Privacy Policy

1. Introduction

Reflect Motion ("we", "us", "our") operates the Reflect Motion platform (reflectmotion.com). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

2. Information We Collect

We collect the following types of information:

• Account information: Name, email address, and password when you create an account. If you choose “Continue with Google” instead, Google gives us your name, email address and profile picture, and we do not receive or store a password for you.
• Movement data: Pose landmark coordinates and joint angles derived from your device's camera during exercise sessions. Pose detection runs locally in your browser using MediaPipe; the resulting coordinates are sent to our servers for scoring and storage.
• Session recordings: If you complete a scored exercise, a video recording may be saved to enable replay functionality. You control who can view these recordings.
• Health information: Optional pain ratings and exercise performance scores.
• Usage data: Pages visited, features used, and session timestamps.
• Device information: Browser type, operating system, and screen resolution for compatibility purposes.

3. How We Use Your Information

• To provide and maintain the Reflect Motion service.
• To generate movement analysis scores and AI coaching commentary.
• To enable coach-client relationships when you choose to connect with a practitioner.
• To send transactional emails (account confirmation, session shares, coach notifications).
• To improve our service and develop new features.

4. Camera and Video Processing

Reflect Motion uses your device's camera to perform real-time pose detection. For most features, pose estimation runs entirely in your browser using Google MediaPipe, and your live camera feed is not streamed to us. When you record or upload a session, that video file is uploaded to and stored on our servers so that you can replay it, and share it if you choose.

Three features analyse uploaded footage on our cloud processing provider, Modal, rather than in your browser: Climb Motion, Golf Motion and Equine Motion. For these, your video (or still frames taken from it) is sent to Modal, analysed to measure movement, and the measurements are sent back to us. We do not store your footage with Modal; our processing discards it as soon as the analysis is finished. Your original recording stays in our storage in Australia. You can delete recordings, or your account and all associated data, at any time.

Two features let you talk to an AI voice coach: Practice Coach and the live session in Golf Motion. While a session is running, your voice is streamed through LiveKit, our real-time audio provider, to the coach. Your speech is turned into text by OpenAI, the coach's replies are written by Anthropic, and they are turned back into speech by OpenAI. We do not record the conversation's audio, and the written transcript is shown to you during the session but not stored. The clips the coach records of your swings or drills, which include the sound on them, are uploaded and stored in our storage in Australia like any other recording.

5. Data Sharing

We do not sell your personal information. We may share data with:

• Your coach/practitioner: If you connect with a coach, they can view your session scores, AI commentary, and session replays you send them.
• Service providers: Supabase (database/auth), Vercel (hosting), Resend (email delivery), Anthropic (AI commentary generation), Modal (video analysis for Climb Motion, Golf Motion and Equine Motion), LiveKit (real-time audio for the voice coach) and OpenAI (speech-to-text and text-to-speech for the voice coach).
• Share recipients: When you share a session replay via email, the recipient can view that specific session.

Supabase provides our database, authentication and file storage. Your account data and your session recordings are held in Australia, in Supabase's Sydney region (ap-southeast-2). They are not stored overseas.

Six of our providers are located outside Australia. Vercel (hosting), Anthropic (AI commentary), Resend (email delivery) and OpenAI (speech for the voice coach) are in the United States. Modal (video analysis) processes requests through the United States and may run them in other regions, and LiveKit (real-time audio) runs its servers in several regions, which may be outside Australia. Vercel serves the application itself. Resend receives your email address to deliver messages you have asked for. Anthropic receives your movement measurements (joint angles and scores) to write your coaching commentary, and where a feature analyses an uploaded or recorded video, it also receives still frames taken from that video. Modal receives the footage described in section 4, for Climb Motion, Golf Motion and Equine Motion only, and does not keep it. LiveKit and OpenAI receive your voice, and Anthropic the text of what you say, only while you are talking to the voice coach. Apart from that, your video files are not sent to these providers; they are stored in Australia. By using Reflect Motion you consent to your information being disclosed to these providers.

6. Google Sign-In and Google User Data

If you sign in with Google, we receive only your basic profile information — your name, email address and profile picture. We do not request access to your Gmail, Drive, Calendar, Contacts or any other Google service.

We use that information for one purpose: to create and identify your Reflect Motion account, and to send you the transactional emails described above. It is stored with the rest of your account data in Supabase's Sydney region.

We do not sell Google user data, we do not use it for advertising, and we do not transfer it to others except to the service providers listed above who process it on our behalf. Deleting your account deletes it. You can also disconnect Reflect Motion at any time from your Google account permissions page.

7. Data Storage and Security

Your data is stored on Supabase infrastructure in Australia (Sydney, ap-southeast-2), with row-level security policies applied to every table. Session recordings, including any video you record or upload, are stored in Supabase Storage. All data is transmitted over HTTPS. We implement reasonable security measures to protect your information.

8. Your Rights

You have the right to:

• Access, correct, or delete your personal information.
• Export your session data.
• Disconnect from a coach at any time.
• Delete your account and all associated data.

9. Australian Privacy Act

We comply with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth). If you have a complaint about our handling of your personal information, please contact us and we will respond within 30 days.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page and updating the "Last updated" date.

11. Contact Us

If you have questions about this Privacy Policy, please contact us at hello@reflectmotion.com.