Privacy Policy
Effective date: April 3, 2026 · Last updated: April 3, 2026
This Privacy Policy describes how MOTION³ ("we", "us", or "our") collects, uses, and protects your information when you use the MOTION³ platform at motion.cam-lab.org (the "Service").
1. Information We Collect
Account information. When you create an account we collect your name, email address, and password (stored as a bcrypt hash). If you authenticate via Google OAuth we receive your Google profile name and email.
Profile data. You may optionally provide height, weight, gender, date of birth, primary sport, fitness level, goals, and injury notes to personalize training plans and analysis feedback.
Analysis data. Images, videos, and webcam frames you upload are processed on our servers using MediaPipe pose estimation. Uploaded media may be stored in cloud storage (Cloudflare R2) so you can review past analyses.
Usage data. We record per-day feature usage counts (analyses, chat messages, training plans) to enforce subscription-tier limits. We also collect standard server logs (IP address, user agent, timestamps).
Payment data. Payments are processed entirely by Stripe. We store your Stripe customer ID and subscription status but never your credit-card number or bank details.
2. How We Use Your Information
- To provide, operate, and improve the Service
- To run pose analysis and generate AI-powered feedback and training plans
- To manage your account, subscription, and usage limits
- To communicate service updates or respond to support requests
- To detect abuse, fraud, or violations of our Terms of Service
3. Third-Party Services
We share data with the following processors, each under their own privacy policies:
- Google — OAuth authentication
- Stripe — payment processing
- OpenAI — AI feedback and training-plan generation (analysis data is sent as context; we do not send personal profile data)
- Cloudflare R2 — media file storage
- Neon — PostgreSQL database hosting
- Vercel — application hosting
4. Data Storage & Security
All data in transit is encrypted via TLS. Passwords are hashed with bcrypt and never stored in plain text. Database connections use TLS. We follow industry-standard practices but no system is 100 % secure — use the Service at your own risk.
5. Data Retention
We retain your data for as long as your account is active. If you delete your account (via Settings), all associated data — profile, analyses, training plans, chat history, usage records, and uploaded files — is permanently removed.
6. Your Rights
- Access & export: You can export all your data as JSON from Settings > Data & Privacy.
- Correction: You can update your profile at any time in Settings.
- Deletion: You can permanently delete your account and all data from Settings > Data & Privacy.
- Withdraw consent: You may stop using the Service and delete your account at any time.
7. Cookies
We use strictly necessary cookies for authentication and session management. We do not use advertising or third-party tracking cookies.
8. Children
The Service is not intended for children under 16. We do not knowingly collect data from children under 16.
9. Changes to This Policy
We may update this policy from time to time. We will notify registered users of material changes via email or an in-app notice.
10. Contact
If you have questions or requests regarding your data, contact us at support@cam-lab.org.