets (with notice)

  • Consent: With your explicit consent

7. Your Rights and Choices

7.1 Access and Correction

You can access and update your profile information directly within the App through the Settings section.

7.2 Data Export

You can export your workout data as a PDF from the Settings screen. This includes your exercises, workout history, progress metrics, and goals.

7.3 Account Deletion

You can delete your account at any time through the App settings. When you delete your account:

  • Your account information and workout data will be deleted from our systems

  • This action is irreversible

  • Some information may be retained as required by law or for legitimate business purposes

7.4 Subscription Management

You can manage or cancel your subscription through:

  • The App's Settings section

  • Your Apple App Store account settings: https://apps.apple.com/account/subscriptions

7.5 Location Data

You can control location permissions through your iOS device settings. Location data is not required for the App to function.

8. Children's Privacy

SetStar is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately, and we will delete such information.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. By using SetStar, you consent to the transfer of your information to these countries, including the United States where Firebase and RevenueCat operate.

10. Data Retention

We retain your information for as long as your account is active or as needed to provide services. If you delete your account, we will delete or anonymize your personal information, except where we are required to retain it for legal purposes.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by:

  • Posting the new Privacy Policy on this page

  • Updating the "Last Updated" date

  • Providing in-app notification for material changes

Your continued use of SetStar after changes become effective constitutes acceptance of the updated Privacy Policy.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Obenyx Ltd

Website: setstar.app

Email: info@setstar.app

13. Additional Information for European Users

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):

  • Right to access your personal data

  • Right to rectification of inaccurate data

  • Right to erasure ("right to be forgotten")

  • Right to restrict processing

  • Right to data portability

  • Right to object to processing

  • Right to withdraw consent

To exercise these rights, please contact us using the information provided in Section 12.

14. Additional Information for California Users

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

  • Right to know what personal information is collected

  • Right to know if personal information is sold or disclosed

  • Right to opt-out of the sale of personal information (we do not sell personal information)

  • Right to non-discrimination for exercising your privacy rights

To exercise these rights, please contact us using the information provided in Section 12.

Company Information:

Obenyx Ltd owns and operates SetStar, the setstar.app website, and all related services.