Your back. Your data.

Posture AI is a posture and back-care service: a posture scan that runs in your browser, exercise programs, and a coach that helps you keep going. This policy explains what we collect, why, and what you can do about it.

Questions go to support@happyback.app.

When you turn on the posture camera, every frame is analyzed in memory on your device and discarded in the moment. Nothing is recorded. No video is saved or sent anywhere, not to Posture AI and not to anyone else.

One exception, and we would rather write it here than have you find it: when the camera cannot work out whether you are sitting, standing or lying down, it sends a single still frame to be looked at, and gets back one word. This happens at most once a minute, only when the app is stuck, and the answer is remembered so that standing at the same desk asks once rather than all day. The frame is not stored by us or by the model, and no image comes back. You can turn it off in the posture app’s settings, under the camera; with it off nothing leaves this device and the app asks you instead.

The camera page itself still cannot reach the network at all: it is served with a Content Security Policy that blocks every connection except loading the page. The still frame above is handed to the surrounding Posture AI tab, which is the only thing that can make that call. You can check us on it: open your browser’s network tab while the camera runs, and the only request you will ever see is that occasional single frame.

What the camera keeps is numbers: how long you sat well, how long you slouched, when you stood up, and the five posture measurements it uses to recognise positions you mark as Right or Wrong. These live in your browser’s storage on your device (or in the desktop app’s local database). “Forget marked positions” and “Delete calibration” in the posture settings erase them, and “Export summary” hands you a copy.

The camera works without an internet connection for the same reason: it never needed one.

Outside the camera, Posture AI stores what it needs to run your account and your program:

• Account details. Your email address, the name you give us, and a login identifier. Sign-in is handled by Google Firebase Authentication.
• What you tell us about your back. Assessment answers such as where it hurts, for how long, and what it limits. This is health-related information and we treat it as sensitive.
• Program activity. Which program you enrolled in, sessions completed, check-in answers, streaks, and minutes.
• Coach conversations. Messages you send the coach and the replies you get.
• Posture summaries. If you choose to sync posture numbers from the camera to your account, we store those numbers (never images).
• Website analytics. On our marketing pages we measure which pages are visited and which buttons are used, so we can make the site better. This never includes camera data.

The coach is built on an AI language model that sits between deterministic safety checks. When you send a message, it is sent to our AI model provider to generate the reply, together with the context the coach needs (your program, recent sessions, and your recent messages).

Exercises and doses come only from our physical-therapist-authored exercise graph, and safety verdicts come only from our symptom screening, never from the model on its own. If the screening flags something serious, the coach pauses and a human reviews it.

We do not use your conversations to train models, and our providers are bound by contract to process your data only to provide the service.

• To run the service: match you to a program, track progress, and keep your account working.
• To keep you safe: symptom screening and escalation depend on what you tell us.
• To coach you: reminders, check-ins, and the messages you asked for.
• To improve the product: aggregate, de-identified usage patterns.
• To contact you about your account, and never for third-party marketing.

We do not sell your data and we do not run ads. We share data only with:

• Service providers who process it for us under contract: Google Firebase (hosting, sign-in, database), our AI model provider (coach replies), our email delivery provider (account emails), and website analytics.
• Our reviewers, when they look at a flagged conversation or a program.
• Legal requests when we are required to by law, and only what is required.

Camera frames are never shared with anyone because they never exist outside your device.

Account and program data are kept while your account is active. When you delete your account we delete your profile, assessment answers, program activity, and coach conversations within 30 days, except where we must keep a record to meet a legal obligation.

Posture numbers stored in your browser or desktop app are under your control and are removed when you delete them in the posture settings or clear your browser data.

Wherever you live, you can:

• See and correct what we hold about you from your Account page.
• Export your posture summary from the posture settings.
• Turn the camera off at any time. It never runs without your permission.
• Switch off the coach and use programs on their own.
• Delete your account and data by emailing support@happyback.app from the address on your account.

If your local law gives you additional rights, such as access, portability, restriction, or objection, we honour them. Email us and we will respond within 30 days.

Data in transit is encrypted. Cloud data is stored with Google Firebase under access controls limited to the people who need it to run the service. The camera pipeline is isolated by browser policy as described above. No system is perfect; if we ever learn of a breach affecting you, we will tell you promptly.

Posture AI is for adults. It is not directed to children under 16, and we do not knowingly collect their data. If you believe a child has created an account, email us and we will remove it.

When we change this policy we update the date at the top and, for anything that changes how your data is handled, we tell you in the app or by email before it takes effect. The camera promise does not change: frames stay on your device.

support@happyback.app. For the rules of using the service, read the Terms of Service.