Privacy policy

Applies to Otter Stretch for iPhone and iPad. Last updated 21 September 2026.

Otter Stretch follows your position with the camera. Video never leaves your phone.

Who is responsible

Otter Stretch is made by Masoft LLC. For anything in this policy, including a request about your own data, write to contact@otterstretch.com.

The short version

The app has no server of its own. It has no account, no sign-in and no sync. It does not collect or sell personal information, and it does not contain advertising or third-party trackers. The one thing it sends anywhere is anonymous counts of how it is used, described below, which you can turn off in Settings › Privacy. Everything it knows about your body is a file on your own device, and you remove all of it by deleting the app. If something goes wrong you can choose to email us a recording of a session — joint positions, never video — and that is the only other way anything leaves your phone.

The camera

Otter Stretch asks for camera access because your body position is the game controller. Frames from the camera are passed to Apple’s Vision framework, which runs on the device and returns the approximate positions of a few body joints. The app uses those positions to move the character on screen and to score how steadily you held a stretch.

• Camera frames are never written to disk, never recorded, and never sent anywhere.
• Each frame is discarded as soon as the joint positions have been read from it.
• The live camera picture is never shown on screen, by design. What you see is a drawn figure.
• You can refuse camera access. The app will say so and will not be able to run a scored session, but nothing else in it is withheld.

What the app stores on your device

• A session history. An append-only log of sessions: which stretch, when, how many gaps you came through, the whiskers earned, and the calibration numbers taken at the start of a session.
• Your routines and settings. The routines you build, the corridor width and round length you choose, and whether music is on.
• The areas you picked on the first screen, so the routine the app builds for you can be named after what you asked for.
• Your last few sessions, as joint positions. Each session played with the camera is saved as a file of the joint positions Vision reported, frame by frame, together with the calibration numbers and what the game decided from them, the size of your torso in the picture, the phone model, which camera was used, the time, and a random id for that session. There is no camera frame in it and nothing that names you. The app keeps the newest eight and deletes older ones itself. These files exist so that a session that went wrong can be looked at; they are never sent unless you send one, as described under Sending a recording.

These live in the app’s own storage. They are included in your iPhone’s encrypted iCloud or Finder backup, in the same way every other app’s data is, which is how they reach a replacement phone. Masoft LLC cannot read that backup. Because there is no sync, using the app on a second device starts a separate, unrelated history.

You can clear the history at any time from Settings › Delete my history inside the app, which removes every session, your streak, your range readings and the saved session recordings from the phone. Your routines and settings are your own arrangements rather than a record of your body, so they stay; deleting the app removes those too.

Anonymous usage data

The app counts how it is used, so that what is broken can be found and fixed. This is the one thing it sends off your device. It is on by default, and you can turn it off at any time in Settings › Privacy › Share anonymous usage; nothing else in the app changes when you do.

What is sent is a list of named events with numbers on them: that a session started, how long the camera took to find you, whether a range could be measured, how many gaps you came through and the whiskers you earned, which screens you opened, and the settings you chose. Each carries the app version, the iOS version, the device model, and a random identifier the analytics library makes up for this install and for nothing else. If the app crashes, a report of where it crashed is sent the next time it opens.

What is never sent as usage data: camera frames, joint positions, your calibration, the value of any range reading, anything you typed, and anything that identifies you. There is no advertising identifier, no tracking across apps or websites, and no profile of you anywhere. The one way joint positions can leave your phone is the recording you choose to email, below.

These counts are processed for Masoft LLC by PostHog Inc. in the United States. Your IP address is discarded when a count arrives and is not stored.

Sending a recording

If the app misreads you — a stretch that never starts, a corridor in the wrong place — the saved session is the only way for us to see what happened. Sending one is your choice, and it takes two steps: turn on Settings › Privacy › Send session recordings, which is off unless you turn it on, then tap Send this session at the end of a session or pick one under Send a recording in the same place. Either opens the share sheet; choose your mail app and send the file to contact@otterstretch.com, which the screen shows and can copy for you. Nothing is sent until you send it, and the app has no way to send anything itself.

What arrives is the file described above: joint positions, never video, and nothing that names you beyond the address you sent it from. It is used to work out why the app misread you and for nothing else, is not shared with anyone, and is deleted once that is done or on request — write to the same address. The switch changes nothing else: with it off, the files stay on your phone exactly as before.

Health data, and what this app is not

Otter Stretch does not read from or write to Apple Health, and it does not ask for permission to.

It is not a medical device and it is not physiotherapy. What it measures is how far a joint moved in front of a camera; it cannot see whether you are doing a stretch well, which is why it never tells you that you are. If something hurts, stop, and ask a physiotherapist or a doctor rather than an app.

Children

Otter Stretch is not directed at children under 13 and collects nothing that identifies anyone, of any age.

Your rights

Rights of access, correction, deletion and portability under the GDPR, the UK GDPR and the CCPA all apply to personal data held by a company. Masoft LLC holds none: there is no account to look up, and the usage counts described above carry nothing that could be matched to you, so there is no record of you to find. The data about your body is in your own possession, and deleting the app deletes it. If you would like this confirmed in writing, or have a question a policy cannot answer, write to contact@otterstretch.com and you will get a reply from a person.

Changes

If this policy changes, the date at the top changes with it, and any change that widens what is collected will be described here before the version that makes it is released.

• 21 September 2026. Added Anonymous usage data, ahead of the first version that sends it. No earlier version sent anything. Added the saved session recordings to What the app stores on your device and the Sending a recording section, ahead of the first version that keeps them for everyone; before it, only test builds wrote them.