Privacy Policy
Last updated 1 November 2026. The short version: your videos stay on your computer and never reach us, and so does your activity data unless you choose to connect Garmin Connect. We keep a small amount of account and billing information, and hashed signals that limit the free trial.
This policy covers Framemetry, run by Thomas Fletcher, Botany NSW 2019, Australia. Contact us about privacy at support@framemetry.com.
What we never receive
- Your videos, or any frame from them
- Your activity files, routes, locations, heart rate or other health and fitness data, unless you choose to connect Garmin Connect, explained below
- Your card details, which go straight to Stripe
These are read and processed by software running on your own computer, in your browser or our desktop app.
If you connect Garmin Connect
This isn't available yet, and it only opens if Garmin approves it.
This is optional, and everything else works without it. You approve it on Garmin's own page, so we never see your Garmin password.
- What we receive: each activity your device syncs after you connect, with its time, type, device model, route, speed, heart rate and other sensor data. We don't receive older activities, or your other health data.
- Why: so you can add an activity to a video with one click, and so we can point out which activities match your clips. That matching happens on your computer. We don't use this data for anything else, or for training AI, and we don't sell it.
- Legal basis under GDPR: your consent, which you give when you connect and can withdraw at any time. Location and heart rate can be sensitive, so please only connect if you're comfortable with this.
- How long: activities are stored encrypted on our servers for 30 days from when they arrive, then deleted. The sign-in tokens Garmin gives us are also encrypted, and kept until you disconnect.
- Who else handles it: our hosting and database providers, only to run the service.
- Leaving: disconnect at any time from your account page, or remove us from Connected Apps in Garmin Connect. Either way, we delete the activities and tokens straight away. Deleting your account does the same.
Garmin handles your data under its own privacy policy.
What we keep
| Information | Why | Basis under GDPR |
|---|---|---|
| Email address, and name and picture if you sign in with Google | Your account and sign-in | Contract |
| Sign-in sessions, with IP address and browser type | Keeping you signed in, and security | Contract, legitimate interests |
| Subscription status, plan and renewal date, and Stripe customer ID | Knowing what you've paid for | Contract |
| Which version of the terms you accepted, and when | Proof of the agreement | Legal obligation, legitimate interests |
| Computers connected to the desktop app: name, type and last used date | Managing your device limit | Contract |
| Free trial signals, described below | Enforcing the free export limit | Legitimate interests |
| Messages you send us | Helping you | Contract, legitimate interests |
| Hosting provider logs with IP addresses, kept for a short time | Running the service, and security | Legitimate interests |
How we limit the free trial
The free export limit is per person. To stop it being claimed repeatedly with new accounts, each time you make a free export we record:
- your email address, reduced to its real mailbox, so that name+1@gmail.com counts as name@gmail.com
- a random ID stored in your browser, or an ID from your computer in the desktop app
- the network part of your IP address, not the full address
- a coarse summary of your hardware (graphics chip, processor and memory class, screen size and time zone), combined with that network, because hardware alone can't tell people apart
All of these are stored only as keyed one-way hashes, so they can be compared but not read back, and they can't identify you without our secret key. We don't use them for advertising or for anything else, and we don't share them.
Because they exist to stop the trial being reused, these hashes stay for 12 months, even if you delete your account, and are then removed. Our legitimate interest is preventing abuse of a free offer, and you can object by emailing us.
Cookies and browser storage
We use one essential cookie to keep you signed in. Your browser also stores your overlay layout and the random ID described above. We don't use advertising cookies, third-party trackers or behavioural analytics, so there is no cookie banner to dismiss.
Who else handles information
- Stripe and Link sell the subscription as merchant of record, so they receive your payment and billing details under their own privacy policies. They may also delete data on request and tell us.
- Our hosting, database and email providers process information on our behalf to run the service. See the list on request.
- Google, only if you choose to sign in with Google.
We don't sell personal information. We share it only as above, or where the law requires. Some of these providers are outside your country, including in the United States, and we rely on appropriate safeguards such as standard contractual clauses where required.
How long we keep it
Account information stays until you delete your account. Billing records held by Stripe follow their retention and tax law. Terms acceptance records are deleted with your account unless we need them for a legal claim. Trial hashes last 12 months as above.
Your rights
You can download your data and delete your account from your account page. Depending on where you live, you may also have the right to correct information, object to or restrict how we use it, and complain to a regulator: in Australia the OAIC, in the UK the ICO, and in the EU your local data protection authority. California residents have similar rights, and we don't sell or share personal information as California law defines it. We won't treat you differently for using these rights.
Children
Framemetry isn't for anyone under 16, and we don't knowingly collect their information.
Security
Connections are encrypted, there are no passwords for us to store, and sign-in uses one-time codes. No system is perfectly secure, so if a breach affects you, we'll tell you as the law requires.
Changes
If this policy changes in a way that matters, we'll tell you and show the new version before your next export.