Data protection

Client details entered by the studio (name, date of birth, gender, height), measurement records, progress photographs, goals, instructor assessments and the reports produced. We collect nothing directly from the client; the studio enters the data.

• Client contact details are not a required field and we do not ask for them
• No medical history, diagnosis or treatment information is held
• No payment details are stored in the application

For client data inside the application your studio is the controller and TrackPil acts as processor on your instructions. Informing your clients and obtaining consent for body measurements and photographs is the studio's responsibility. For data submitted through this website — a demo request, for example — we are the controller.

The infrastructure runs on Cloudflare. Structured data sits in Cloudflare D1; photographs and generated reports sit in Cloudflare R2. All traffic is served over HTTPS.

• Photo and report files are not held in a publicly browsable location
• File addresses are not guessable and access requires authorisation
• Authorisation is enforced server-side; hiding something in the interface is not authorisation

The system was built multi-tenant from the start. Every record belongs to a studio, and a user of one studio cannot reach another studio's data.

Uploaded photographs are resized to a size suitable for reporting and stored in that form; the original high-resolution file is not kept indefinitely. Photographs are never deleted automatically to save storage cost — before-and-after comparison is the reason the product exists.

• Aspect ratio is preserved
• No operation alters body shape or retouches the image
• The instructor chooses which photograph enters a report

You can archive a client or permanently delete them along with their associated data. Permanent deletion and account closure require the studio password. When you close your account you can request that your data be deleted.

No AI service is used for measurement storage, comparison, charting, photo storage or report generation. Client data is not used to train models and is not sent to any third-party AI service.

TrackPil is not a health, diagnostic or treatment system. An instructor assessment is an instructor's observation; it does not substitute for medical assessment and sits in its own section of the report, apart from the objective measurements.