Privacy Policy

1. Introduction

Reflect Motion ("we", "us", "our") operates the Reflect Motion platform (reflectmotion.com). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

2. Information We Collect

We collect the following types of information:

• Account information: Name, email address, and password when you create an account.
• Movement data: Pose landmark coordinates and joint angles derived from your device's camera during exercise sessions. Pose detection runs locally in your browser using MediaPipe; the resulting coordinates are sent to our servers for scoring and storage.
• Session recordings: If you complete a scored exercise, a video recording may be saved to enable replay functionality. You control who can view these recordings.
• Health information: Optional pain ratings and exercise performance scores.
• Usage data: Pages visited, features used, and session timestamps.
• Device information: Browser type, operating system, and screen resolution for compatibility purposes.

3. How We Use Your Information

• To provide and maintain the Reflect Motion service.
• To generate movement analysis scores and AI coaching commentary.
• To enable coach-client relationships when you choose to connect with a practitioner.
• To send transactional emails (account confirmation, session shares, coach notifications).
• To improve our service and develop new features.

4. Camera and Video Processing

Reflect Motion uses your device's camera to perform real-time pose detection. Pose estimation runs entirely in your browser using Google MediaPipe, so scoring itself does not depend on sending video anywhere, and your live camera feed is not streamed to us. When you record or upload a session, that video file is uploaded to and stored on our servers so that you can replay it, and share it if you choose. You can delete recordings, or your account and all associated data, at any time.

5. Data Sharing

We do not sell your personal information. We may share data with:

• Your coach/practitioner: If you connect with a coach, they can view your session scores, AI commentary, and session replays you send them.
• Service providers: Supabase (database/auth), Vercel (hosting), Resend (email delivery), Anthropic (AI commentary generation).
• Share recipients: When you share a session replay via email, the recipient can view that specific session.

Some of these providers are located outside Australia. Vercel (hosting), Anthropic (AI commentary) and Resend (email delivery) are based in the United States. Supabase provides our database, authentication and file storage, hosted in the Asia-Pacific region. By using Reflect Motion you consent to your information being disclosed to these providers.

6. Data Storage and Security

Your data is stored on Supabase infrastructure in the Asia-Pacific region, with row-level security policies applied to every table. Session recordings, including any video you record or upload, are stored in Supabase Storage. All data is transmitted over HTTPS. We implement reasonable security measures to protect your information.

7. Your Rights

You have the right to:

• Access, correct, or delete your personal information.
• Export your session data.
• Disconnect from a coach at any time.
• Delete your account and all associated data.

8. Australian Privacy Act

We comply with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth). If you have a complaint about our handling of your personal information, please contact us and we will respond within 30 days.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page and updating the "Last updated" date.

10. Contact Us

If you have questions about this Privacy Policy, please contact us at hello@reflectmotion.com.