Privacy notice

This notice explains what data FinalStat uses, where it is stored, who else sees it and how to ask us to delete it. It is written to be understood by the person who is going to use the app: a teenager, or their mother, father or guardian.

The essentials

• Your FinalStat is calculated on your phone: the engine and its tables travel inside the app. The age screen, the questionnaire and your result work offline and do not send your measurements to any server.
• On the teen path we do not ask for your name or your email. There is no password and no public profile.
• We do not sell your data and there is no advertising. We do not use advertising identifiers or third-party ad SDKs.
• Your account is created only when the app needs it, and always after the age screen, the permission and your result. From then on your data is also stored on our server, in the European Union.
• The weekly AI analysis is off until you turn it on, and it never sends your height, your weight, your age or your nickname.
• You can ask us to delete everything whenever you want, from the app or from finalstat.app/en/delete.

Who is responsible for your data

Numa Labs LLC, with its registered office at 1007 N Orange Street, 4th Floor, Wilmington, DE 19801, United States, is the controller of the data described here.

For any question, or to exercise your rights, write to hola@finalstat.app. We also handle requests about personal data at that address.

What happens on your phone

When you open FinalStat for the first time, the app creates a random identifier for that installation. It is not derived from your phone or from you, and we do not share it with anyone to identify you.

What you write and do in the app is stored on your phone:

• month and year of birth — never the day;
• sex at birth;
• your height and, if you want, your weight;
• your mother's height and your father's, or “I don't know”;
• how much you sleep, how much you move and why you want to know your height;
• your permission: which text you accepted and when, the country whose rules we applied to it and, if the store provided it, your age range;
• your measurements and the estimates we calculate from them;
• your habits each day: which ones you checked off, which meals you checked off, which habits that day asked for, and the habits you add to or remove from your plan;
• the bedtime you choose and your reminders.

To apply your country's age rules, the app reads the country of the store you installed it from — the App Store or Google Play — and asks Apple or Google for the age range the store has for you: a range, never a date. We never use your IP address to work out your country, and your phone's language does not decide it either: it is a language, not a place.

The engine that calculates the estimate is inside the app, with its reference tables included. There is no call to our server to calculate your FinalStat, not even when you are online.

In parent mode, the phone of the mother, father or guardian stores their children's profiles: the nickname — never their name —, the month and year of birth, the sex at birth, the height, the weight if they enter it, the height of the child's mother and father, and every measurement they record afterwards.

When an account is created, and what is uploaded then

Your account has no name, email or password: it is a random identifier tied to your installation. It is created only when something needs it, and always after the age screen, the permission and your result:

• when you finish your first habit and we show you what the plan includes, or on your third day of use if you have not started your habits yet;
• when you open the subscription screen.

When it is created, the installation identifier, the platform — iPhone or Android —, the app version, the store country and the language are uploaded. After that, what was already on your phone is synced so that it is not lost if you change devices: your profile with your questionnaire answers, your measurements — the date, the height and the weight if you gave it —, your habits each day with the meals you checked off and which habits that day asked for, the habits you add or remove, and your permission. Each sync also carries your phone's time zone.

With that data our server calculates your streak and your estimate, so that they are the same on all your devices, and stores them with your account. The bedtime you choose, your reminders and your display preferences never leave your phone. If you correct or delete a measurement, the previous one is marked as deleted on our server and is deleted for good with your account.

If you are a mother, father or guardian

Parent mode has its own account: you sign in with Apple, on iPhone, or with your email and a one-time code, with no password. We store your email and, if you sign in with Apple, the identifier Apple gives us and the email it shares with us, which may be an address Apple creates to hide yours.

Before you create a son's or daughter's profile you confirm that you are their mother, father or legal guardian and you authorise us to use their data to estimate their adult height and show their percentile; we store that authorisation. For each profile we store the nickname — never their name —, the sex, the month and year of birth, the height, the weight if you enter it, the height of their mother and father, and every measurement you record. With that our server calculates their estimate and their percentile.

The weekly AI analysis

It is part of the subscription and it is off until you turn it on. Before anything is sent we ask for your permission in the app, with the name of who receives it and what is sent. We store that permission, and you can withdraw it whenever you want in “Me” › “Weekly AI analysis”.

If you have it turned on, every Sunday we prepare a summary of your week on our server and send it to Anthropic, the company that makes the Claude AI, which processes it in the United States. The summary contains this and nothing else: how many days you had each habit and how many you did it, your streak, your questionnaire answers about sleep, activity and goal, and the app's language. Never your nickname, your height, your weight, your age, your date of birth, your country, any identifier or anything you write: there is nowhere in the app to write to an AI.

From that summary, an Anthropic model writes two or three sentences about your week. Before showing them to you we check them with fixed rules and with a second Anthropic model, which receives only the text already written. If the note does not pass that check, we do not show it to you and you see the week's adjustment instead, which no AI writes. The note you do see carries the label “Written by AI”.

Anthropic does not use this data to train its models. We ask it to delete each submission as soon as we receive the note; under its terms, what it receives through its API is deleted after 30 days, unless its safety review flags something, which it may keep for up to 2 years.

If you withdraw the permission, we stop preparing new analyses from the next time your phone syncs, and we delete the latest one from your phone. One that was already being prepared may finish its check, but it is not shown to you. On our server, each note and the summary it was written from are deleted after 90 days, or immediately if you delete your account.

The subscription

The subscription is bought inside the app and the charge is made by the App Store or Google Play: we do not see or store your card details. When you open the subscription screen, the app connects to RevenueCat, the service we use to know the state of your subscription, with your account identifier — never the installation's or an advertising one. RevenueCat receives the data of your purchases from the store — the product, the dates, the price, the currency and the store country — and tells us whether your subscription is active, in a trial, cancelled or refunded, with its dates.

Notifications

Reminders are scheduled by your phone: your morning routine, a notice half an hour before the bedtime you chose, your Sunday summary and, with the plan, the day to measure yourself again. You turn them on, and none is scheduled if you do not accept the prompt your phone shows you. They are calculated from what is already stored there, so they work offline, and nothing goes from them to us. We do not send notifications from our server, and no notification identifier of yours exists in Apple's or Google's hands because of us.

Usage measurement

We use PostHog, in its European Union region, to know how many people reach each step, where they stop and whether the app works. It is configured like this:

• a closed list of events: from the app, seeing the offer and each of its steps, seeing or closing the subscription screen, opening a habit, adding or removing a habit and seeing your XP; from our server, starting a trial, buying, moving from the trial to paid, cancelling and a refund. An event that is not on the list is not sent;
• each event says only what happened and where — which habit, which screen, which step; for purchases, the product, the store, the price and the currency; for a cancellation, its reason and the days since the purchase —, with the date and the store country. Heights, weights and the nickname never travel in an event;
• events wait on your phone until your account exists, and are sent with the account identifier. None is sent before then;
• no automatic capture of taps or screens, no session recording — we do not record anyone's screen — and no surveys;
• the IP address is discarded and the country is never inferred from it. PostHog's tool may add technical data about the phone to each event, such as the model and the system version.

Crash reports

We use Sentry, in its European Union region, to know when something fails in the app and to be able to fix it. When an error happens, the app sends a technical report: what failed and in which part of the code, the phone model, the system version and the app version.

A crash report never carries your name, your email, your account identifier, your phone's identifier, your IP address, your measurements or screenshots.

The app sends reports only while your account exists on the phone: never before it is created, nor after you delete it. A report already sent is not deleted with your account, because it carries nothing that ties it to it.

What we never collect

Name. A teenager's email. Phone number. Precise location. Location inferred from the IP address. Advertising identifiers — we do not ask for the IDFA or the GAID and we never show the iOS tracking permission. Contacts. Photos. Apple Health or Health Connect data. Text written for an AI: the app has no field to write to one.

Who else sees your data

Nobody buys your data and nobody receives it for their own use. These are all the providers that process data on our behalf, and the table says what we use each one for.

Everything we control is in the European Union. Three providers store data in the United States, and that is an international data transfer:

• Anthropic, only if you turn on the weekly AI analysis, and only with the summary that section describes;
• RevenueCat, from the moment you open the subscription screen, with your account identifier and the data of your purchases;
• Resend, every time we send you a code: although the email is sent from Ireland, Resend stores the message and the delivery log in the United States, so the address we send the code to is stored there.

How long we keep each thing

Minors

FinalStat is an app for teenagers, so this part matters more than the rest.

• There is no path of its own for children under 13. The data of a child under 13 exists only as a son's or daughter's profile inside the account of their mother, father or guardian, and only after that adult's explicit authorisation.
• The minimum age to use the app on your own depends on the country. The app applies it from a per-country table that travels inside the app, and if the store provides an age range, that range can only make the rule stricter, never more lenient. Someone below their country's minimum does not use FinalStat on their own, but through the profile their mother, father or guardian creates in parent mode.
• If you are under 18 and use the app on your own, we ask you to confirm that you have permission from your mother, father or guardian before you start.
• We treat your height, your weight and your estimates as health data, and we do not use them for anything this notice does not say.
• There is never behavioural advertising, nor any third-party advertising SDK, either in the app or on this website.

Where we offer FinalStat

FinalStat is not offered in the European Economic Area — the 27 countries of the European Union plus Iceland, Liechtenstein and Norway —, nor in the United Kingdom, Switzerland, Brazil, mainland China, Russia or Belarus.

That is why this notice does not describe rights under the General Data Protection Regulation or name a representative in the European Union: saying so would be false. If we open any of those markets, this notice will change before that happens.

Your rights, and how to exercise them

You can ask us to access your data, correct it, delete it, object to a specific use and withdraw a permission you have given.

• By writing to hola@finalstat.app. It is the route that always works, whether or not you have the app. Through it we send you a copy of everything we have about you and handle any correction.
• From this website, at finalstat.app/en/delete, you can ask for the deletion yourself, whether or not you have the app installed. If you sign in with email, with your email and a one-time code; if you use FinalStat without an email, with the account identifier the app shows you in “Me”, below the version number.
• From the app, in “Me”, you have “Delete my account”, which deletes your account and this phone, and “Weekly AI analysis”, to withdraw that permission. Asking for the deletion from the app and asking for it at finalstat.app/en/delete are exactly the same.
• You correct your height and your weight yourself: in “Height” you can correct any measurement or delete it, except the only one you have left, and each change updates your estimate.

Withdrawing a permission does not affect what we did before you withdrew it, and it may mean that part of the app stops working for you: the estimate needs the data it is made of.

Deleting your account

If an account of yours was never created, there is nothing to delete on our server: what is yours is on your phone and uninstalling the app deletes it. To find out, open “Me”: if no “Account:” line appears below the version number, there is no account.

When you ask for the deletion we close all your sessions at once, mark the account, and an automatic process removes every row of yours within the following hour: your profile, your measurements, your estimates, your habits, your permissions, your weekly analyses and, in parent mode, your children's profiles. Backups are renewed every 30 days, so within that period it also disappears from them. One receipt remains for each deleted account, with that account's identifier, the dates and a cryptographic summary, which is the proof that the deletion happened.

Deleting your account does not delete the usage measurement events that are already in PostHog or the purchase history RevenueCat keeps. Both remain tied only to the account identifier, which after the deletion is no longer tied to any data of yours on our server.

We cannot cancel your subscription: it is cancelled in the subscription settings of your App Store or Google Play account. In the app, “Delete my account” has a shortcut, “Manage subscription”, that takes you straight to those settings.

How to ask for it: finalstat.app/en/delete, or in the app, in “Me” › “Delete my account”.

This website

The pages of finalstat.app do not use cookies, do not load usage measurement and do not load anything from another server: no fonts, no icons, no third-party scripts.

The only pages on this site that send anything are the account deletion ones, and only when you press the button. The forms at finalstat.app/en/delete, at finalstat.app/eliminar, its Spanish version, and at finalstat.app/eliminar-codigo send what you have written in them — your email, or the account identifier the app shows you, and the one-time code — to api.finalstat.app, which is our own server and the same one the app uses. Your address goes from there once more to Resend, which is who sends that message, and the section “Who else sees your data” says where it stores it. No other page on this site ever sends anything.

When we receive that request we also store a cryptographic summary of the connection it came from — a one-way calculation over the internet address, with a secret key of ours: we do not store the address and that summary cannot be turned back into it. It serves one purpose and only that one: counting how many requests come from the same place, so that nobody can hammer a deletion form that is open to anyone. We do not use it to work out where you are. We do the same when the app creates an account or asks for a code to sign in to parent mode; when a code is requested we also count, with a summary of the same kind, how many are requested for the same email address. “How long we keep each thing” says how long each one lasts.

Changes to this notice

If we change this notice we publish the new version here with its date, and the date below says which one is in effect. We keep which version of the permission you accepted and when.

Contact

Write to us at hola@finalstat.app. We reply in Spanish and English.

Version 1.3 · In effect from October 23, 2026