StancePrivacy Policy
Last updated 29 October 2026
The short version
- StanceView is a posture assessment tool for Pilates studios. Studios use it to assess their clients.
- Client photos and records are stored in Sydney, Australia.
- Only the studio's own staff can see client records. We and our service providers access information only as needed to run, support or secure StanceView.
- We do not sell information. We do not use it for advertising.
- If a studio connects its email, StanceView can only send email for that studio. It cannot read the studio's inbox.
Who we are
StanceView is operated by PS Blue Pty Ltd, ABN 11 114 756 133. StanceView ("we", "us") runs the StanceView website and app at stanceview.com and app.stanceview.com. We follow the Australian Privacy Principles in the Privacy Act 1988 (Cth).
Contact: support@stanceview.com
Studios and clients
A Pilates studio signs up to StanceView and invites its staff. The studio decides which clients to assess and what to record. The studio collects client information. We store and process it for the studio, under the studio's instructions.
If you are a client of a studio, your studio can see, correct, print or delete your information. You can also contact us directly. We will look at what we must do and work with your studio where needed.
What we collect
About studio staff
- Name, email address and sign-in details.
- Which studio they belong to and their role.
- A record of who opened, created, changed or deleted an assessment, and when.
About clients, entered by the studio
- Name, email address, height and notes.
- Posture photos (front, side and back) and the measurements taken from them.
- Movement test scores, findings and notes written by the instructor.
- Answers to the studio's intake questionnaire, if the client fills it in. Some answers are health information, such as injuries, conditions and pain.
About studios
- Studio name, logo and contact details.
- If the studio connects its Google or Microsoft email account: the email address and a sign-in key that lets StanceView send email for the studio.
About website visitors
This website does not use advertising or tracking cookies. Our hosting provider keeps standard server logs, such as IP address and time, for security.
Health information
Posture photos and questionnaire answers are sensitive information. They are collected only with consent. Before a client starts the intake questionnaire, they see a notice and must tick a box to agree. Clients can leave any question blank.
StanceView measures angles and distances from photos. It does not diagnose. What a measurement means is written by the instructor.
How we use information
- To run the app for the studio: store assessments, measure photos, make client reports and compare assessments over time.
- To send intake questionnaire links and other emails that the studio asks for.
- To keep the service secure, find faults and support the studio.
We do not sell information. We do not use client information for advertising. We do not use client photos or health information to train AI models.
Where information is stored
Client photos and records are stored in Sydney, Australia. The app's servers also run in Sydney. Some of our providers below operate outside Australia. We only use providers that protect information to a standard similar to the Australian Privacy Principles.
Who we share information with
We share information only with the providers we need to run StanceView, and only for that purpose.
| Provider | What it does | Where |
|---|---|---|
| Vercel | Hosts the website and app servers | App servers in Sydney, Australia |
| Neon | Database for client records | Sydney, Australia |
| Supabase | Storage for posture photos | Sydney, Australia |
| Clerk | Staff sign-in. Holds staff names and email addresses, not client records | United States |
| Resend | Sends email for studios that have not connected their own email. The client's email address passes through it | Japan |
| Google or Microsoft | Sends email from the studio's own account, only if the studio connects it | Where Google or Microsoft keeps the studio's email account |
| Cloudflare | Domain name service and forwarding of email sent to stanceview.com | United States and other countries |
We may also share information if the law requires it.
Connected Google and Microsoft accounts
A studio can connect its Gmail or Microsoft 365 account so that questionnaire links are sent from the studio's own address.
- Google: we ask only for permission to send email (gmail.send) and to know which account was connected. Microsoft: we ask only for Mail.Send and basic sign-in.
- StanceView cannot read, search, change or delete any email in the studio's mailbox.
- We store the sign-in key encrypted. We use it only to send the emails that the studio asks StanceView to send.
- When the studio presses Disconnect in StanceView, we delete the key and the connected email address at once. The studio can also remove access in its Google or Microsoft account settings.
- For each questionnaire email, we keep the address it was sent to and the time, with that questionnaire, until the studio deletes it.
StanceView's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
How we protect information
- Each studio's data is kept apart. Staff can only see their own studio.
- Every staff member has their own sign-in. Shared studio tablets can use a PIN, and idle screens lock and then sign out.
- Photos go straight from the device to storage through short-lived links.
- Faces are masked on printed client reports.
- Information is encrypted in transit. Email sign-in keys are encrypted at rest.
- We keep a log of who opened each assessment.
How long we keep information
We keep information while the studio uses StanceView, so that assessments can be compared over time. The studio can delete clients, assessments and questionnaire answers at any time. When we no longer need information for the studio, we delete it or make it permanently anonymous, unless the law requires us to keep it. When a studio stops using StanceView, we delete its information within 90 days. Database backups are kept for up to 7 days and are then replaced.
Questionnaire links expire. After a client submits a questionnaire, the link can no longer show their answers.
Your choices
- Ask to see or correct your information.
- Ask for your information to be deleted.
- Leave any questionnaire question blank.
Ask your studio, or email support@stanceview.com. We reply within 30 days.
Data breaches
If a data breach is likely to cause serious harm, we will tell the affected studios without delay. When the law requires it, we will also notify the Office of the Australian Information Commissioner (OAIC) and the people at risk, as soon as we can. We will work with the studio so that people do not get two notices.
Complaints
Email support@stanceview.com. If you are not happy with our answer, you can contact the OAIC at oaic.gov.au.
Changes
If we change this policy, we will update the date at the top. If a change is important, we will tell studios by email before it applies.