Privacy Policy

This policy explains what Kentro ("Kentro", "we") collects, why, who it is shared with, and your choices. Movement and body data is health-related, so we treat it carefully: see also the Consumer Health Data and Biometric Notice, which is part of this policy.

The short version

• The camera runs on your phone. Photos and video are never uploaded or stored.
• We keep your scan results and a small sample of body joint positions, never eye, mouth or face detail.
• We do not sell your data, share it for advertising, or use it to target ads.
• You can download or delete your data at any time from the Account page.

What we collect

You give us

• Account details: name, email, password (stored hashed by our authentication provider), and whether you are a trainer.
• Profile and body stats you choose to add: height, weight, birth year, avatar choices, units.
• How moves feel, where it hurts (body map notes), routine check-ins, messages with your trainer, and notes.
• For trainers: business name and color, the clients you add, notes and recommended moves.
• Your consents (which documents, which version, when) and safety check acknowledgments (only whether any answer was yes, never the answers).

From the camera, on your phone

• The pose model runs on your device and finds body joint positions in each frame. We save measurements (angles and distances), findings, and a small sample of joint positions per capture so results can be recalculated when the rules improve.
• We do not save eye or mouth points, face geometry, photos or video. If you make an avatar from the scan, only colors are read on the phone and saved.

Automatically

• Notification subscriptions (a device address to deliver reminders) if you turn reminders on.
• Basic technical logs from our hosting provider, app error reports (the error message and page), and a one-way hash of your network address when you accept a consent.
• Campaign tags from the link you arrived on (for example utm_source), to learn which posts bring people in. We do not use advertising trackers or sell this information.

How we use it

• To run the Service: scans, results, routines, reminders, messages, reports, and the trainer and client connection.
• To keep it safe and working: security, preventing abuse, fixing errors, support.
• To improve it, mostly with de-identified or aggregated data.
• To keep records of consents and meet legal obligations.

We process movement and body data only with your consent, given separately at sign-up, and you can withdraw it by deleting the data or your account.

Who sees it

• You.
• Your trainer, if you connect with one: your results, routines, how moves feel, where it hurts, messages and shared notes.
• Anyone with a report link you or your trainer turn on: that one report (first name, findings, routine, posture figures, never notes) until the link is turned off.
• Kentro administrators, only to run, support and secure the Service.
• Service providers that process data for us under contract: Supabase (database and sign-in, Canada), Vercel (hosting, United States), Anthropic (AI, United States: when a trainer asks for a reply draft, the client's recent results, check-ins and messages are sent to generate it, under terms that do not allow Anthropic to train its models on that data), and the push services of Apple, Google or Mozilla (only the text of a reminder).
• When the law requires it, or to protect someone's safety, or in a merger or sale of the business with the same protections.

We do not sell personal information or share it for cross-context behavioral advertising.

How long we keep it

• Account data: while your account is open. Deleting your account deletes your login and the scans and check-ins you made yourself.
• If a trainer created your client record and scanned you, those scans stay with the trainer (unlinked from your login) until they delete them; you can ask them, or us, to delete them.
• Body joint samples: deleted at the latest 3 years after the scan.
• Error reports: up to 12 months.
• Consent records: kept for 7 years after your account is deleted, as proof of what was agreed.

Your rights and choices

• Download your data and delete your account from the Account page at any time.
• Correct your details in the app, or email us.
• Turn reminders off at any time.
• Depending on where you live (including California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Washington and Nevada), you may have rights to know, access, correct, delete and port your data, to limit the use of sensitive data, and to appeal a decision about your request. Email hello@getkentro.com to use them; we answer within 45 days and will not treat you differently for using them. If we decline, you can appeal by replying to our answer; if the appeal is denied, you may contact your state attorney general.
• We honor Global Privacy Control signals; since we do not sell or share data for advertising, there is nothing further to opt out of.

Children

Kentro is for adults. Accounts require age 18+, and we do not knowingly collect information from children under 13. A trainer may scan a minor only with a parent or guardian's permission. If you think a child's information is in Kentro, email us and we will delete it.

Security

Data is encrypted in transit and at rest with our providers, access is limited by row-level rules so people see only what they are allowed to, and secret keys stay on the server. No system is perfectly secure; if a breach affects you, we will tell you as the law requires.

Health privacy laws

Kentro is a consumer wellness service. It is not a healthcare provider or a business associate under HIPAA. Trainers who are healthcare providers must not use Kentro for HIPAA-protected patient records (see the Trainer Terms).

Changes

When we change this policy materially, we will ask you to review and accept it in the app.

Contact

Kentro, hello@getkentro.com. Notices: By email to hello@getkentro.com.