What happens to patient data, in plain terms.
Clinics ask the same questions before a demo: where does the video go, what is stored, who can see it, and how do we get it deleted. Here are the answers, with nothing claimed that we cannot show you.
Where the video goes
Nowhere. Movement analysis runs on the patient's own device, inside the browser. The camera feed is processed frame by frame and discarded; it is never uploaded, recorded, or stored. What leaves the device is a small set of results: repetitions, hold time, the estimated range of motion, a form quality score, and the pain the patient reports. This public website never requests camera access at all.
What is stored
- Account details for patients and therapists: name, email, role, and the clinic they belong to.
- The exercises a therapist assigns, with the prescribed reps, hold times, and difficulty.
- Per-session, per-exercise results: reps, hold time, range of motion, a form quality score, the pain the patient reports, and any notes.
- Appointments, their status, and a history of changes.
- Messages between a patient and their therapist, and the notifications sent about them.
Who can see what
Access follows roles. A patient sees only their own plan, sessions, messages, and appointments. A therapist sees the patients assigned to them. KineTrue staff have the operational access needed to run and support the service, under the same obligation of confidentiality as the clinic. Because video is never stored, there is no footage for anyone to view.
In transit and in storage
Every connection between the browser, the platform, and the website uses HTTPS. The platform is hosted on Amazon Web Services. For the hosting region, encryption-at-rest details, backup policy, and our current security controls, ask for the security summary and we will send the current version rather than a slogan.
Deleting data
Patients can revoke camera permission in their browser at any time, and can ask the clinic or KineTrue to delete their data. A clinic leaving KineTrue can request an export of its session records and deletion of its accounts. We confirm deletion in writing.
This website
kinetrue.com sets no tracking cookies and shows no consent banner. If analytics is enabled it uses a cookie-free, privacy-first service that records page views and button clicks without identifying visitors. The contact form asks you not to include health details, and nothing you type there is used for anything other than replying to you.
Compliance posture
For clinics in the United States, KineTrue will sign a Business Associate Agreement and provide a written security summary. We do not list third-party certifications we do not hold. If a certification matters to your decision, ask and we will tell you exactly where we stand and what is planned.
Nothing here is legal advice. Your clinic remains responsible for its own risk analysis and for choosing vendors that fit its policies. We are glad to answer your security questionnaire.