Legal
Privacy Policy
Corset ("we", "us") is an app that runs and records exercise routines for the back, neck, hips and knees, at corset.app. This policy explains what information we collect, how we use it, and the choices you have.
Summary
Corset works without an account and keeps your routines and history on your device. We do not sell your data, show ads, or require sign-in for everyday use.
What stays on your device
When you use Corset, this information stays on your phone or in your browser:
- Your first name, if you enter it, and the body area you chose
- Your routines, including exercises you add yourself, and their schedules
- The sessions you did, and your answers to "how much is it bothering you today?"
- Your settings for voice cues, reminders, and appearance
- A random device ID, used only if you link a fitness app or buy Corset Plus
This stays on your device unless you choose to share it yourself (an export, a backup file or a routine link), link a fitness app, or buy Corset Plus, as described below. Deleting the app or clearing browser data removes your Corset information. Backup files and exports are files you save and send yourself; we never receive them.
Adding exercises with an AI assistant
Corset can copy a ready message for you to paste into an AI assistant such as ChatGPT, Claude or Gemini, together with your exercises. Corset does not send anything to these services. What you give them, including a photo of an exercise sheet, goes to that company under its own terms and privacy policy. Cover your name and other personal details first. The routine you paste back into Corset stays on your device.
The Corset connector for AI assistants
If you add the Corset connector (mcp.corset.app) to an AI assistant such as Claude, the assistant sends it the routine it wrote from your exercises so Corset can check it and make a routine link. The connector reads that routine in memory to answer that one request and then drops it: it is not stored, logged or shared, it needs no account, and it sets no cookies. The routine travels only inside the link you get back, and the part of the link that holds it is never sent to our servers when you open it. Your conversation itself, including any photo of an exercise sheet, stays with the assistant's company under its own terms and privacy policy. If the connector itself fails, we keep the technical error message to fix it, never the routine or anything you sent.
Optional fitness app linking
If you link Garmin Connect, we store a secure connection on our servers at api.corset.app so finished routines can appear in your Garmin account. We never see your Garmin password. Uploaded summaries include the timing and plan names you already see in Corset.
You can disconnect at any time in Settings → Connected apps. That removes the connection from our servers right away. Email hello@corset.app if you need help or cannot access the app.
Purchases (Corset Plus)
Corset is free right now and Corset Plus is not on sale.
When Corset Plus is on sale, it is an optional one-time purchase. Payment is handled by Stripe, on Stripe's own checkout page. We never see or store your card or bank details.
When you buy Corset Plus, we keep the following on our servers at api.corset.app:
- Your membership key and whether it is active
- The email address you entered at checkout
- Stripe's reference numbers for the customer and the payment
- The random device IDs of the devices where the key is in use (up to five)
We use this to unlock Corset Plus on your devices, to restore it when you enter your key, to handle refunds, and to answer support requests. We do not use your email for marketing. Stripe sends your receipt and keeps its own payment records as an independent controller, including information it needs for fraud prevention and tax.
We keep your membership record for as long as the membership is active. Payment records are kept for as long as tax and accounting law requires. Your routines, answers and settings are not part of the purchase and stay on your device.
Local notifications
If you enable reminders in a phone app, it schedules notifications on your device. "Add to my calendar" creates a calendar file on your device. Neither is sent to our servers.
Website and web app
Our website and the web app at web.corset.app are hosted on Cloudflare. Basic server logs may be kept for security. The web app saves your data in your browser unless you clear it.
What we do not collect
- No Corset account or social login, even with Corset Plus
- No card or bank details (Stripe handles those)
- No in-app analytics or advertising trackers
- No sale of personal information
- No collection of precise health diagnoses or clinical records
Legal bases (EEA/UK)
Where GDPR applies, we process app data based on your use of the app. Purchase data is processed to perform our contract with you and to meet our legal obligations (tax and accounting). For optional fitness app linking, we rely on your consent, which you may withdraw by disconnecting in the app or contacting us.
Your rights
Depending on where you live, you may have rights to access, correct, delete, or receive a copy of personal information we hold about you (fitness app connection data and, if you bought Corset Plus, your membership record). Contact hello@corset.app and we will respond within a reasonable time. California residents may also request disclosure of categories of data we collect; as described above, routine use stays on your device and we collect minimal server-side data.
Children
Corset is not directed at children under 13 (or 16 in the EEA where applicable). We do not knowingly collect personal information from children. Contact us if you believe a child has provided information and we will delete it.
Changes
We may update this policy when the app or legal requirements change. The effective date at the top will be revised. Continued use after changes means you accept the updated policy.
Contact
Questions about privacy: hello@corset.app
See also our Terms of Use and Support page.