Privacy
Policy

1. Who We Are

PRIORITAI is operated by PrioritAi Labs Inc., based in Ontario, Canada ("we," "us," "our"), at prioritai.ai. Our product, PRIORITAI Sport, provides movement analysis for athletes, coaches and performance staff.

We are responsible for the personal information we hold, and we follow Canada's Personal Information Protection and Electronic Documents Act (PIPEDA). Our Privacy Officer can be reached at contact@prioritai.ai.

2. Information We Collect

We collect the following categories of personal information:

Camera data

When you use the Analysis Screen, your device's camera image is processed on your device using MediaPipe Pose, a computer-vision model that runs in your browser. Raw video frames are not sent to our servers. Only the derived body-landmark coordinates and calculated metrics (such as joint angles and symmetry) are stored. If we introduce features that process video on our servers, we will update this policy and ask for your consent before they apply to you.

Wearable sensor data

If you connect a Bluetooth wearable (such as Samsung Galaxy Watch, Garmin or Polar), your device communicates with it directly via Web Bluetooth. Raw sensor streams are processed on your device, and only computed metrics (such as HRV values and readiness scores) are sent to our servers.

3. Consent

We collect, use and share personal information only with your consent, except where the law allows otherwise. Because movement and physiological data relate to your health, we treat them as sensitive information and ask for your express consent:

• When you use the Analysis Screen or connect a wearable
• Before any coach or team can see your results

You can withdraw consent at any time by emailing contact@prioritai.ai. Some features may stop working once consent is withdrawn.

If you are in the UK or the European Economic Area

We rely on these legal bases under the UK and EU General Data Protection Regulation (GDPR): contract (providing the service you signed up for), legitimate interests (security, fraud prevention and improving the Platform), and explicit consent for health-related data (GDPR Article 9).

4. How We Use Your Information

• Calculating your Movement Intelligence Score and sport-specific movement metrics
• Showing movement-quality and injury-risk screening indicators, drill recommendations and progress over time
• Showing training-load and readiness information
• Sharing results with coaches you have approved
• Improving our methods, using de-identified and aggregated data only
• Sending service messages, such as security alerts and important changes
• Keeping the Platform secure and preventing misuse

We do not use your data for advertising. We do not sell your data. We do not share your identifiable health data with insurers, employers, schools or sports organisations without your express consent.

5. Sharing & Service Providers

Coaches and teams

If you connect to a coach or team and give consent, they can see your movement results and related information on the Platform. You can withdraw that consent at any time by emailing contact@prioritai.ai.

Service providers

We use these service providers only to run PRIORITAI:

Service providers may only process your information on our instructions and must protect it. Your information is stored and processed outside Canada, in the European Union and the United States, and may be accessible to courts, law enforcement and national security authorities in those countries under their laws. For UK and EEA users, transfers outside those regions rely on Standard Contractual Clauses or another lawful mechanism.

We may also disclose information where required by law or court order, or where needed to protect someone's safety.

6. Health-Related Information

We treat movement metrics, physiological data and training load as sensitive, health-related information. We process it only:

• With your express consent
• To provide the service you signed up for
• In pseudonymised form — health data is stored against your user ID rather than your name or email in our main data store

Medical disclaimer: PRIORITAI is not a medical device. It does not diagnose, treat or predict injury, and does not provide medical advice. All outputs, including screening indicators, readiness information and movement analysis, are informational only and are not a substitute for assessment by a physician, physiotherapist, athletic therapist or trainer, or other qualified professional.

7. Data Retention

You can ask us to delete your account and associated data at any time by emailing contact@prioritai.ai. We will complete deletion within 30 days.

8. Your Rights

To use any of these rights, email contact@prioritai.ai. We will respond within 30 days. You can also contact the Office of the Privacy Commissioner of Canada.

If you are in the UK or EEA, you also have the rights to object to and restrict processing, and to complain to the UK Information Commissioner's Office (ico.org.uk) or your local data protection authority.

9. Security

We protect your information with measures including:

• Passwords — hashed with PBKDF2-SHA256 and per-user random salts. Plain-text passwords are never stored.
• Authentication — expiring JWT tokens, with two-factor authentication (TOTP) available and recommended.
• Transport — all data is sent over HTTPS/TLS. HTTP connections are redirected.
• Database — per-user data isolation, with user data stored in individual databases keyed by user ID.
• Camera data — processed on your device. Raw video is not sent to our servers.

No system is perfectly secure. If a breach creates a real risk of significant harm to you, we will notify you and the Office of the Privacy Commissioner of Canada as soon as feasible. For UK and EEA users, we will also notify the relevant authority within 72 hours where required.

10. Cookies & Local Storage

PRIORITAI uses the following browser storage:

• apex_token (cookie) — sign-in token, required for the service to work. Expires after 7 days.
• localStorage — stores your sign-in token, account type and role on your device so you stay signed in.
• sessionStorage — temporary session flags (such as sign-out state), cleared when you close the tab.

We do not use advertising cookies, tracking pixels or third-party analytics cookies.

11. Children & Youth Athletes

You must be at least 16 to create your own PRIORITAI account. If you believe a child under 16 has created an account, email contact@prioritai.ai and we will delete it.

Teams, schools and programmes that want to use PRIORITAI with athletes under 18 are responsible for obtaining parent or guardian consent where required, and must contact us before including athletes under 16 so appropriate consent can be arranged.

12. Changes to This Policy

We may update this Privacy Policy as the Platform evolves. We will give at least 14 days' notice of material changes by email (where we have one) or by a notice on the Platform. The current version is always at prioritai.ai/privacy.