Privacyverklaring & Gebruiksvoorwaarden

Who we are

Movalytics is operated by Babon Innovations B.V. (Amsterdamsestraatweg 199, Utrecht, KvK 97969486). Contact: support@babon.eu.

What Movalytics does

Movalytics extracts clinical movement measurements (joint angles, gait parameters, symmetry) from an uploaded video and makes the results available to you in the app. It runs in three configurations, each with its own retention rules:

• Educational: used by students and lecturers in movement-sciences programmes to learn movement analysis. The student reviews the analysis through the measurements and the 3D skeleton viewer; the video itself is deleted after processing. Lecturers (docent role) can additionally self-upload videos from their own device. For any such upload, the lecturer is the controller responsible for the lawful basis of the persons filmed (typically informed consent of the participating students); Babon Innovations B.V. is the processor. Patient videos must not be uploaded into the educational configuration; clinical-care recordings belong in the clinical configuration.
• Research: used by academic researchers who want measurements for a cohort. Video is deleted after analysis; only measurements are retained.
• Clinical: used by physiotherapy practices as part of patient care. Video is deleted after analysis; only measurements are retained.

Your account is set to one configuration at creation. The clinical configuration is available to Dutch physiotherapists and rehabilitation physicians and is activated only after manual review and approval by our team; the educational and research configurations operate under per-institution processor agreements (HU pilot live; additional partners on intake).

What Movalytics is not

Movalytics is a measurement instrument. It produces numbers and a quality tier; it does not diagnose, does not advise treatment, and is not a medical device. Every clinical judgement is yours, and the responsibility for it stays with you and with the practice or institution you work for. If a measurement looks wrong, treat it as wrong.

What we collect

• Account data: email, password hash (never plaintext), role, profile fields you supply at register (name, organisation, function, country, optional practice URL); and if you enable two-factor authentication an encrypted authenticator-app secret.
• Uploaded video and the derived measurements computed from it.
• Optional free-text labels you attach to a run (e.g. a patient name or treatment tag). Optional, your choice.
• Operational logs: request timestamps, IP addresses, user-agent strings, HTTP status codes.

What we don't collect

• No behavioural tracking, no advertising IDs, no third-party analytics SDKs.
• No location, microphone, contacts, calendar, or photo-library access.

Where the data lives

Application data is hosted on Scaleway in Paris, France (fr-par). Transactional email is delivered through Scaleway Transactional Email, also in Paris. Everything stays in the European Union. Data is encrypted in transit (TLS) and at rest: object storage server-side (AES-256) and the database volumes with encryption at rest enabled.

Video is only ever held in object storage. The measurements computed from it are written to separate databases, which contain no video. Object storage has versioning switched off, so there is no recycle bin and no earlier version of a file: a deleted object is gone at once and cannot be restored, by us or by anyone else, and there is deliberately no backup of it. The databases do have daily encrypted backups inside the same EU region; because they hold no video, no recording can come back through a backup.

How long we keep it

All configurations (educational, research, clinical):

• Raw and processed video: both deleted immediately after successful analysis. We do not retain video.
• Measurements: kept while the run exists in the account (educational), or for the duration set in the research or processor contract (typically up to ten years for research; the clinical duration is set by the practice's own retention rules). Deleting a run removes its measurements.
• Failed-processing uploads: kept so we can look at the run by hand and retry it, and deleted automatically thirty days after upload at the latest. Deleting the run removes the upload immediately.
• Account data: kept while the account is active.
• Operational logs: platform logs are kept 7 days, database engine logs 30 days, and login and audit records 90 days.

Who can see it

Only you and people you explicitly share runs with can access your analyses through the application. Babon Innovations staff with production-infrastructure access can, in principle, read any data stored in the application; access is limited to a small technical team and is used for troubleshooting and incident response. All access is logged: ours through the hosting provider and our own working processes, and anyone else's only through an application account.

Do not enter real patient names or other identifying information in the optional free-text label fields. The field is encrypted at rest with a separate key (AES-GCM-256, managed in a secret store), but it remains a free-text field: use pseudonyms, not real names. A future EPD integration will replace the free-text workflow entirely, under a processor agreement signed per clinic.

Sharing and research use

We do not sell, and will not sell, your raw video or any identifying information. Uploaded video is only ever stored and processed on our own hosting infrastructure; it does not pass through the email provider or any other processor. The only third parties involved are the strictly necessary ones needed to run the service: Scaleway, for both hosting and transactional email (account verification, password reset, admin notifications), and Cloudflare, for the bot check on our public forms. Both sit under GDPR Article 28 processor agreements. Email messages contain a recipient address and a short link, nothing more; no video and no derived measurements leave Babon over email. The full processor list is available on request.

De-identified measurements (joint-angle time series and gait parameters) may be contributed to a research database which Babon intends to license to academic and industrial research partners. The video is deleted after analysis and never enters that database. On the research record the account email is blanked and any free-text label you entered is replaced by the task label, and the infrastructure holding the record is EU-only. We treat these measurements as de-identified rather than anonymous: a technical key still links the research record back to the original recording internally, and use of that link is restricted to the same small technical team that administers production. The legal basis is our legitimate interest in improving and validating movement analysis (GDPR Art. 6(1)(f)).

Institutional deployments (education, research, clinical) may carve out their data from this use in their own processor agreement. You can object at any time by emailing us, and we switch it off for your account. Objection takes effect immediately for future recordings. For measurements already contributed the internal link means we can still identify the record, so email support@babon.eu and we handle the request under your rights below.

Your rights (GDPR / AVG)

You can request a copy of your data (Art. 15), correction (Art. 16), deletion (Art. 17), an export (Art. 20), or restriction of / objection to processing (Art. 18, 21). Email support@babon.eu and we reply within 30 days. In-app you can already delete any run, change your password, download a JSON export of your account data (art. 20), and delete your account (art. 17, with what stays and what goes shown to you before you confirm). Anything else, your address, an objection to the research use, a copy of the access log we keep, goes through that address and we act on it. Disagree with our response? Lodge a complaint with the Dutch data-protection authority (autoriteitpersoonsgegevens.nl).

Data-breach handling

If we become aware of a personal-data breach that is likely to risk your rights, we notify affected users without undue delay and, where required, the Dutch data-protection authority within 72 hours (GDPR Art. 33 and 34).

Cookies and third-party resources

The web application uses strictly necessary authentication cookies only (an HttpOnly access token and refresh token). No tracking, advertising, or analytics cookies, so no consent banner is required under the ePrivacy Directive and Dutch Telecommunicatiewet art. 11.7a. Fonts are served from our own infrastructure; no font request goes to a third party.

The four public submission forms (register, password-reset, and the two partnership-intake forms) load Cloudflare Turnstile (challenges.cloudflare.com) to verify that the submission comes from a real visitor and not an automated bot. When the widget loads, Cloudflare receives your IP and user-agent and runs a short challenge in your browser; Cloudflare states publicly that Turnstile does not use cookies or fingerprinting and is GDPR-compliant. The challenge token is then sent with your form data so our backend can confirm the visitor passed. If you cannot run JavaScript or if the widget fails, you can still reach us by emailing joey.kardolus@babon.eu directly.

Mobile app permissions

The Movalytics mobile app requests only the camera permission, to record the video you upload. It does not request the microphone, location, photo library, contacts, or any other device content. A recording never reaches your photo library and is never handed to another app. It is held inside the app only while it uploads and is released as soon as the server confirms receipt; if the upload fails it is kept so you can retry, and closing the app discards it. On both iPhone and Android it stays in the app's working memory and is never written to storage at all.

Users under 18

Movalytics is a professional tool and is not intended for self-service use by people under 18. Where a minor is filmed in an educational or clinical context, the supervising professional or institution is the controller of the resulting data.

Changes to this policy

Updates are published at app.babon.eu/privacy. We notify active account holders by email of material changes. Minor wording changes may be made without separate notification.

Babon Innovations B.V. · Utrecht, Nederland · KvK 97969486. Vragen kunnen in het Nederlands worden gestuurd naar support@babon.eu.