Privacy Policy
Last updated: May 2025
1. The short version
RecoverOS processes your webcam feed entirely on your device using Google's open-source MediaPipe library. No video, images, or pose keypoints are ever transmitted to any server. Camera data is processed frame-by-frame and immediately discarded. We never see what your camera sees.
2. What data we collect
On-device only (never transmitted)
- Webcam video frames — processed locally, discarded immediately
- Pose landmark coordinates — computed locally, never stored in cloud
- Real-time fatigue score — displayed in extension popup only
Synced to our servers (anonymized)
- Session metadata: start/end time, session duration (no content)
- Aggregate fatigue score statistics (not linked to video)
- Recovery actions taken (stand, stretch, break)
- Account email and subscription status (Free / Pro)
Analytics (anonymous)
- Feature usage events (no PII, no biometric data)
- Error logs (stack traces only, no user data)
3. Camera and biometric data
RecoverOS requests camera access solely to run MediaPipe PoseLandmarker — an on-device AI model that detects body pose landmarks (33 keypoints). The raw video stream:
- Is never recorded or stored anywhere
- Is never transmitted to any server (ours or third-party)
- Is never accessible to anyone outside your browser tab
- Is processed at up to 4 frames per second, then the frame is discarded
The pose keypoints (numbers describing joint angles) are computed locally and used only to calculate your fatigue score. They are not stored persistently on-device beyond the current session window.
4. How we use your data
- To calculate and display your real-time fatigue score
- To deliver contextual recovery nudges at appropriate times
- To sync your anonymized session history across devices (Pro)
- To provide your wellness dashboard and trend analytics
- To manage your account and subscription
- To improve the product (aggregate, anonymized usage patterns)
5. Data sharing
We do not sell your data. We share data only with:
- Supabase — database and authentication (encrypted at rest and in transit)
- Paddle — payment processing and merchant of record (we never store card details)
- Vercel — website hosting (no user data)
6. Data retention
- Session metadata retained for 12 months, then automatically deleted
- Account data retained until account deletion
- Delete your account at any time from Settings → Account → Delete Account
- Deletion is permanent and irreversible
7. Your rights (GDPR)
If you are in the EU / EEA, you have the right to:
- Access the data we hold about you
- Correct inaccurate data
- Delete your data (“right to be forgotten”)
- Export your data in machine-readable format
- Object to processing
Exercise these rights by emailing privacy@recoveros.app. We respond within 30 days.
8. Security
All data in transit uses TLS 1.3. Data at rest is encrypted with AES-256. We use Supabase Row Level Security so your data is only accessible to your account. We conduct security reviews before each major release.
9. Children
RecoverOS is not directed at children under 13. We do not knowingly collect data from children under 13. If you believe a child has provided us data, contact us immediately.
10. Changes
Material changes to this policy will be announced via in-extension notification at least 14 days before they take effect. Continued use after that date constitutes acceptance.
11. Contact
Questions about this policy: privacy@recoveros.app