Security and data
Posture has no accounts and no server of its own. Everything it knows about the person using it stays on their device, so there's no customer data for us to hold, lose or share.
What is stored, and where
- Settings, break history and progress: on the device only. Browser local storage for the web app; macOS preferences for the Mac app; the app's data folder for the Windows app (or a folder next to the program for the portable version).
- Health check answers: on the device only, used to leave out exercises that may not suit the person.
- Nothing else. No names, email addresses, keystrokes, window titles, screenshots, audio or video are collected or stored.
What goes over the network
- Break screen updates (Mac and Windows apps), about once a day: a request to
posturebreak.co.uk/mac/version.json, and when there is a new version,/mac/player.html. The download is checked against the SHA-256 hash in the manifest before it's used; anything that doesn't match is discarded. - Optional guide figures (Sam, Nina, Marcus and Mei): downloaded once from
posturebreak.co.uk/models/when someone picks one. - The web app loads from
posturebreak.co.ukand works offline after that. - Older app versions (Windows 0.3.0, Mac 0.3.4 and earlier) make the same requests to
posturebreak.vercel.app, so allow both addresses. - The apps send no analytics, crash reports or usage data.
Signals the desktop apps read
To avoid interrupting calls and presentations, the Mac and Windows apps read, on the device: time since the last keyboard or mouse input, whether another app is using the camera or microphone (the same record that drives the privacy indicator), and which app is in front and whether it's fullscreen. The Mac app can optionally read calendar busy times, with the person's permission. None of this leaves the device.
Hosting and sub-processors
- Vercel hosts the website, the web app and the downloads. It processes standard request logs (IP address, request) to serve pages (Vercel's privacy policy).
- The home page uses cookie-free Vercel Web Analytics; the app and the guides don't. See Privacy.
Builds
- The Mac app is a native AppKit app; the Windows app is built on Electron. Both show the break in a local web view with no remote code other than the checked break-screen update above.
- Code signing: the Mac download is currently an unsigned preview and the Windows installer isn't yet code-signed. Signed and notarised builds are planned.
- Open-source components include three.js and Electron. The figures are CC0 (Quaternius) and MIT-licensed (Microsoft Rocketbox) assets.
Health content
Posture gives general wellness guidance, not medical advice, and doesn't diagnose or treat anything. The health check only filters which exercises are suggested.