Cam Lab/ Motion
PrivacyTermsSupportTry the demoSign in

Version 2.1

Privacy Policy

What Cam Lab collects when you use Motion or MotionX, why, and what you can do about it.

Effective September 15, 2026·Last updated September 24, 2026

In short

  • We collect what the Service needs to work: your account, your profile, the footage you upload, the skeletal data we extract from it, and how you use the app.
  • We cannot see your password. It is stored only in a scrambled form that cannot be turned back into the original, so nobody here can read or recover it — only reset it.
  • We record how the product is used, including replays of app sessions, to find what is broken and confusing. Form fields are masked in those recordings.
  • We may use de-identified skeletal data to improve our analysis models. Not your video, not your face, not your name — and you can switch it off in Settings.
  • We do not sell your data, and we do not share it for advertising.
  • You can export your data, correct it, or delete your account and the data with it, from Settings.

A plain-language summary, for orientation only. The numbered sections below are what actually applies.

This Privacy Policy explains how Cam Lab ("we", "us", "our") handles personal information in the Motion web application at motion.cam-lab.org, the MotionX iOS application, and everything connected to them. It applies to athletes, coaches, club administrators, and visitors.

For the purposes of the UK and EU GDPR, Cam Lab is the controller of the personal data described here. Where a club uses the Service to manage its own athletes, the club is a separate controller of what it does with the analyses and rosters it receives, and this policy does not cover the club's own decisions.

Your controls in Motion

Everything this policy says you can change lives in Settings. None of it needs an email to us first, unless a row says so.

  • Turn model training on or offSettings → Data & Privacy→
  • Export your dataSettings → Data & Privacy→
  • Delete your account and its dataSettings → Data & Privacy→
  • Choose which emails and notifications you getSettings → Notifications→

Contents

  1. 01What we collect
  2. 02Motion and skeletal data, specifically
  3. 03Where it comes from
  4. 04How we use it, and our legal basis
  5. 05Training and improving our models
  6. 06AI features and what is sent to AI providers
  7. 07Analytics, session replay and error monitoring

01What we collect

Account and identity.
Your name, email address, and — if you sign up or sign in by phone — your mobile number, its country, and whether it has been verified by SMS code. If you sign in using an account you already hold with another provider, we receive the name and email address that provider releases to us. Passwords are stored only in a scrambled form; we do not hold the original and cannot recover it.
Profile and body data.
Optional details you choose to give: height, weight, gender, date of birth, handedness, primary sport, fitness level, goals, and injury notes. These personalise analysis, reference bands and coaching, and you can leave any of them blank or clear them at any time. Health-related details such as injury notes are treated as sensitive and are never used for model training or advertising.
Footage and images.
The videos, images and live camera frames you upload or record. Footage is processed to extract movement data and, at present, is stored so that you — and the coaches you have chosen to share with — can replay the analysis. How long we keep it is set out under Retention.
Motion and skeletal data.
The output of the movement analysis: the estimated positions of your major joints in each frame, plus everything computed from them — joint angles, stroke or stride timings, phase segmentation, symmetry, scores, grades and quality flags. This is described further in its own section below.
Coaching and club data.
Club and squad membership, your role, attendance and RSVP records, lineups and seat assignments, coach comments and published reports, chat messages in club channels, check-ins and RPE ratings, and the athlete an analysis is tagged to.
Training and hardware data.
Workouts, plans, goals, streaks, and — if you connect them — workout history from a training-log service you link, and live data from a compatible machine monitor over Bluetooth, including distance, split, stroke rate, and heart rate if a belt is paired.
Read the Terms of ServiceAll legal documents

Contents

  1. 01What we collect
  2. 02Motion and skeletal data, specifically
  3. 03Where it comes from
  4. 04How we use it, and our legal basis
  5. 05Training and improving our models
  6. 06AI features and what is sent to AI providers
  7. 07Analytics, session replay and error monitoring
  8. Who we share it with
Cam Lab/ Motion

Motion is Cam Lab's movement-analysis dashboard. These documents govern it and the MotionX app.

Documents

  • Privacy Policy
  • Terms of Service
  • All legal documents

Motion

  • Try the demo
  • Scoring guide
  • Settings → Notifications
  • Support

Cam Lab

  • cam-lab.org
  • Contact

© 2026 Cam Lab. All rights reserved.

  • Edit or clear your profile and body dataSettings → Profile→
  • Change your email, phone or passwordSettings → Account→
  • Ask us to exclude you from analytics and session replayEmail support→
  • Make a privacy request or complaintEmail privacy→
  • Sign in to open these settings.

    08
    Who we share it with
  • 09What your club and coaches can see
  • 10Links and pages you make public
  • 11Where your data is processed
  • 12How long we keep it
  • 13How we protect it
  • 14Your rights and choices
  • 15If you are in the United States
  • 16Children and minors
  • 17Cookies and similar technologies
  • 18The MotionX app specifically
  • 19Changes to this policy
  • 20Contact
  • Usage and product analytics.
    Which pages and screens you open, which features you use, per-day counts used to enforce plan limits, and — on the web — recordings of app sessions showing the clicks, scrolls and navigation of a visit. Text you type into form fields is masked in those recordings before they leave your browser. See the analytics section for detail and for how to opt out.
    Device and technical data.
    IP address, browser or app version, operating system, device model, language, time zone, and logs of the requests your device makes. On iOS we also store a notification token if you enable notifications.
    Communications.
    Emails and SMS we send you, whether they were delivered and opened, your notification preferences, and any support correspondence.
    Payment data.
    A customer reference held by our payment processor, plus your plan, subscription status and billing period. Card numbers and bank details go directly to the processor and do not reach us.

    Manage this in Motion

    Edit or clear your profile and body dataSettings → Profile→Change your email, phone or passwordSettings → Account→

    02Motion and skeletal data, specifically

    Because this is the data the Service exists to produce, it deserves a plain explanation rather than a line in a list.

    The analysis looks at each frame of your video and estimates where your joints are: shoulders, elbows, wrists, hips, knees, ankles and so on. Put those together across a clip and you get a skeleton moving through time. Everything the Service tells you — a catch angle, a stroke rate, a grade, a coaching cue — is worked out from that skeleton.

    Skeletal data is personal data, and where the law treats measurements of your body as sensitive we treat it that way too. But it is worth being precise about what it is not: we do not run face recognition, we do not build a biometric template of you, and we do not use motion data to identify you or to look for you in anyone else's footage. Gait can in principle be identifying, which is exactly why the de-identified copies used for model training are separated from your identity before use and are not re-linked.

    On iOS you can choose to have the movement analysis run on your phone, in which case only the resulting joint positions are uploaded and the footage stays on the device. The other option uploads the clip so it can be analysed on our servers. The choice lives in Settings → Pose model.

    Manage this in Motion

    Turn model training on or offSettings → Data & Privacy→

    03Where it comes from

    • From you: what you type, upload, record, and choose in settings.
    • From your device: technical data sent automatically with each request, and camera, microphone, photo-library or Bluetooth data only after you grant the permission.
    • From your coach or club: a coach may film you, upload the footage, tag it to you, add you to a roster, and write comments and reports about you. A club may add you to its roster before you have an account at all.
    • From providers you connect: the account you choose to sign in with, a training-log service you link, and our payment processor when you pay.

    If a coach added you and you would rather not be in the Service, email support@cam-lab.org. We will find the club, tell you what is held about you, and remove it on request — you do not need an account to ask.

    04How we use it, and our legal basis

    To run the Service.
    Creating your account, extracting pose data, grading sessions, generating feedback and plans, showing your history and progress, sharing with your club, sending the emails and messages the product depends on. Basis: performance of our contract with you.
    To take payment.
    Managing plans, subscriptions, invoices and plan limits. Basis: performance of our contract, and compliance with tax and accounting law.
    To keep the Service working and safe.
    Server logs, error monitoring, rate limiting, abuse and fraud detection, and enforcing plan limits. Basis: our legitimate interest in a service that stays up and is not abused.
    To understand and improve the product.
    Product analytics and session replay, so we can see which flows people abandon and which screens confuse them. Basis: our legitimate interest in improving the product, and consent where local law requires it.
    To improve our analysis models.
    Training on de-identified skeletal data, as described in the next section. Basis: our legitimate interest in improving accuracy, balanced against your interests by de-identifying the data, excluding raw footage and profile data, excluding minors, and giving you an unconditional opt-out. Where local law requires consent instead, we ask for it.
    To communicate with you.
    Service and security notices, replies to support requests, and — only if you have not opted out — occasional product updates. Basis: our contract for service messages, legitimate interest or consent for the rest. You can unsubscribe from anything non-essential at any time.
    To meet legal obligations.
    Responding to lawful requests, keeping records we are required to keep, and establishing or defending legal claims. Basis: legal obligation and legitimate interest.

    We do not use your data for automated decisions that produce legal or similarly significant effects about you. A grade is feedback, not a decision about your rights.

    Manage this in Motion

    Choose which emails and notifications you getSettings → Notifications→

    05Training and improving our models

    We may use de-identified skeletal data — joint coordinates and the measurements derived from them — to train and improve our pose, grading and coaching models. Not your video. Not your face. Not your name. You can turn it off in one tap: Settings → Data & Privacy on the web, Settings → Privacy & security in MotionX.

    What goes in.
    The estimated positions of your joints over time and the values worked out from them (angles, timings, phases, symmetry, quality scores), together with the context that makes them meaningful — the sport, how the clip was filmed, the camera angle, and the resulting grade. Before use, this is separated from your account and carries no name, email, phone number, club, or account identifier.
    What does not.
    Raw video and images, any frame of your face or body, your profile, injury notes, goals, chat messages, coach comments, and anything from an athlete a club has identified as under 16. None of this is used for training, ever.
    Who else gets it.
    Nobody. We do not sell training data, license it, publish it, or send it to a third party to train their models. Where an AI provider processes session context to answer a request, it does so under terms that do not permit it to train on that data.
    Turning it off.
    The setting takes effect immediately and applies to data already stored as well as to anything new — your data is excluded from every training run after you switch it off. Email support@cam-lab.org if you would rather we did it for you.
    The honest limitation.
    A model already trained cannot have one athlete's contribution removed from it; the data does not survive inside it in a form that can be extracted or subtracted. Opting out stops all future use. It does not oblige us to discard models trained beforehand, and we would rather say so than imply a deletion we cannot perform.

    Manage this in Motion

    Turn model training on or offSettings → Data & Privacy→

    06AI features and what is sent to AI providers

    AI coaching, chat, session summaries, training plans, drafted coach comments and the live voice coach are generated by third-party AI providers. To answer a request we send the context it needs: the metrics and scores from the session in question, relevant history, your message or the photo you attach, and — for the live voice coach — your spoken audio during the session.

    The providers are Anthropic (which operates the Claude models) and OpenAI (which operates the GPT models, and the realtime model behind the live voice coach). They process what we send only to generate the response, under data-processing terms that require them to keep it confidential, forbid them from using it to train their own models, and limit how long they may keep it — protections equivalent to those in this policy. They are not permitted to sell it or use it for their own advertising.

    In the MotionX app, no AI feature sends anything to these providers until you have turned AI features on and agreed to this sharing, on a screen that names what is sent and who it goes to. You can withdraw that agreement at any time in Settings → Privacy & Security, after which AI features stop sending your data and ask again before they resume.

    • We do not send your name, email address, phone number, or payment details.
    • We do not send your raw video.
    • We send an image only when you attach one to a chat message yourself.
    • We send profile details such as height, sport or injury notes only where you have provided them and the feature genuinely needs them to give safe advice — a plan written without knowing about your shoulder is a worse plan.
    • AI output is generated text. It can be wrong. It is not medical advice, and the Terms of Service say so at more length.

    07Analytics, session replay and error monitoring

    On the web we use a third-party product-analytics platform to understand how the Service is actually used. It records page views, feature events, and session replays — a reconstruction of a visit showing clicks, scrolls, navigation and page content, so we can see where a flow breaks rather than guessing from a bug report.

    • Text typed into form fields is masked before the recording leaves your browser, and elements we mark as private are excluded from capture.
    • Passwords and payment details are masked, and are not intended to appear in a replay.
    • Once you sign in, we attach your user ID, name, and email or phone number to your analytics profile so support can find the session behind a report. Signing out unlinks it.
    • We also use an error-monitoring service that captures crashes and exceptions, including the technical context needed to reproduce them.
    • These providers act on our instructions. We do not use them for advertising, and we do not include advertising or cross-site tracking networks in the Service.
    • To opt out of analytics and session replay, email support@cam-lab.org and we will exclude your account.

    The MotionX iOS app does not include analytics or advertising components, and does not collect anything beyond what the app itself needs to function.

    Manage this in Motion

    Ask us to exclude you from analytics and session replayEmail support→

    08Who we share it with

    We share personal data only with service providers who process it on our instructions, with the club you belong to, with people you deliberately share with, and where the law requires it. We do not sell personal data, and we do not share it for cross-context behavioural advertising.

    Category of providerWhat it does with your data
    Hosting and infrastructureRuns the website, the app's backend and the databases holding your account, analyses and club records
    Media storage and deliveryStores and delivers uploaded footage, images and generated reports
    Payment processingTakes payment and holds card details, which we never see
    AI providers (Anthropic, OpenAI)Generate coaching, chat, plans, drafted comments and the live voice coach from session context, only after you turn AI features on
    Sign-in providersConfirm who you are when you choose to sign in with an account you hold elsewhere
    Email and SMS deliverySends verification codes, notifications and service messages, and reports whether they arrived
    Connected training servicesSupply workout history from an account you choose to link
    Product analytics and error monitoringRecord usage, session replays and crashes, as described above

    We describe our providers by category rather than by name. If you need the specific providers behind a category — for a school's or club's own due diligence, for example — ask us at privacy@cam-lab.org and we will tell you.

    We also disclose data when we are legally required to — a valid court order, subpoena or regulatory demand — and when it is necessary to investigate abuse, enforce our Terms, or protect the rights and safety of users. We will tell you about a legal demand unless we are prohibited from doing so.

    If the Service is ever merged, acquired, incorporated into a company, or sold, data may transfer as part of that transaction. We will give notice before your data becomes subject to a different privacy policy, and you will be able to delete your account first.

    09What your club and coaches can see

    Joining a club makes some of your data visible to that club. This is the point of a club, but it should not be a surprise.

    • Active coaches and administrators see analyses shared into the club, the athlete each is tagged to, scores and trends, roster and attendance records, and comments or reports written about you.
    • If you belong to exactly one club, new analyses are shared into it automatically. You can clear that on any individual analysis.
    • An administrator may enable a shared film room, which makes members' analyses visible to the whole club rather than only to coaches. It is off by default.
    • Coaches can rename an analysis and re-tag which athlete it belongs to, including correcting a mis-tag.
    • Club chat messages are visible to the members of the channel they are posted in.
    • Leaving a club stops future sharing. Analyses already shared stay with the club unless you delete them.

    What your club does with what it receives is its decision, under its own obligations to you. If you want data removed from a club rather than from Cam Lab, ask the club — and tell us if they will not act.

    10Links and pages you make public

    • Share links: creating one produces an unlisted URL that anyone holding it can open without signing in. It is not indexed, but it is not secret — treat it like a key. You can revoke it at any time.
    • Event leaderboards: a club running a test event may publish a board showing athlete names, scores and rankings. The club chooses what appears there.
    • Exported reports and videos: PDFs and rendered clips you download or send are outside our control once they leave the Service.

    11Where your data is processed

    The Service and its providers are based largely in the United States. If you are in the UK, the EU, mainland China or elsewhere, your personal data is transferred to and processed in the United States and other countries where our providers operate.

    For transfers out of the UK and the EEA we rely on the safeguards our providers offer, which generally include the European Commission's Standard Contractual Clauses and the UK Addendum, together with the measures described under Security. You can ask us for details of the safeguards that apply to a particular transfer.

    12How long we keep it

    We keep personal data for as long as your account is active, and then for the periods below. Where a period is longer than the account's life, it is because the law or a legitimate dispute requires it.

    DataKept for
    Account, profile and settingsUntil you delete your account
    Footage, images and analysesWhile your account is active, until you delete them or delete your account
    De-identified skeletal data used for trainingKept in a form not linked to your account, and excluded from future training once you opt out
    Club records — rosters, attendance, comments, shared analysesHeld by the club until the club deletes them, which may be after you leave
    Product analytics and session replaysTypically no more than 12 months
    Error reports and technical logsTypically no more than 90 days
    Email and SMS delivery recordsTypically no more than 24 months
    Billing and tax recordsFor as long as tax and accounting law requires
    BackupsRolling, and overwritten in the ordinary course

    These are the periods we work to today, not guarantees for all time. We may shorten them, and we may stop storing a category of data altogether — if that would remove something you still rely on, such as footage attached to a past analysis, we will give you notice and a chance to download it first.

    When you delete your account, deletion begins straight away and we aim to complete removal from our live systems within 30 days. Copies inside rolling backups age out afterwards. We may retain the minimum needed to comply with the law, prevent the recreation of a banned account, or resolve an open dispute.

    Manage this in Motion

    Export your dataSettings → Data & Privacy→Delete your account and its dataSettings → Data & Privacy→

    13How we protect it

    • Data is encrypted while it travels between your device and us.
    • Passwords are stored only in a scrambled form. Nobody at Cam Lab can read or recover your password — an administrator can only trigger a reset.
    • Changing your password, or signing out everywhere, ends existing sessions on every device.
    • Uploaded footage is stored privately and reached only through time-limited access; it is not published or browsable.
    • Access to the systems holding your data is limited to those who need it.

    No system is perfectly secure, and we do not claim otherwise. If a breach affects your personal data, we will notify you and the relevant regulator as the law requires, and tell you what happened without waiting until we have a complete story.

    Manage this in Motion

    Change your email, phone or passwordSettings → Account→

    14Your rights and choices

    Access and portability.
    Export your data from Settings → Data & Privacy, at any time, without asking us.
    Correction.
    Edit your profile in Settings. Ask us if something you cannot edit is wrong.
    Deletion.
    Delete your account and its data from Settings → Data & Privacy, or ask us to. Deletion is permanent.
    Object and restrict.
    Object to processing based on legitimate interests — including model training and product analytics — by changing the setting or emailing us. We will stop unless we have compelling grounds that override your rights.
    Withdraw consent.
    Where we rely on consent, withdraw it at any time. It does not affect what was lawful before you withdrew.
    Marketing.
    Unsubscribe from any non-essential email using the link in it, or in Settings. Service and security messages continue.
    Complain.
    Raise it with us first at privacy@cam-lab.org. You also have the right to complain to your local data protection authority — in the UK, the Information Commissioner's Office; in the EU, the authority where you live.

    We aim to answer requests within 30 days, and will not charge you or treat you differently for making one. We may need to confirm who you are first, which for a deletion request means proving control of the account.

    Manage this in Motion

    Export your dataSettings → Data & Privacy→Delete your account and its dataSettings → Data & Privacy→Choose which emails and notifications you getSettings → Notifications→Make a privacy request or complaintEmail privacy→

    15If you are in the United States

    Residents of California, Colorado, Connecticut, Virginia, Washington and other states with comprehensive privacy laws have the rights described above — to know, access, correct, delete, obtain a portable copy, and appeal a refusal — and can exercise them through Settings or by emailing privacy@cam-lab.org.

    • We do not sell personal information, and we do not share it for cross-context behavioural advertising, as those terms are defined under California law. We have not done so in the preceding twelve months.
    • You can opt out of analytics and session replay at any time by emailing privacy@cam-lab.org.
    • We collect the categories of personal information listed above, for the business purposes listed above, from the sources listed above.
    • We treat health-related information, precise measurements of your body, and account credentials as sensitive, and use them only to provide the Service you asked for — never to infer characteristics about you.
    • We do not discriminate against you for exercising a privacy right.
    • You may use an authorised agent, with proof of authorisation.

    If you are in Washington State, motion and body measurements collected here may be "consumer health data" under the My Health My Data Act. We collect it to provide the analysis you requested, we do not sell it, and you may withdraw consent and request deletion at privacy@cam-lab.org.

    Manage this in Motion

    Make a privacy request or complaintEmail privacy→

    16Children and minors

    The Service is not for children under 16 signing up on their own, and we do not knowingly collect data from them. Athletes under 16 may participate only through a club, whose administrator must hold verifiable parental or guardian consent before adding them.

    • Data belonging to an athlete a club has identified as under 16 is excluded from model training entirely, regardless of any account setting.
    • A parent or guardian may ask us what we hold about their child, ask us to correct it, or ask us to delete it, by emailing privacy@cam-lab.org. We will act on that request whether or not the club agrees.
    • If we learn we have collected data from a child under 16 without the required consent, we delete it.

    Manage this in Motion

    Make a privacy request or complaintEmail privacy→

    17Cookies and similar technologies

    • Strictly necessary: authentication and session cookies, your language choice, and security tokens. The Service does not work without these.
    • Analytics: cookies and local storage set by our analytics provider to recognise a returning visit and stitch a session together.
    • We set no advertising cookies and allow no third-party advertising or cross-site tracking network on the Service.

    You can clear or block cookies in your browser; blocking the strictly necessary ones will sign you out and keep you out. The MotionX app does not use cookies — it keeps your sign-in securely on the device, along with a local cache.

    Manage this in Motion

    Ask us to exclude you from analytics and session replayEmail support→

    18The MotionX app specifically

    The iOS app asks for permissions only when a feature needs one, and each is refusable — the rest of the app keeps working.

    Camera.
    To record a session in the app. Frames are analysed and, depending on your pose-model setting, either processed on the device or uploaded.
    Microphone.
    To record audio alongside video, and for the live voice coach. Not used otherwise, and never in the background.
    Photo library.
    To import a clip you already filmed, and to save recordings back to your library if you ask.
    Bluetooth.
    To connect to a compatible machine monitor and record pieces live, including heart rate if you have a belt paired.
    Notifications.
    To tell you an analysis has finished or a coach has commented. We store a notification token, which you can revoke by turning notifications off.

    The app does not include analytics, advertising or tracking components, and does not track you across other companies' apps or websites.

    19Changes to this policy

    We update this policy when what we do changes. Material changes are announced by email or in-app notice at least 30 days before they take effect, and the version and date at the top of this page always tell you which text you are reading. Continued use after a change takes effect means you accept it; where the law requires consent for a change, we ask for it instead.

    20Contact

    Privacy questions, requests and complaints: privacy@cam-lab.org. Everything else: support@cam-lab.org. We aim to answer within 30 days, and usually much sooner.

    08
  • 09What your club and coaches can see
  • 10Links and pages you make public
  • 11Where your data is processed
  • 12How long we keep it
  • 13How we protect it
  • 14Your rights and choices
  • 15If you are in the United States
  • 16Children and minors
  • 17Cookies and similar technologies
  • 18The MotionX app specifically
  • 19Changes to this policy
  • 20Contact