Consumer Health Data and Biometric Notice

This notice is part of our Privacy Policy. It explains how Kentro ("Kentro") handles data about your body and health, as required by state consumer health data and biometric privacy laws. We collect it only with your separate consent.

Consumer health data we collect

• Body joint positions estimated from your camera (a small sample per capture, without eye, mouth or face detail).
• Posture and movement measurements, findings, balance scores and the routines built from them.
• How moves feel, where it hurts (body map notes), routine check-ins, and anything you or your trainer write about your body or health in notes or messages.
• Height, weight and birth year if you add them.
• Whether any answer to the pre-scan safety check was yes (not the answers themselves).

Sources: you, your device's camera (processed on the device), and your trainer if you connect with one.

Why we collect it

Only to provide what you asked for: your scan results, explanations, routines, progress over time, reminders, sharing with your trainer, and reports you choose to share; and to keep the Service safe and working. We do not use it for advertising.

Who we share it with

• Your trainer, if you connect with one.
• People you give a report link to.
• Service providers that process it for us under contract: Supabase (database), Vercel (hosting), and Anthropic (AI reply drafts your trainer asks for).
• Others only with your consent, or when the law requires it.

We never sell consumer health data, and we do not use geofencing around health care locations.

Your rights

• Confirm whether we have your consumer health data and access it (Account page: Download my data).
• Get a list of the third parties and service providers we have shared it with (email us).
• Delete it (Account page: Delete account, or email us), and withdraw your consent at any time.
• Appeal a decision on your request by replying to our answer.

Email hello@getkentro.com. We respond within 45 days.

Biometric data notice

Whether body joint positions count as biometric identifiers under some laws is unsettled, so we treat them as if they do:

• What: the positions of body joints (and nose and ears for head position) estimated from camera frames. Never photos, video, eye, mouth or face geometry, and never used to identify who you are.
• Purpose: to measure posture and movement for your results and to recalculate them when the rules improve.
• No profit: we never sell, lease, trade or otherwise profit from this data.
• Disclosure: only to the people and service providers above, with your consent, or as required by law.
• Retention and destruction schedule: joint position samples are permanently destroyed at the earliest of (a) when you delete the scan or your account, (b) when the purpose of collecting them has been satisfied, or (c) 3 years after the scan. A daily job removes samples older than 3 years.
• Security: stored and protected with the same care as our other confidential data, at least as protectively as industry standards.
• Consent: we ask for your written consent (a checkbox at sign-up that is logged with the date and version) before collecting it. For someone scanned by a trainer, the trainer confirms they have the person's permission, and the person consents when they create their own login.

Contact

Kentro, hello@getkentro.com.