Data protection
TrackPil handles body measurements and progress photos, which is sensitive data. Here is exactly how we store it, and what we don't do with it.
What we process
Client details entered by the studio (name, date of birth, gender, height), measurements, progress photos, goals, instructor assessments and reports. We don't collect anything directly from clients. The studio enters all of it.
- We don't ask for client contact details
- No medical history, diagnosis or treatment information is held
- No payment details are stored in the application
Controller and processor
For client data in the app, your studio is the controller and TrackPil is the processor, acting on your instructions. Telling clients how their data is used and getting consent for measurements and photos is the studio's responsibility. For information sent through this website, such as a demo request, we are the controller.
Where it is stored
TrackPil runs on Cloudflare. Records are stored in Cloudflare D1, and photos and reports in Cloudflare R2. All connections use HTTPS.
- Photo and report files are not held in a publicly browsable location
- File addresses are not guessable and access requires authorisation
- Access is checked on the server, not just hidden in the interface
Studios cannot see each other's data
The system was built for multiple studios from day one. Every record belongs to one studio, and nobody at one studio can access another studio's data.
Photographs
Uploaded photos are resized for reports and stored at that size. The full-resolution original isn't kept indefinitely. Photos are never deleted to save storage, because before-and-after comparison is central to the product.
- Aspect ratio is preserved
- No edits that change body shape or retouch the image
- The instructor chooses which photograph enters a report
Deletion and account closure
You can archive a client, or permanently delete them and all their data. Permanent deletion and closing your account both need the studio password. When you close your account, you can ask for your data to be deleted.
AI and client data
Today, no AI service is used to store, compare or chart measurements, or to create reports, and client data isn't used to train models. The assessment note draft we're planning will be optional. Nothing is sent unless a studio turns it on, and even then names, dates of birth, contact details and photos are never sent. See the GDPR page for details.
Not a medical system
TrackPil is not a health, diagnostic or treatment system. The instructor assessment records an instructor's observations. It isn't a medical assessment and appears in its own section, separate from the measurements.
Questions
Email us with any questions about data processing, GDPR or our sub-processors. We can send pre-contract data processing documents on request.