Privacy Policy

• ·1. Purpose specification: collect only information related to learning and membership services.
• ·2. Accuracy and retention: users may update their data; inactive accounts are notified after 5 years and deleted after 6.
• ·3. Use limitation: data is used for service delivery, learning recommendations, and AML compliance; we do not sell user data.
• ·4. Security: encrypted storage, access control, and audit logging.
• ·5. Openness: the privacy policy is public and readable; changes are announced 30 days in advance.
• ·6. Access: users may request to access, correct, or delete their data (diaryx@doorm.ai).

• ·Access your own personal data
• ·Correct inaccurate information
• ·Withdraw consent (close your account)
• ·Request data portability (export as JSON / CSV)
• ·File a complaint with the Office of the Privacy Commissioner for Personal Data (PCPD), Hong Kong

This policy follows the Hong Kong Personal Data (Privacy) Ordinance (PDPO) and is compatible with EU GDPR, Mainland China PIPL, and Singapore PDPA. Cross-border data handling details are surfaced during the registration flow.

• ·Only Pro and above may upload, with explicit consent and a second confirmation.
• ·Videos are used only for AI coach posture analysis and are not used to train AI models without separate authorization.
• ·Storage: private OSS bucket with server-side encryption (SSE-OSS / SSE-KMS).
• ·Default retention is 30 days; users may extend or delete earlier. Deletion uses crypto-shred (immediate key destruction).
• ·No Association staff (including Super Admin) can directly access user video files. The AI coach pipeline uses keypoint coordinates only.

If you or someone you know is in crisis, please contact one of the hotlines below.