Privacy Policy

Last updated: 15 July 2026

Template for review. This is a starting draft — have it reviewed by qualified legal counsel before publishing, especially regarding health-related data and your operating jurisdictions (e.g., GDPR, Australian Privacy Act, HIPAA where applicable).

PosturaScreen (“we”, “us”) provides posture-screening software for individuals and practitioners. This policy explains what we collect, why, and your choices. By using PosturaScreen you agree to this policy.

1. Information we collect

Account data: your email, password (stored only as a secure hash), name, role, and clinic details you enter.
Client data you enter: client name, gender, age, and the assessments you create.
Photos: the front/side photos you or your client capture, and the annotated versions we generate.
Posture measurements: the metrics computed from those photos.
Usage data: basic logs and analytics to operate and improve the service.

One-off screens: you do not need to provide a name, email address, or account to create a temporary report. We create a random technical session identifier solely to isolate your photos and result from other users. We do not treat that temporary session as a registered account.

2. Sensitive data & consent

Photos of a person's body and posture measurements may be considered health-related or sensitive personal data. If you screen yourself, we ask for your consent before accepting a photo. If you screen somebody else, you are responsible for obtaining their appropriate consent before capturing and uploading photos and for following the laws and professional standards that apply to you.

3. How we use information

To provide the service — run analysis, generate and store reports.
To authenticate you and keep your account secure.
To operate, maintain, and improve the product.
To communicate service-related messages.

We do not sell your data. We do not use your clients' photos to train models without explicit, separate consent.

Guest analytics are limited to coarse events such as capture method, front/side view, and general error category. We do not send names, email addresses, session or assessment IDs, capture/claim tokens, filenames, image URLs, photos, metric values, or report contents to analytics.

4. Storage & security

Data is stored with reputable cloud infrastructure providers. Photos are kept in private storage and served only via time-limited links. Data is encrypted in transit and at rest. Each account's data is logically isolated from others.

5. Retention & deletion

Temporary one-off screen: access expires 24 hours after the temporary screen is created. An automated cleanup process then deletes the photos, report, temporary database records, and technical anonymous identity. The result page also lets you delete them immediately. If you explicitly choose Save and track over time, the report becomes account data instead and is retained under the account rules below.

Saved account data: we keep it for as long as your account is active or as needed to provide the service. You can delete clients, assessments, and photos from within the app. You may request deletion of your account and associated data by contacting us; we will action it within a reasonable period, subject to legal retention requirements.

6. Sharing

We share data only with service providers that help us run PosturaScreen (e.g., hosting, storage, authentication, email), under appropriate agreements, and where required by law.

7. Your rights

Depending on your jurisdiction, you may have rights to access, correct, export, or delete your personal data, and to object to or restrict certain processing. Contact us to exercise these rights.

8. International transfers

Your data may be processed in countries other than your own. Where required, we put appropriate safeguards in place.

9. Changes

We may update this policy. Material changes will be notified in-app or by email. Continued use after changes means you accept the updated policy.

10. Contact

Questions or requests: privacy@posturascreen.com.