Privacy Policy
Last updated: 20 August 2026 · Version française
AIVATAR Capture is a professional video capture app published by Soma Shift. It is used to film reference sports movements, check their quality on the device, and send the ones that pass to an analysis service.
The essential point: this app films people. The person being filmed is usually not the person operating the app. Their consent must be obtained before filming, by the operator.
1. Who is the data controller
Soma Shift, publisher of the app, is the controller for data sent to its analysis service.
When the app is used by a third-party organisation — a sports club, a training structure — to film its own athletes, that organisation is responsible for obtaining the consent of the people filmed and for the lawfulness of the recording.
2. What is collected
Video and movement data
| Data | Why | Where |
|---|---|---|
| Movement video | Posture analysis, production of a reference movement | Google Cloud Storage, European Union (europe-west1) |
| Posture points (skeleton) | Movement comparison; no facial recognition | Computed on device, then on the server |
| Movement and subject name | Sorting takes; the subject is identified by a short label chosen by the operator | File metadata |
Posture analysis during filming runs entirely on the device. No image is transmitted until the operator decides to send the video.
Operator profile
The app offers to fill in a local profile: first name, last name, role, optional photo, and a short identifier (initials). This profile records who made which take.
- There is no account, no password, no sign-up.
- The profile can be declined: the app remains fully usable anonymously.
- If "Sign my clips" is turned off, no operator information is transmitted.
Technical data
To diagnose failures, the app sends crash reports (Firebase Crashlytics): device model, system version, app version, and the state of the app at the time of the incident. These reports contain no image and no video.
The app also verifies its own integrity with Apple and Firebase (App Attest / App Check) to prevent a third party from using the analysis service. This check concerns the application, not the person.
3. What is not collected
- No facial recognition, no biometric identification.
- No location data.
- No address book, no advertising identifier, no advertising tracker.
- No resale, no sharing for commercial or advertising purposes.
4. Legal basis
Processing of video relies on the consent of the person filmed, obtained by the operator before filming. Processing of technical data relies on the publisher's legitimate interest in maintaining a working, secure service.
5. Retention
- Video and analyses: kept for the duration of the analysis project, then deleted on request from the organisation or the person filmed.
- Operator profile: kept while the app is installed; removed from the server on request.
- Crash reports: 90 days.
6. Who has access
Video is accessible only to curation staff at Soma Shift, through an interface protected by Google authentication (Identity-Aware Proxy).
The following technical providers are involved:
| Provider | Role | Hosting |
|---|---|---|
| Google Cloud Platform | Video storage and processing | European Union (europe-west1) |
| Firebase (Google) | Integrity attestation, crash reports | European Union / United States |
| Apple | App distribution, device attestation | Per Apple |
7. Your rights
Anyone filmed has the right to access, rectify, erase, object to and port data concerning them, under the GDPR.
These rights can be exercised at privacy@somashiftai.com. A response is provided within one month. In case of persistent disagreement, a complaint may be lodged with the French data protection authority (CNIL).
Removing a video: simply state the approximate date and place of the take. Videos are named by movement and subject, so they are easy to locate.
8. Security
- Encrypted transmission (HTTPS) end to end.
- Access to the analysis service restricted to apps authenticated by device attestation.
- Access to the curation interface restricted to authorised accounts, behind an authentication proxy.
- Storage on European infrastructure.
9. Children
The app is not intended for minors. When a minor is filmed in a sports context, consent must be obtained from the holder of parental authority by the organisation doing the filming.
10. Changes
Any substantial change to this policy is signalled by updating the date at the top of the page. The applicable version is the one published at this address.