NeckCure β Privacy Policy
Last updated: August 13, 2026
Easyfox Studio ("NeckCure", "we", "us") built NeckCure with privacy as a core design principle. This Privacy Policy explains what we collect, what we do not collect, and your choices. It applies to the NeckCure desktop application and website (the "Service").
1. The Short Version
- π· Your camera images never leave your computer. Posture detection runs locally, in memory only. Images are not recorded, stored, uploaded, or used to identify you, and are discarded immediately after processing.
- We collect only what we need to run your account and subscription (e.g. your email, subscription status, and basic device information).
- We never sell your personal information.
2. Camera and Posture Data (Most Important)
NeckCure uses your device's camera to detect your posture. This processing happens entirely on your device:
- Camera images are processed in memory only and are not recorded, stored, or retained.
- NeckCure does not perform facial recognition, biometric identification, or identity recognition, and does not create or store a faceprint or other biometric identifier.
- All face and motion data is processed in real time, exists only temporarily in memory, and is discarded immediately after use.
- No camera image or video is ever transmitted to us or any third party.
Because images are processed locally and never retained or transmitted, NeckCure does not collect or store biometric information. Posture-related statistics that you see in the app (for example, how long you were hunched) are numeric summaries β not images β and are stored locally on your device unless you explicitly enable an optional cloud backup or sync feature in the future.
3. Information We Collect
| Category | Examples | Why |
|---|---|---|
| Account | Email address, Google account identifier (from Google Sign-In) | Create and secure your account |
| Subscription | Plan, status, renewal date, payment-provider customer ID | Provide Pro; manage billing |
| Device | A device identifier we generate, device name, last-active time | Enforce the 4-device limit; sign-in management |
| Connection | IP address, and the approximate country and network operator derived from it, recorded when your device connects to our servers | Secure the Service and detect and prevent fraud and abuse (for example, one connection being used to farm many accounts) |
| Support | Messages you send us | Answer your questions |
| Optional analytics | Pseudonymous usage events β e.g. which feature was used, session length β linked to your account identifier; never camera or posture images | Improve the app β only with your permission (see Section 9) |
We do not collect: camera images, video, facial biometrics, or the contents of your screen.
4. Payments
Payments are handled by Paddle, our Merchant of Record. We do not receive or store your full card number. Paddle processes your payment under its own privacy policy.
5. How We Use Information
- Provide, maintain, and secure the Service and your account;
- Process subscriptions and enforce the device limit;
- Detect, investigate, and prevent fraud, abuse, and violations of our Terms (this includes recording the IP address a device connects from);
- Respond to support requests;
- Improve the Service using pseudonymous usage analytics stored on our own servers (see Section 9 for your choices);
- Comply with legal obligations and enforce our Terms.
6. How We Share Information
We share personal information only with:
- Google β for sign-in (subject to Google's privacy policy);
- Paddle β for payments and subscription management;
- Infrastructure providers β hosting and storage vendors (such as our cloud backend) that process data on our behalf, under our instructions, solely to operate the Service;
- Legal β when required by law or to protect rights and safety.
We do not use third-party analytics or advertising services β usage analytics are processed on our own infrastructure. We do not sell your personal information, and we do not share it for cross-context behavioral advertising.
7. Data Retention
- Account and subscription data: kept while your account is active and for a reasonable period afterward, or as required by law.
- Security and abuse-prevention data (such as connection IP addresses): retained for as long as necessary to detect and prevent fraud and abuse, or as required by law.
- Locally stored statistics: remain on your device under your control; delete them by clearing app data or uninstalling.
- You can request deletion of your account and associated data at any time (see Section 9).
8. Security
We use reasonable technical and organizational measures to protect your information. No method of transmission or storage is completely secure, but the most sensitive processing (camera/posture) never leaves your device.
9. Your Rights and Choices
Depending on where you live, you may have the right to access, correct, delete, or port your personal information, and to opt out of certain processing.
- Delete account / data: contact [email protected] or use the in-app option.
- Analytics choices: turn usage analytics on or off anytime in the app settings. Where the law requires your prior consent (for example in the EEA/UK), analytics are off by default and collected only after you opt in; elsewhere they are on by default and you may opt out at any time.
- We will not discriminate against you for exercising your rights.
California (CCPA/CPRA)
California residents may request access to or deletion of their personal information and may opt out of "sale" or "sharing" (we do neither). To exercise these rights, contact [email protected]. You may use an authorized agent.
EEA / UK (GDPR)
If you are in the EEA or UK, our legal bases are: performance of a contract (providing the Service), your consent (optional usage analytics β off by default and withdrawable at any time), and our legitimate interests (securing and improving the Service, and detecting and preventing fraud and abuse β including processing connection IP addresses for that purpose). You may lodge a complaint with your local data-protection authority.
Taiwan (PDPA)
Easyfox Studio operates from Taiwan, so our handling of personal data is also subject to Taiwan's Personal Data Protection Act (εδΊΊθ³ζδΏθ·ζ³). You may ask to review, obtain a copy of, supplement or correct, or delete your personal data, and to ask us to stop collecting, processing, or using it, by contacting [email protected].
10. International Users
We operate internationally and may process your information in countries other than your own, including the United States. Where required, we use appropriate safeguards for such transfers.
11. Children
The Service is not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact [email protected] and we will delete it.
12. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be notified in-app or by email. The "Last updated" date shows the latest revision.
13. Contact
Questions or requests: [email protected] Β· https://neckcure.easyfox.org