Privacy Policy

Last updated: 31 March 2026

Summary: FreeSpine collects no data from the app. The only data we receive is what you voluntarily submit through the contact form on freespine.net. We do not use cookies, analytics, or tracking of any kind.

The App (freespine.app)

What is stored

All app data is stored locally on your device using your browser's localStorage. This includes:

Exercise session history (last 90 sessions)
BASDAI assessment scores (last 52 entries)
Streak data and settings (sound, high contrast, onboarding status)
Session ratings and affected body areas

What is NOT collected

No personal information (name, email, age, location)
No analytics or usage tracking
No cookies
No server-side storage or cloud sync
No background network requests or telemetry
No third-party scripts, trackers, or advertising

How to clear your data

You can delete all FreeSpine data at any time:

In the app: Settings > Reset all data
In your browser: Clear site data for freespine.app

Once cleared, data cannot be recovered unless you previously exported a backup.

Export and backup

You can export your data as a JSON file from Settings or the Progress page. This file is saved to your device — it is never uploaded anywhere.

The Website (freespine.net)

General browsing

The FreeSpine website is a static HTML page. It does not use cookies, analytics, tracking pixels, or any third-party scripts. All fonts are self-hosted. No data is collected when you browse the site.

Contact form

The contact form is the only part of FreeSpine that transmits data externally. When you submit the form:

What is collected: Your message and email address
Where it goes: Form data is submitted to Zoho Forms (forms.zohopublic.eu), a third-party form processing service hosted in the EU
Why: So we can read and respond to your message
How long it's kept: Contact submissions are reviewed and deleted within 90 days. Messages requiring follow-up may be retained until the matter is resolved.
Who has access: Only the FreeSpine team. Data is not shared with, sold to, or accessible by any other party.

Requesting deletion of contact data

To request deletion of a contact form submission, send a follow-up message through the contact form stating which submission you would like removed, or email the address provided in any previous reply. We will delete the data within 30 days of the request.

Third-Party Services

Zoho Forms

Contact form submissions are processed by Zoho Corporation. Zoho's servers are located in the EU (for .eu endpoints). Zoho's own privacy policy applies to data while in their custody: zoho.com/privacy.

Cloudflare

The website and app are served via Cloudflare Pages. Cloudflare may process standard connection metadata (IP address, request headers) as part of content delivery. FreeSpine does not enable Cloudflare Analytics or any optional tracking features. See Cloudflare's privacy policy.

Anti-Abuse Controls

The contact form uses a honeypot field to prevent automated spam submissions. No CAPTCHA or third-party anti-abuse service is used. Zoho Forms also applies its own server-side spam filtering.

Children

FreeSpine is not directed at children under 13. We do not knowingly collect any data from children.

Changes to This Policy

If this policy changes, the updated version will be published at this URL with a new "Last updated" date. No prior notice is required as we do not hold contact details for notification.

Contact

For privacy questions or data deletion requests, use the contact form on freespine.net.