Privacy Policy

WorkPose is built privacy-first. The short version: your camera feed is processed on your device and is never uploaded, streamed, or stored. Saved results contain numerical measurements and gameplay scores. Optional accounts also store the profile information described below.

1. Camera & pose processing

Posture detection runs entirely in your browser using on-device machine learning (MediaPipe). No frame, clip, image, or video of you is ever sent to our servers or any third party. It works even with your network disconnected mid-scan. Hand, face, blink, and posture tracking use the same on-device boundary.

2. What we store

• Unsigned local results: result history is kept in your browser and is not imported automatically into a new account.
• Signed-in members: we store account-scoped data — posture reports, measurements, timestamps, checklist answers, settings, break events, work-session statistics, and saved joint profiles. This is never imagery.
• Free arcade accounts: when you choose to save a Bowling, Hand Pong, or Fruit Slice round, we receive numerical gameplay inputs to recalculate its score. We store the resulting score, game, input mode, version, round information, and time under your account. Gameplay inputs are used for validation; camera frames, images, and hand landmarks are not submitted.
• Arcade profiles and leaderboards: we store your chosen alias and public visibility preference. Your profile is private by default. Opting in makes your alias, rank, and best eligible scores visible on the public leaderboards. Public leaderboards show webcam scores.
• Pending arcade rounds: this browser can retain a completed round and its gameplay inputs so you can save it after signing in. Creating an account does not submit the pending score automatically. Choosing Save submits it to your account.

Arcade friend links include a game, input mode, round seed, and self-reported target score. Anyone you send the link to can read those values. Signed round tickets and request-limit records help us validate submissions and limit abuse.

3. Optional anonymous community comparisons

Optional anonymous numerical contributions are separate from local or signed-in result history. WorkPose sends a contribution only after you choose “Compare & contribute” and actively check the permission box. A private comparison does not upload your score.

A contribution can contain the game or test ID, measurement and scoring versions, selected duration, numerical score and listed metrics, tracking-quality value, and consent version and time. No video, images, landmarks, names, account IDs, or demographics are sent. Contributions are not linked to a WorkPose account.

WorkPose publishes a community distribution only after at least 100 eligible results exist for the same measurement cohort. Individual contributions are retained for no more than 24 months and expired records are excluded from aggregates.

After a successful contribution, this browser stores a deletion receipt containing the random contribution ID and deletion secret. You can use it to withdraw that contribution; the secret is not stored by WorkPose in readable form. Clearing browser storage can remove your copy of the receipt.

4. Service providers

• Authentication: Clerk manages sign-in and your account credentials.
• Database: Neon stores your account-scoped data described above.
• Payments: Stripe processes subscriptions and card details. We never see or store your full card number.
• Analytics: we use privacy-respecting usage analytics to understand which features help and where people get stuck. This tracks usage events and pages — never your camera — and may use cookies. Where required, we ask for consent.

5. Your rights & choices

From your free game profile, you can turn off public leaderboard visibility or delete your arcade profile and saved arcade scores. These controls do not change your paid subscription or posture data. Clearing browser storage removes locally retained rounds.

You can delete your signed-in account's saved WorkPose data at any time from the Settings panel. You can cancel your subscription anytime via the billing portal. Depending on your location, you may have rights to access, correct, export, or erase your personal data — contact us to exercise them.

6. Children

WorkPose is not directed to children under 16 and we do not knowingly collect their data.

7. Changes

We may update this policy as the product evolves. Material changes will be reflected by the “last updated” date above.

This page is provided for transparency and is not legal advice. Please have qualified counsel review it for your jurisdiction before relying on it.