Privacy Policy

BackPain · Last updated: October 17, 2026 · En español

BackPain (“the app”, package soy.gabimoreno.backpain) is a wellbeing app that helps you look at your posture and follow a short daily routine. It is built to collect the minimum. This policy explains what the app does with your data. The app is operated by Gabriel Moreno Ibarra.

Your photos are processed on your device

The posture scanner works on a photo you choose or take. That photo is analysed entirely on your own device (using Google’s ML Kit on-device pose detection). The photo is never uploaded to any server, never stored outside your device and never shared with anyone. The scan result (an orientative score) stays on your phone.

What we collect

You can use the app without creating an account. Signing in is optional, and only there so your answers follow you if you change phone.

• Onboarding answers: where your back bothers you, how many hours a day you sit or look at a phone, how long you have noticed it, and your age range and gender. They personalise your experience and help us understand who the app helps. They do not identify you personally.
• Usage: in-app events (which screens you see, which steps you complete, whether you start a trial or a subscription) to improve the app and measure what works.
• Install source: where the install came from (for example, a campaign), through Google Play’s install referrer.
• Subscription status: whether you have an active subscription, through Google Play and our paywall provider.
• If you sign in with Google (optional): your email address, your name and your Google profile picture, plus a server copy of the onboarding answers above, so they follow you if you change phone. If you never sign in, none of this leaves your device.

We do not collect precise location. The app shows no ads. Your data is never sold.

Analytics (Google Analytics for Firebase) counts usage with an identifier of its own for the installation. Its advertising features are switched off and it does not read your device’s advertising ID.

BackPain ads on Meta (only if you accept)

BackPain advertises on Instagram and Facebook. To know which ads work, the app asks you the first time you open it whether you accept sharing some data with Meta. Only if you accept, the app sends Meta your device’s advertising ID and only 2 things: whether you came from one of our ads (the install and each time you open the app) and whether you start the trial or subscribe (with the amount and currency).

We never send it your answers, your measurements, your photos or your scan result. The legal basis is your consent. If you do not accept, nothing reaches Meta and the app works just the same. You can change your decision anytime in Settings. On iPhone, after you accept, the system also asks your permission to use the advertising ID: if you do not give it, Meta gets the same things, just without that ID. You can also reset or delete your advertising ID in your Android settings under Privacy › Ads.

Recording of the welcome and the plan (only if you accept)

With that same question, only if you accept, the app records how you use 2 screens: the welcome and your plan. It shows us what isn’t clear, so we can fix it. The onboarding questions, the scanner and the camera are never recorded.

The recording hides every text and every image: it shows the taps, the scrolling and how long you spend on each screen, not what it says. On iPhone the whole screen is hidden. It is processed by PostHog on its servers in the European Union, without keeping your IP address, and deleted after 30 days. The legal basis is your consent. If you do not accept, nothing is recorded, and you can withdraw it anytime in Settings.

When you write to us

The app has two ways of reaching us, and they are deliberately different. Each one tells you on screen what leaves your phone before you start typing.

• Feedback (anonymous): no sign-in is asked for and nothing identifies you. We store your message and, so a report can be triaged without asking you follow-up questions, the app version, your phone model, its Android version and your language. If you write your own name or email into the message, that is on you, and we store it as part of the message.
• Contact (signed in): because a question is only worth asking if there is a real address to answer it at, this one is filed under your identity. On top of the message and the same app and device context, we store your email address, your name and your Google account id.

A contact message also sends two emails through our support mailbox: one to us, so we see it, with your address in Reply-To so the answer reaches you, and an acknowledgement to you.

When you apply to create with us

Our professionals page has an application form for content creators. If you use it, we store what you type (your name, country, email address, social media handle and a link to a sample video), plus the date, IP address and browser of the submission and the version of the creator agreement you accepted — that record is the proof of your acceptance. We use it only to evaluate and manage the collaboration, it is emailed to our own support mailbox so we can answer you, and it is never sold. Legal basis: steps taken prior to entering into an agreement (art. 6.1.b GDPR). Ask for deletion any time at soporte@gabimoreno.soy.

Permissions

Photos / camera: only so you can choose or take the photo for the scan. As explained above, the photo is processed on your device.

Who we share data with

We use a small number of providers so the app works:

• Google Play handles subscriptions (billing) and the install source.
• Superwall shows the subscription screen and processes purchase events.
• Google Analytics for Firebase processes usage events to improve the app, with its advertising features switched off.
• Meta Platforms Ireland, only if you accept, receives the advertising ID, the install, app opens and the start of a trial or subscription, to measure which ads work.
• PostHog (servers in the European Union), only if you accept, receives the hidden recording of the welcome and the plan, without your IP address, and deletes it after 30 days.
• Google Firebase stores what leaves the device: the server copy of your answers if you sign in, and anything you send us through the app.
• Google Workspace carries the support emails triggered by a contact message.

Each provider processes data under its own privacy policy. We never sell your data.

Health data

Your posture score is orientative. BackPain is not a medical device, does not diagnose or treat any medical condition, and does not replace a health professional’s advice. If you have persistent pain, see your doctor.

Data stored on your device

The app saves a small amount of information locally (using Android DataStore), such as your onboarding answers and whether you have completed the onboarding. It is deleted when you uninstall the app.

Security

All data that leaves the device travels encrypted (HTTPS).

Data retention and deletion

We do not store your photos, and if you never sign in, your data stays on your device and is removed when you uninstall the app.

Messages you send us are kept for as long as we may still need them to answer you or to fix what you reported. Deleting your account does not delete them, since they are a conversation we had, not part of your account. Ask us and we delete them too.

If you did sign in, you can delete your account and its server copy of your answers at any time, from Your data inside the app or by writing to us. The full steps, and what is and is not covered, are on the account deletion page. To request access or rectification, write to soporte@gabimoreno.soy.

Children

The app is not directed to children and does not knowingly collect data from children.

Changes to this policy

If this policy changes, the “last updated” date above will be revised.

Contact

Questions? soporte@gabimoreno.soy