Privacy Policy

Last updated: 17 March 2026

1. Introduction

mytai is a mobile application providing AI-powered martial arts form analysis. This privacy policy explains how we collect, use, store, and protect your personal data when you use the mytai application and website.

By using mytai, you agree to the collection and use of information as described in this policy.

2. Data Controller

The data controller responsible for your personal data is mytai (trading name). We are registered in the United Kingdom.

Contact email: getmytai@gmail.com

You may contact us via email at the address above.

3. Data We Collect

Data Category	What We Collect	How	Legal Basis
Account Data	Email address, authentication credentials	Account registration (email or Google OAuth)	Contract — necessary to provide the service
Exercise Videos	Camera recordings of your exercise form	You record via the app camera	Consent — opt-in during onboarding
Pose Landmarks	33-point body position data extracted from video	Automatically processed on your device using AI	Legitimate interest — core service functionality
Exercise Sessions	Reps, sets, form scores, coaching cues, timestamps	Logged during and after analysis	Contract — necessary to provide the service
Calorie and Food Logs	Food entries, calorie totals, timestamps	Manual entry by you	Contract — necessary to provide the service
Health Data	Steps, active energy burned, resting heart rate	Read from Apple HealthKit (iOS) or Health Connect (Android)	Explicit consent — OS-level permission prompt (special category data under UK GDPR Article 9)
User Preferences	Unit preference (metric/imperial), consent flags	App settings	Contract / Consent
Upload Metadata	Resumable upload URLs and retry state	Automatically during video upload	Legitimate interest — upload reliability

4. How We Use Your Data

To provide AI-powered form analysis and coaching feedback
To store your workout history and progress
To sync your data across devices when signed in
To improve our AI models (only with your explicit consent for video uploads)
To communicate with you about your account

We do NOT sell your data to third parties.

We do NOT use your data for advertising.

We do NOT share your data with third-party analytics or advertising services.

5. Automated Decision-Making

mytai uses artificial intelligence to analyse your exercise form and provide coaching feedback. This disclosure is provided in accordance with UK GDPR Article 22 and Apple App Store Guidelines.

Our AI processes pose landmark data (body position coordinates) extracted from your exercise videos entirely on your device.

The AI generates: a numerical form score (0-100), specific coaching cues (e.g., "extend jab further"), and biomechanical measurements (joint angles, timing).

This analysis is purely informational and does not constitute medical, physiotherapy, or professional sports coaching advice.

No decisions with legal or similarly significant effects are made by automated means.

You can choose not to use the AI analysis feature at any time.

6. Data Storage and Security

On-device data: stored in local SQLite database and AsyncStorage, protected by your device security
Cloud data: stored on Supabase (our data processor) infrastructure
Video uploads: transmitted using the TUS resumable upload protocol over HTTPS
Pose landmark data: processed and stored on-device only, never uploaded
Health data: read-only access, never uploaded to our servers
All network transfers use TLS/HTTPS encryption

7. International Data Transfers

Your cloud data is processed by Supabase, Inc., a company based in the United States.

Supabase stores data in EU-region data centres. However, as a US-based company, Supabase may access data from the United States.

These transfers are protected by Standard Contractual Clauses (SCCs) as approved under UK GDPR.

By using mytai, you acknowledge this transfer arrangement.

8. Data Retention

Account data: retained until you delete your account
Exercise sessions and calorie logs: retained until you delete your account
Exercise videos (uploaded): retained for up to 12 months after upload, then automatically deleted
Exercise videos (local): remain on your device until you delete them or uninstall the app
Pose landmarks: on-device only, deleted when you uninstall the app
Health data: read in real-time, not stored by mytai (stored by Apple Health / Health Connect)

When you delete your account, we will delete all your personal data from our servers within 30 days.

9. Your Rights Under UK GDPR

Right of access — request a copy of your personal data
Right to rectification — request correction of inaccurate data
Right to erasure — request deletion of your personal data
Right to restrict processing — request limitation of how we use your data
Right to data portability — receive your data in a structured, machine-readable format
Right to object — object to processing based on legitimate interest
Right to withdraw consent — withdraw consent at any time (e.g., video upload consent can be revoked in app Settings)

To exercise any of these rights, contact us at getmytai@gmail.com. We will respond within one month.

10. Right to Complain

You have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data protection rights have been violated.

ICO website: https://ico.org.uk
ICO helpline: 0303 123 1113

11. Children's Privacy

mytai is not intended for children under 16 years of age.

We do not knowingly collect personal data from children under 16.

If you believe a child under 16 has provided us with personal data, please contact us and we will delete it.

12. Changes to This Policy

We may update this privacy policy from time to time.

We will notify you of significant changes by posting a notice within the app.

The "Last updated" date at the top of this page will reflect the most recent revision.

Continued use of mytai after changes constitutes acceptance of the updated policy.

13. Contact Us

Email: getmytai@gmail.com

For data protection enquiries, please include "Data Protection" in your email subject line.