Privacy
Policy

1. Who We Are

PRIORITAI ("we," "us," "our") is an AI-powered sports science and fitness intelligence platform operated at prioritai.ai. PRIORITAI offers two products: PRIORITAI Fitness (consumer fitness coaching) and PRIORITAI Sport (sports science intelligence for competitive athletes, coaches, and sports scientists).

For privacy enquiries, contact us at: privacy@prioritai.ai

2. Data We Collect

We collect the following categories of personal data:

Camera data

When you use the Analysis Screen, your device camera processes your movement in real time using MediaPipe Pose — a computer vision model that runs entirely on your device. Raw video frames are never transmitted to our servers. Only derived landmark coordinates and calculated metrics (joint angles, symmetry indices, etc.) are stored.

Wearable sensor data

When you connect a Bluetooth wearable (Samsung Galaxy Watch, Garmin, Polar), your device communicates directly with the wearable via Web Bluetooth. Raw sensor streams are processed locally. Only computed metrics (HRV values, readiness scores) are sent to our servers.

3. Legal Basis for Processing (UK GDPR)

We process your personal data under the following legal bases:

• Contract performance — processing necessary to provide the PRIORITAI service you signed up for (account management, delivering coaching insights).
• Legitimate interests — improving the platform, ensuring security, preventing fraud, understanding usage patterns. We balance these interests against your privacy rights.
• Consent — for special category health data (movement metrics, HRV, physiological data). You provide consent when you use the Analysis Screen or connect a wearable. You may withdraw consent at any time by deleting your data.

For users in Canada, processing is conducted in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA).

4. How We Use Your Data

• Generating your Movement Intelligence Score (MIS) and sport-specific KPI scores
• Calculating ACWR and providing workload management recommendations
• Providing injury risk predictions grounded in peer-reviewed sports science literature
• Delivering AI coaching responses and voice coaching (Fitness tier)
• Computing readiness scores from HRV, sleep, and training load data
• Improving the accuracy of our prediction models (using anonymised, aggregated data only)
• Sending service communications (account security, significant changes to the service)
• Maintaining platform security and preventing misuse

We do not use your data for advertising. We do not sell your data to third parties. We do not share your identifiable health data with insurers, employers, or sports organisations without your explicit consent.

5. Data Sharing & Third Parties

We share data with the following service providers, strictly for the purpose of delivering PRIORITAI:

All providers are contractually bound to process data only as instructed and to maintain appropriate security standards. Where data is transferred outside the UK/EEA, we rely on Standard Contractual Clauses (SCCs) as the transfer mechanism.

We may disclose data if required by law, court order, or to protect the safety of users or the public.

6. Special Category Health Data

Movement metrics, HRV, physiological data, and training load constitute health-related data under UK GDPR Article 9. We process this data only:

• With your explicit consent (given when you use the Analysis Screen or connect a wearable)
• For the purpose of providing the sports science and coaching service you signed up for
• In a pseudonymised form — your health data is stored against your user ID, not your name or email in the primary data store

Medical disclaimer: PRIORITAI is not a medical device and does not provide medical advice. All outputs — including injury risk scores, readiness scores, and movement analysis — are informational only. They are not a substitute for assessment by a qualified medical professional, physiotherapist, or sports medicine physician. Always consult a qualified professional before making decisions about training, rehabilitation, or injury management.

7. Data Retention

You may request deletion of your account and all associated data at any time by emailing privacy@prioritai.ai. We will complete deletion within 30 days.

8. Your Rights

To exercise any right, contact privacy@prioritai.ai. We will respond within 30 days. For UK users, you may also contact the Information Commissioner's Office at ico.org.uk.

9. Security

We implement the following security measures:

• Passwords — hashed using PBKDF2-SHA256 with per-user random salts. Plaintext passwords are never stored.
• Authentication — JWT tokens with expiry. Two-factor authentication (TOTP) available and recommended.
• Transport — all data transmitted over HTTPS/TLS. HTTP connections are redirected.
• Database — per-user data isolation. User data is stored in individual databases keyed by user ID.
• Camera data — processed on-device. Raw video never transmitted to servers.

No security system is perfect. In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected users and the relevant supervisory authority within 72 hours of becoming aware.

10. Cookies & Local Storage

PRIORITAI uses the following browser storage mechanisms:

• apex_token (cookie) — authentication token. Required for the service to function. Expires after 7 days.
• localStorage — stores your authentication token and tier preference locally on your device for session continuity.
• sessionStorage — temporary session flags (e.g. sign-out state). Cleared when you close the browser tab.

We do not use advertising cookies, tracking pixels, or third-party analytics cookies.

11. Children's Privacy

PRIORITAI is not directed at children under 16. We do not knowingly collect personal data from children under 16. If you believe a child under 16 has created an account, please contact privacy@prioritai.ai and we will delete the account.

Users aged 16–18 may use PRIORITAI with parental or guardian awareness. We recommend that minors involved in youth sport programmes use the platform under supervision of a coach or sports scientist.

12. Changes to This Policy

We may update this Privacy Policy as the platform evolves. We will notify users of material changes via email (if you have provided one) or via a notice on the platform at least 14 days before changes take effect. The current version will always be available at prioritai.ai/privacy.

Continued use of PRIORITAI after the effective date of changes constitutes acceptance of the updated policy.