Privacy Policy

1. Who We Are

PoseMaster Pro is operated by Locum Tech Ltd, a company registered in England and Wales (company number 09514325). Our contact email is ops@soggl.com.

For the purposes of UK data protection law (the UK GDPR and the Data Protection Act 2018), Locum Tech Ltd is the data controller.

2. What Data We Collect

Account information

When you create an account we collect your email address, a display name, and your gender (used to match you with the correct competition divisions). You may optionally provide your country and a profile photo.

Photos you submit for judging

When you use the AI judging feature you upload or capture a photo. That photo is sent to a third-party AI service (Google Gemini) for analysis and is stored in our database so you can view your score history. Photos are associated with your account and are deleted if you delete your account.

Scoring and competition data

We store your scores, competition entries, head-to-head challenge results, leaderboard rankings, and ELO ratings.

Payment information

Payments are processed by Stripe. We do not store your credit card number or bank details. Stripe provides us with a customer identifier and subscription status. You can review Stripe's privacy policy at stripe.com/privacy.

Influencer programme

If you apply to the influencer programme we additionally collect your Instagram, TikTok, and/or YouTube handles, your follower count, and a short statement about why you want to join.

Usage data

We track how many judgings you use per day (for free-tier limits), referral activity, and share metrics (which platforms you share to and how many views those shares receive).

3. How We Use Your Data

We use your data to:

• Provide the AI judging service and store your score history
• Run competitions, leaderboards, and head-to-head challenges
• Process payments and manage subscriptions
• Send transactional emails (welcome, payment confirmations, payout notifications)
• Administer the influencer programme (review applications, track referrals, process payouts)
• Enforce usage limits and prevent abuse
• Improve the service based on aggregate, anonymised usage patterns

4. Legal Basis for Processing (UK GDPR)

We process your personal data on the following legal bases:

• Contract — processing necessary to provide the service you signed up for (account, judging, competitions, payments).
• Legitimate interest — analytics, fraud prevention, and service improvement, where our interests do not override your rights.
• Consent — where we rely on consent (e.g. marketing emails), you can withdraw it at any time.
• Legal obligation — where we are required to retain data for tax, fraud, or regulatory purposes.

5. Third-Party Services

We share data with the following third-party processors, all of whom have their own privacy policies:

• Supabase (database and authentication) — stores your account data, scores, and photos. Hosted in the EU/US.
• Google Gemini (AI analysis) — receives your photo and pose metadata to generate scores. Google's API data usage policy applies.
• Stripe (payments) — processes all financial transactions. We never see or store your card details.
• Resend (email) — sends transactional emails on our behalf. Receives your email address and message content.
• Vercel (hosting) — hosts the application. Receives standard web request data (IP address, user agent).

6. International Data Transfers

Some of our third-party processors operate outside the UK. Where data is transferred internationally, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) or equivalent mechanisms approved under UK data protection law.

7. Data Retention

We retain your data for as long as your account is active. If you delete your account, we delete your profile, scores, photos, and all associated data. Some data may be retained where we have a legal obligation (e.g. payment records for tax purposes, typically 6 years under UK law).

8. Your Rights

Under UK data protection law you have the right to:

• Access your personal data
• Rectify inaccurate data
• Erase your data (“right to be forgotten”) — you can delete your account from your Account page at any time
• Restrict processing in certain circumstances
• Data portability — receive your data in a structured, machine-readable format
• Object to processing based on legitimate interest
• Withdraw consent at any time where processing is based on consent

To exercise any of these rights, contact us at ops@soggl.com. We will respond within one month as required by law.

9. Cookies

We use only essential cookies required for authentication (session tokens set by Supabase). We do not use advertising cookies, tracking pixels, or third-party analytics cookies. For full details, see our Cookie Policy.

10. Children

PoseMaster Pro is not intended for children under 16. We do not knowingly collect data from anyone under 16. If you believe a child has provided us with personal data, please contact us and we will delete it.

11. Security

We use industry-standard security measures including encrypted connections (HTTPS), hashed passwords (managed by Supabase Auth), row-level security policies on our database, and server-side API route protection. No system is 100% secure, but we take reasonable steps to protect your data.

12. Changes to This Policy

We may update this policy from time to time. We will notify registered users of material changes by email. The “last updated” date at the top of this page reflects the most recent revision.

13. Complaints

If you are unhappy with how we handle your data, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk. We would appreciate the chance to address your concerns first — please contact us at ops@soggl.com.