Your practice. Your privacy.

1. Introduction

Welcome to BodyBlind, a service operated by PoomAt. We recognize that your movement media, body information, and athletic performance are deeply personal. This Privacy Policy explains how we use your information to create reference videos, golf swing feedback, and live coaching experiences while protecting your data under high global standards. Our goal is not just to comply with laws, but to proactively improve our systems to protect your privacy.

2. Information We Collect & Why

2.1 Movement & Visual Data

To provide personalized reference videos, form feedback, and coaching features, we process:

• Visual Attributes: We process visible body proportions, movement positions, equipment, and uploaded photo/video details. This data is used exclusively to create your requested reference video or feedback and does not serve as a permanent biometric identifier.
• Practice Clips: Videos selected for Swing Video Review are analyzed on your device and are not uploaded to BodyBlind storage. For an Apple-linked account, the resulting scores and coaching notes may be saved to your private history. Guest results remain in the current app session.
• Live Swing Coach Camera: Live camera frames are analyzed on your device to estimate movement landmarks. Raw Live Swing Coach frames are not uploaded. If remote voice is available, the short coaching cue text—not the camera frame—is sent for speech synthesis; otherwise the device voice is used.
• Completed swing scores and local replays: Completed body-motion form scores and minimal session metadata are synchronized to your private account. Replay videos, pose coordinates, equipment snapshots and detailed live-coaching analysis stay in the app on your device and are excluded from its cloud backup. The latest 20 captured swings are retained automatically; newer swings replace the oldest replay and detailed data without deleting its score. Offline scores wait for your authenticated account and an available connection before synchronization.

Captured swing replays and score records: Completed live swings can be recorded as short, silent replays on your device. Replay video, sampled movement landmarks, detailed analysis, coaching focus, and the replay’s club snapshot stay in the app’s local storage and are not uploaded. Only the latest 20 captured swings are retained locally across sessions. Each new swing automatically replaces the oldest replay video and its associated detailed data. Older compact scores remain in your private account. Existing local archives are reduced to this rolling limit when the app loads them. These local files are not a BodyBlind cloud backup.

Private score synchronization: Compact completed-swing records contain a swing identifier, session identifier, swing number, 0–100 body-motion form-match score, club identifier, capture timestamp, and score type. These records sync to your private authenticated account. This synchronization does not include replay video, movement landmarks, or detailed replay analysis.

My Bag and local practice summaries: Your club bag, including custom names, length, loft, and optional specifications, is saved on your device. Selected club specifications are included as equipment context when you request a generated reference or save an analysis result to your private cloud history. Local practice summaries are stored on your device. Entered specifications do not establish a physical measurement or automatically correct pose scores.

2.2 Account & Technical Info

• Identity: Email and name (via Apple Sign-In) to manage your credits and history.
• Transactions and Notifications: App Store transaction identifiers and a device notification token are processed to issue unlocks, prevent duplicate crediting, handle refunds, and deliver requested status alerts.
• Security, Notifications, and SDK Diagnostics: Firebase and our processing providers may generate limited request, timestamp, network, installation, device/app, notification-token, and error records needed to secure and operate the Service. The on-device ML Kit pose SDK also collects per-install identifiers, device/app details, performance, API configuration, feature events, and error codes for diagnostics and SDK usage analytics. Raw Live Swing Coach and Swing Video Review frames are processed locally and are not uploaded as part of that diagnostic collection. The App does not include Firebase Analytics, advertising analytics, or cross-app tracking.

3. Personalized Processing & Privacy by Design

BodyBlind uses a privacy-first architecture. Your data is handled as follows:

• Purpose Limitation: Your photos and videos are used only to provide, secure, and troubleshoot the reference, feedback, or coaching experience you request. BodyBlind does not use your personal likeness to train a generalized BodyBlind model.
• Local-First Processing: Practice clips and Live Swing Coach camera frames stay on your device. A source photo is uploaded only when you request a generated reference.
• Service Providers: We use Firebase for authentication, database, storage, and notifications; Apple for Sign in with Apple and StoreKit; an image/video generation provider for requested references; and a speech provider for eligible remote coaching voice. They receive only the data needed for that function.
• Proactive Improvement: If we identify that any regional law (such as GDPR in Europe or BIPA in the US) requires stronger protections, we commit to evolving our App's architecture to exceed those requirements.

4. Data Storage & Worldwide Rights

We honor your data rights regardless of where you live:

• Storage and Deletion: Source photos and generated references remain in your private library until you delete the guide or account. Account deletion removes the active profile, media, analyses, swing score records, and user credit ledger from BodyBlind's primary cloud stores. A generated output may remain temporarily with a processing provider under that provider's security and retention controls.
• Limited Anti-Abuse Retention: To enforce the one-time Apple-linked welcome credit, we retain a keyed, one-way marker derived from the Apple provider identifier after account deletion. Separate purpose-bound one-way markers may also retain purchase, remote-voice, posture-history, and generated-media quota totals. These markers are not email addresses, cannot be used to sign in, and are used only to prevent repeated claims, replay, or service-cost limit resets. Rolling voice, posture, and generation quota records receive an expiry no later than 48 hours after their latest use and are then removed on Firebase's asynchronous TTL schedule. One-time welcome, lifetime Sandbox-credit, transaction/refund, and deleted-account integrity markers may be kept longer because deleting them would re-enable replay or repeated grants.
• Deletion Integrity: We retain a one-way marker derived from the deleted Firebase account identifier so delayed backend events cannot recreate a profile after deletion. It cannot be used to authenticate or recover the deleted account.
• Purchase Integrity: Limited verified App Store transaction and refund event markers may be retained where needed to prevent duplicate crediting, honor a refund, resolve a dispute, or meet legal and accounting obligations.
• Global Compliance: We adhere to the principles of GDPR (EU), CCPA/CPRA (California), and LGPD (Brazil). If our Service is found to be non-compliant in your specific region, we will immediately limit service while we upgrade our systems to meet those local standards.

5. Data Security

We treat your reference videos and training media as high-value assets. We use TLS for data in transit, provider-managed encryption at rest, account-scoped access rules, short-lived upload reservations, and automated deletion workflows. Human access is restricted and is used only when necessary for security, legal obligations, or support you request.

6. Contact & Data Protection

For any privacy-related inquiries or to exercise your data rights, please contact our Data Protection Officer at:

Email: support@poomat.com

7. Children's Privacy

Our Service does not address anyone under the age of 13. We do not knowingly collect personally identifiable information from anyone under the age of 13. If you are a parent or guardian and you are aware that your child has provided us with Personal Data, please contact us.

8. Your Choices

You can deny camera or notification permission, use on-device Swing Video Review without uploading a practice clip, delete individual references, or delete your account in the App. Deleting a guest profile also deletes its anonymous Firebase identity and starts the same cloud-data cleanup workflow. No electronic transmission or storage system is completely risk-free.

9. Changes to This Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.

10. Contact Us

If you have any questions about this Privacy Policy, please contact us:

By email: support@poomat.com