Privacy Policy

Last updated: September 29, 2026

This Policy is not legal advice and hasn't yet been reviewed by a licensed attorney. It's a good-faith, self-reviewed description of what SIGNUM actually does, written to be more accurate and complete than a template - not a substitute for professional legal review before a broader paid launch.

1. Introduction

Torquetta LLC ("Company," "we," "us," or "our") operates SIGNUM, an AI-powered analytics platform for high-performance training programs, made up of SIGNUM VOX (voice/chat coaching) and SIGNUM DICTA (speech-to-text training journal). This Privacy Policy explains how we collect, use, disclose, and otherwise process personal information through our mobile applications and website (collectively, the "Services").

SIGNUM is intended for users 13 years of age and older - see Section 11 (Children's Privacy) for what applies if you're between 13 and 17. By accessing or using SIGNUM, you agree to the terms of this Privacy Policy. If you do not agree with our practices, please do not use our Services.

SIGNUM is intended for United States residents. This is a policy statement, not a technical restriction - there is currently no country/region check anywhere in our sign-up flow or app store availability settings, so nothing technically stops access from outside the US today. If you're accessing SIGNUM from outside the United States, this Policy and U.S. law still govern your use.

2. Information We Collect

Account information: Email, password (managed by AWS Cognito, never stored on our own servers as plaintext), name - collected at mobile app sign-up, and separately, our website's sign-up page, which creates accounts directly.
Training profile: Date of birth, height, weight, sex, gender, experience level, primary goals, equipment access, training days per week, injuries/limitations, injury history, known maxes, training phase - collected during onboarding and in your Account settings.
Workout logs: Activity/split name, exercises, sets, reps, weight, RPE, rest time, difficulty rating, pain location, date performed, and any notes you write - via typed entry, voice journaling (Dicta), or photo import.
Voice transcripts: The verbatim text of what you say while voice-journaling, in Dicta's voice mode only (not Vox chat's voice dictation, which never saves a transcript as a journal entry).
Raw voice audio: Your microphone audio, while a voice session is active in Dicta voice journaling or Vox chat's voice-dictation feature. We do not store raw audio anywhere - it exists only for the duration of the live session.
Photos: Images of handwritten or printed workout logs you choose to import, only when you select or photograph an image for that feature.
Coach notes: Notes a coach writes about you, marked either "Shared" (visible to you) or "Private" (visible only to the coach who wrote it), if you work with a coach through SIGNUM.
Coach/client and gym relationships: Who you're linked with as a coach or client, and any gym memberships, via the roster and gym features.
Billing information: If you subscribe through our website, your Stripe customer/subscription identifiers. If you subscribe to Solo through the iOS app, Apple's own transaction/entitlement identifiers for your purchase. We never receive or store your card number either way - that goes directly to Stripe or Apple.
Newsletter signups: Your email address, if you sign up for updates via the "Stay in the loop" form on torquetta.com.
Device and crash data: Device type, OS version, app version, and crash/error diagnostics, collected automatically via Sentry (see Section 4).

3. How We Use Your Information

We use the information we collect to:

Provide, maintain, and improve SIGNUM's functionality and user experience.
Generate AI-powered coaching insights, workout extraction, and readiness/risk analysis, via the AI providers named in Section 4.
Let you share data with a coach or gym you've explicitly approved, per your own settings.
Process payments and manage subscriptions via Stripe (website and Team/Enterprise plans) or Apple's In-App Purchase system (Solo, purchased through the iOS app).
Authenticate you and maintain account security via AWS Cognito.
Communicate with you about your account, updates, or support requests (including if you report a bug to us through Vox).
Comply with legal obligations and protect against fraud or misuse.

We do not sell your personal information, and we do not use it for targeted advertising.

Future use for AI model improvement

We do not currently use your data to train or fine-tune any AI model. If this changes in the future, we will only do so with your separate, explicit opt-in consent - never bundled into general Terms acceptance, and never for sensitive categories like health data or voice recordings without a clear, specific choice on your part.

4. Third Parties Who Process Your Data

We use the following service providers to operate SIGNUM. None of them are permitted to use your data for their own purposes beyond what's described here.

Amazon Web Services (AWS): Hosts our infrastructure (compute, storage, databases) - receives all data described in Section 2, as needed to run the Services.
Amazon Bedrock - Anthropic Claude: Text chat coaching, workout-note extraction, photo-log extraction, AI insights - receives chat messages, your training profile (including injury history and known maxes), recent workout text, and photo images you import.
Amazon Bedrock - Amazon Nova Sonic: Real-time voice conversation (Dicta voice journaling, Vox voice dictation) - receives your live microphone audio, streamed and not stored.
Amazon Bedrock - Amazon Nova Pro: Turns your voice session into a transcript, and generates spoken coaching advice - receives your voice transcript, training profile, recent workouts, and recent shared coach notes.
AWS Cognito: Account authentication - receives your email, password, and multi-factor authentication setup.
AWS SES: Sends a support ticket if you report a bug to us through Vox - receives the bug report text you provide, and your email/account ID.
Stripe: Payment processing for website and Team/Enterprise subscriptions - receives your email and an internal account identifier, never your card details. Stripe Privacy Policy
Apple (App Store): Payment processing for the Solo subscription purchased through the iOS app - receives a transaction/entitlement identifier tied to your account, never your card details, which Apple handles entirely on its own. Apple Privacy Policy
Sentry: Crash and error diagnostics for the mobile app - receives device/crash diagnostic data. Sentry's default personal-data capture setting is turned off in our configuration.

AWS's own systems separately retain a copy of what's sent to Claude and Nova Pro (chat text and photo images, not live voice audio) for 90 days, as part of AWS's standard invocation logging - this is outside our direct control, and we're disclosing it here so you know it exists. Raw voice audio sent to Nova Sonic is not covered by this logging and is never retained by AWS either, per AWS's own documentation on that specific API.

5. Automated Decision-Making

SIGNUM's AI features (readiness scores, injury-risk flags, training recommendations, Vox's coaching advice) are recommendations for you to consider, not automated decisions that produce a legal or similarly significant effect on you. Nothing in SIGNUM automatically approves or denies you access to any service, benefit, or opportunity based solely on an AI-generated output - a human (you, or your coach) always makes the actual training decision. We do not currently offer a way to opt out of these recommendation features individually, since declining them just means not using the feature that produces them (e.g., not asking Vox a question, not entering training-profile fields that feed the risk flags).

6. Data Retention and Deletion

Raw voice audio is never stored. It exists only in memory for the duration of a live voice session.
Voice transcripts (Dicta journaling only) are stored as part of your workout entry until you delete that entry or your account.
Workout logs, notes, and training profile data are retained while your account is active, and deleted when you delete your account (see below).
Photos are not stored by SIGNUM after the import completes, though see the AWS invocation-logging note in Section 4.
Payment records are retained for 7 years to comply with tax and legal requirements.
Backups: we maintain point-in-time database backups for disaster recovery. A restore from backup - which we only perform in an actual data-loss incident, never routinely - could theoretically recover data up to approximately 35 days after you deleted it. We do not otherwise access or restore individual deleted data.

Account deletion

You can permanently delete your account at any time from within the app (Account → Danger zone → Delete account), with two confirmation steps. This takes effect immediately. See our Account Deletion page for the full process, including what to do if you no longer have the app installed. Deleting your account removes your profile and training data, your workout logs, notes you authored about your own clients (if you're a coach), your coach/client and gym-coach links, and your billing pointer record for whichever payment processor you used (though the underlying Stripe customer object, if applicable, is retained by Stripe separately - contact us if you'd like that removed too).

What account deletion does not currently remove, so you can make an informed decision: notes a coach wrote about you remain in that coach's own account, even after you delete yours (coaches own their own working notes); any copy of your data sitting in AWS's 90-day invocation-logging window (Section 4); entries in our operational logs, which are retained for 30 days; backup copies within the ~35-day window described above; and a newsletter subscription made with the same email, which isn't automatically linked or removed (email us separately to unsubscribe).

If you own a gym, you'll need to contact support@torquetta.com to remove or transfer it before we can delete your account - there is currently no self-service option for this.

7. Your Rights

Depending on where you live, you may have the right to:

Know/Access a copy of your personal information and how it's been used and disclosed.
Correct inaccurate data - most fields are editable directly in the app.
Delete your account and its data, immediately, from within the app.
Request a portable copy of your data. We don't currently offer instant self-service export - email support@torquetta.com and we'll provide a copy manually. We're working toward a self-service option.
Limit or opt out of the use of sensitive personal information, where applicable - see Section 10.
Opt out of the sale of your data or its use for targeted advertising - see Section 13 (we don't do either today, but you have this right regardless).
Opt out of future uses of your data for AI model training (see Section 3) - though since we don't do this today, there's nothing currently to opt out of; this exists so you know the option will be there if that ever changes.
Appeal a decision we make in response to your rights request - see Section 14 for state-specific appeal contacts.
Designate an authorized agent to submit a request on your behalf, where your state's law provides for this. We may ask the agent for proof of your authorization before acting on the request, to protect your account from unauthorized access.

To exercise any of these rights, contact us at support@torquetta.com. We will not discriminate against you for exercising any of these rights - see Section 8.

8. Non-Discrimination

We will not deny you the Services, charge you a different price, or provide a different level of service because you exercised any privacy right described in this Policy. If a particular feature genuinely cannot function without a specific piece of data (for example, voice journaling without microphone access), we'll tell you that plainly rather than penalizing you elsewhere in the app.

9. Security Measures

Data is encrypted in transit (TLS/HTTPS) and at rest (AWS-managed encryption).
Access to our systems is controlled via IAM roles and JWT authentication; multi-factor authentication (TOTP) is required for all accounts.
We do not maintain long-lived AWS credentials for our own team - access is single sign-on only.
Payment information is handled exclusively by Stripe or Apple (whichever you subscribed through) and never stored on our servers.

No system is 100% secure, and we cannot guarantee absolute security of your data.

10. Sensitive and Health-Adjacent Data

Some of what you provide to SIGNUM is health-adjacent or sensitive: your date of birth, height, weight, sex, injury history, known maxes, training phase, per-workout pain location, and your voice itself (which is biometric-adjacent, even though we never store the audio). We collect this only when you choose to provide it - most of it is optional - and only to power the features you're actually using (training recommendations, injury-risk flags, and voice journaling). We only process this data with your affirmative consent, obtained when you first use the feature that requires it - a standard that satisfies both an opt-in consent model (required by several states) and a right-to-limit model (required by others). We do not sell this information, and we do not use it for advertising.

11. Children's Privacy

SIGNUM is intended for users 13 years of age and older. We do not knowingly collect information from anyone under 13, consistent with the Children's Online Privacy Protection Act ("COPPA"). This age requirement is enforced both by self-certification and by a server-side check on the date of birth you provide at sign-up - an entry that would make you under 13 is rejected. If we learn a user is under 13 despite this, we will delete their account.

If you are between 13 and 17 years old:

You may use SIGNUM only with the permission of a parent, legal guardian, or (if you're using SIGNUM through a school, club, or athletic program) your coach or program administrator, acting with your parent or guardian's knowledge. See Section 3 of the Terms of Service and our Note for Parents and Guardians for more detail.
We do not use your data for targeted advertising or sell it, regardless of your age - see Section 13. Some states specifically restrict targeted advertising to known minors; because we don't do targeted advertising to anyone, this doesn't change our practice.
A parent or legal guardian can contact us at support@torquetta.com to review, correct, or delete their teen's information, or to ask questions about what we collect from them.

12. Cookies and Tracking (Website)

Our website uses essential cookies only (session authentication). We do not use tracking cookies or analytics cookies that identify individual users. The mobile app does not use any advertising or analytics SDK - Sentry, described in Section 4, is used only for crash/error diagnostics, not tracking or advertising.

13. We Don't Sell Your Data or Use It for Targeted Advertising

We do not sell personal information, and we do not use it for cross-context behavioral or targeted advertising, so there is nothing to opt out of today. If this ever changes, we will update this Policy first and honor recognized opt-out preference signals (such as Global Privacy Control) in browsers that send them, in addition to any in-app opt-out mechanism.

14. State-Specific Disclosures

Torquetta LLC is a Maryland company, and Maryland's Online Data Privacy Act (MODPA) is the primary legal framework behind this Privacy Policy. As of this drafting (last checked September 2026), we believe the following states have comprehensive consumer privacy laws in effect or substantially similar to what's described below: California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia, alongside Washington's health-data-specific law and Nevada's narrower sale-opt-out law. This list changes as more states pass legislation.

If your state isn't named in any subsection below, you still have the baseline rights described in Section 7 (Your Rights). We extend those to every SIGNUM user regardless of where you live, not only where a specific state's law currently requires it.

Most state laws described in this section only apply to companies that meet a minimum size threshold (commonly processing 25,000-100,000+ residents' personal data annually, or deriving a set percentage of revenue from data sales). As a small pilot-stage company, Torquetta likely does not meet most of these thresholds yet - we're extending these rights to you anyway, as a matter of policy, rather than waiting until we're legally required to.

Maryland residents (Online Data Privacy Act)

As Torquetta's home state, Maryland residents have the right to confirm and access, correct, delete, and obtain a portable copy of their personal data, and to opt out of the sale of personal data, targeted advertising, and certain profiling (not applicable today - see Sections 5 and 13). MODPA goes further than most comparable state laws on one point: it prohibits selling sensitive personal data, including health data, outright, even with consent. We don't sell any personal information regardless, so this doesn't change our practice. To appeal a decision we make about your request, contact support@torquetta.com; if you're not satisfied, you may contact the Maryland Attorney General's office.

California residents

California residents have the right to know what personal information we've collected, used, and disclosed about you and why; to delete your personal information; to correct inaccurate personal information; to limit the use of sensitive personal information (see Section 10); to opt out of sale or sharing (not applicable today); to non-discrimination (Section 8); and to designate an authorized agent. To exercise these rights or appeal a denied request, contact support@torquetta.com.

Washington residents (My Health My Data Act)

Some information we collect qualifies as "consumer health data" under Washington's My Health My Data Act - this includes your training profile's health-related fields (injury history, known maxes, training phase), per-workout pain location, and your voice audio while journaling (even though we don't retain the audio itself). We obtain your affirmative consent before collecting this data - enabling a feature that requires it is how that consent is given. We do not sell consumer health data, and we do not use geofencing around health care facilities. You may withdraw consent at any time by not using the relevant feature, clearing the relevant field in your profile, or deleting your account entirely. You have the right to file a complaint with the Washington State Attorney General's office if you believe we've violated this law.

Illinois, Texas, and Washington residents (biometric privacy laws)

Some states - Illinois (the Biometric Information Privacy Act, "BIPA"), Texas (the Capture or Use of Biometric Identifier Act, "CUBI"), and Washington (RCW 19.375, separate from the My Health My Data Act above) - specifically regulate "biometric identifiers," which can include voiceprints. SIGNUM's voice features convert your speech to text for journaling and coaching purposes. We do not create, store, or use a voiceprint to identify or verify who you are - there is no speaker-identification or voice-matching feature anywhere in SIGNUM, and raw audio is never retained (see Section 2). If you have questions about our voice processing specifically, contact support@torquetta.com.

Residents of Virginia, Colorado, Connecticut, Utah, Oregon, Texas, Montana, Delaware, Iowa, Nebraska, New Hampshire, New Jersey, Minnesota, Tennessee, Indiana, Kentucky, and Rhode Island

These states' privacy laws share a substantially similar core, so we address them together. If your state's law provides for it, you have the right to confirm whether we're processing your personal data and access it; correct inaccuracies; delete your personal data; obtain a portable copy of the data you've provided to us; opt out of the sale of personal data, targeted advertising, and profiling in furtherance of decisions with a legal or similarly significant effect (not applicable today); and appeal a decision we make about your request by contacting support@torquetta.com. If you're not satisfied with the outcome of an appeal, most of these states let you contact your state Attorney General's office.

Nevada residents

Nevada law gives you the right to opt out of the sale of certain "covered information." We do not sell covered information, so there's nothing to opt out of, but you may still submit a request to support@torquetta.com to confirm this in writing.

15. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. We will notify you of material changes by updating the "Last updated" date and sending an email notification. Continued use of SIGNUM following such changes constitutes your acceptance of the updated Privacy Policy.

16. Contact Us

If you have questions about this Privacy Policy or our privacy practices, or want to exercise any of the rights described above, please contact us:

Torquetta LLC
Frederick County, Maryland, USA
support@torquetta.com