Privacy Policy

When you send the form we receive your name and email address, and your organization and role if you fill them in. The form reaches our team by email, sent through Resend, an email delivery service. You get a confirmation email at the address you gave.

We use these details to answer you.

To improve the site we measure how it is used, with PostHog, an analytics service. PostHog receives:

• Which pages you open and what you press, with the time, the kind of device and browser you use, and the page you came from.
• A recording of the page while you use it, so we can see where something is confusing or broken.

A recording never shows anything you type. The contact form's fields are hidden in it, and what you send through the form is not sent to PostHog.

So that your visits count as one visitor, PostHog keeps a random id in a cookie and in your browser's storage. The id holds no name or email address, and we do not connect it to the contact form. We have set PostHog not to store your device's address on the internet.

PostHog keeps this data in the European Union. We use it only to understand and improve the site.

When you sign in with Google, we receive your name, email address, and profile picture. We use this information solely to create and manage your TropX Motion account.

We also store data you create through the app: motion-sensor recordings (quaternions and derived biomechanical metrics such as joint angles and range of motion), recording metadata, patient records and notes you create as a physiotherapist, tags, generated reports, and your device list.

On your device, an encrypted local cache stores recently used data so the app works offline. The encryption key is unique to your account and can be rotated from the Security tab.

• Authenticate your account and manage signed-in devices
• Store, sync, and play back motion recordings across your devices
• Compute biomechanical metrics and render charts
• Power Horus AI analysis of recordings you choose to analyze
• Generate shareable recording links when you request them
• Connect to TropX motion sensors over Bluetooth Low Energy

Your data is stored on Convex, our backend and database provider. All communication between the app and our servers is encrypted via HTTPS. Locally cached data on your device is encrypted at rest with a per-account key.

Convex handles data storage, encryption at rest, and infrastructure security under their own Privacy Policy and Terms of Service.

When you connect TropX motion sensors over Bluetooth, raw sensor streams are processed locally on your device by the desktop app's motion service. Only the recordings you save and upload leave your device. Live streaming data is not transmitted to our servers unless you start a recording.

When you use Horus, our AI analysis feature, the content of your chat messages and selected recording context (such as derived metrics and summaries of the motion data you choose to analyze) is sent to third-party large-language-model providers for processing.

The providers we use are:

• OpenRouter, an LLM gateway that routes requests to upstream model providers. See OpenRouter's privacy policy and terms.
• Google Vertex AI for selected models. See Vertex AI data governance and Google Cloud privacy notice.

We do not train models on your data. Upstream providers may retain inputs transiently for abuse-monitoring under their own terms. Do not paste information into Horus that you would not be comfortable sharing with a third-party processor.

To improve the app we measure how it is used, with PostHog, a product analytics service. PostHog receives which screens you open and where you press, the time, and the kind of device and browser you use. It also receives your account's id, a code with no meaning of its own, so that your visits count as one person's. We do not send your name, email address or picture with it.

A press is counted by its place on the screen, not by its words. Patient names, notes, motion recordings and chat messages are not sent to PostHog.

PostHog also receives a recording of the screen's layout. A recording never shows the words on the page, anything you type, pictures or videos. They appear as asterisks and blank blocks. It does show the moving skeleton and the motion curves with their degree scale, which carry no name and no face.

PostHog keeps this data in the European Union. We use it only to understand and improve the app.

When you create a share link for a recording, anyone with that link can view the recording contents without signing in, until you revoke the link. Share only with people you trust, and revoke links you no longer need.

You can sign out at any time from the Profile tab and remotely revoke other signed-in devices from the Activity tab. You can clear your local encrypted cache and rotate its key from the Security tab. To delete your account and associated data, contact us at the address below.

For privacy questions, to ask what we hold about you, or to have it deleted, write to tropx@tropx.ai.