PoseTracker Privacy Policy

Effective date : September 19, 2026

PoseTracker is a product developed and managed by Movelytics SAS (french SIRET : 94812749300013), responsible for the collection, processing, and protection of its users' personal data in accordance with this privacy policy.

Introduction:

At PoseTracker, we are committed to protecting the privacy and personal data of our users. This privacy policy explains how we collect, use, store, and protect personal data in accordance with the General Data Protection Regulation (GDPR). It covers the public website (posetracker.com), the signed-in product (app.posetracker.com), the tracking API and SDKs, and the assistant chat.

Data we collect:

When you create an account we collect:
- Email address
- Password (stored as a secure hash)
- First and last name
- Optional company or project details you choose to provide

When you use the product we also process:
- Your API key identifier and plan, so we can authenticate tracking calls
- Tracking credit and AI credit balances, and an append-only ledger of credit movements used for billing and abuse prevention
- Assistant conversations: the text you send, the assistant replies, draft or saved custom-movement specifications, and technical metadata such as token counts
- If you mark frames on a local video, the count and timestamps of those marks — not the video file and not the still images (images are sent only to generate that assistant turn)
- Support requests you submit
- Payment and subscription identifiers processed by our payment provider (Stripe) when you subscribe
- Technical logs reasonably needed for security (for example IP address, user agent, and error reports)

Pose estimation in your application typically runs on the end-user device. We receive what your integration sends to our tracking API for metering and the service you requested. We do not ask you to upload raw workout videos to the assistant.

Use of Data:

We use this information to:
- Authenticate you and provide the API, SDKs, and assistant
- Meter tracking calls and assistant turns, enforce plan limits, and refill monthly wallets
- Generate assistant replies and custom-movement drafts through a language-model provider
- Communicate about service updates, security, and billing
- Prevent abuse, debug incidents, and comply with law

We do not sell your personal data. We do not use assistant chats to train a public PoseTracker model.

Assistant and language-model providers:

The assistant is available only to signed-in users. A typical language-model turn sends the conversation text needed for that reply. When you confirm marked video frames, the JPEG stills you selected are included in that turn and are not persisted in the chat after the call. Your PoseTracker API key is never sent to the model. Off-topic use may be refused and may consume extra AI credits as described in the Terms of Use.

Cookies and similar technologies:

A first-party cookie banner is shown on posetracker.com and app.posetracker.com until you choose. Your choice is stored for 6 months in the pt_consent cookie on .posetracker.com, so the same choice applies on both hosts. You can change it anytime from Cookie settings in the footer.

Strictly necessary (no opt-in):
- jwt-client on the signed-in product, to keep you logged in
- pt_consent, to remember this choice

Analytics (only if you accept):
- Google Analytics 4 (G-RXMP9XQG0J) on the marketing site and the signed-in product, with Google Consent Mode v2. After you accept, analytics cookies use the posetracker.com cookie domain so a visit can be measured across www and app
- Vercel Analytics and Speed Insights on the signed-in product, to understand feature reliability

Advertising (only if you accept):
- Google Ads (AW-11180435376) with Consent Mode v2 (ad_storage, ad_user_data, ad_personalization). Until you accept advertising cookies, those signals stay denied. Google may still receive cookieless pings used to model conversions

You can accept all optional cookies, keep necessary cookies only, or customize analytics and advertising separately.

Tracking embeds you place in your own app (/pose_tracker/) do not show this banner and do not load our marketing tags. Those embeds are your responsibility.

Processors and transfers:

We use subprocessors to operate PoseTracker, including hosting and database providers, Stripe for payments, and an OpenAI-compatible language-model provider for assistant turns. Some processors may be located outside the European Union. Where required, we rely on appropriate safeguards such as standard contractual clauses. Copies of applicable open-source model licenses are described in the Terms of Use.

Data Security:

We implement technical and organizational security measures to protect your data from unauthorized access, loss, destruction, or alteration. Passwords are stored using robust hashing. No method of transmission or storage is completely secure.

Data Retention:

We retain account data, assistant conversations, custom movements, and credit ledgers for as long as your account is active and as needed to provide the service, handle disputes, and meet legal obligations (including tax and accounting records). You can request deletion of your account at any time. We will then delete or anonymize associated personal data, including assistant chats and custom movements, except data we must keep by law.

User Rights:

In accordance with the GDPR, you have the following rights regarding your personal data:
- Right of access
- Right to rectification
- Right to erasure
- Right to restriction of processing
- Right to data portability
- Right to object
To exercise these rights, please contact us at fabrice@movelytics.fr

Changes to the Privacy Policy:

We reserve the right to modify this privacy policy at any time. Changes will take effect immediately upon their posting on our site.

Contact:

For any questions or concerns regarding this privacy policy, please contact us at fabrice@movelytics.fr.