Legal
Privacy Policy
Last updated: 4 August 2026
Veritas records video of people playing sport, which makes this policy more consequential than most. This document explains what we collect, why, how long we keep it, and what you can ask us to do with it.
1.Who we are
RunPace Labs (“Veritas Labs”, “we”, “us”), registered in India, is the data controller for personal data processed through the Veritas app and this website.
For privacy questions or to exercise any right described here, contact privacy@runpacelab.com.
2.What we collect
Account data. Your name, email address and/or mobile number, the sign-in method you used, and which academy you belong to. Authentication is handled by Clerk; we do not store passwords, and for Google sign-in we never see your Google credentials.
Session video. The footage you record through the app. This is the most sensitive category we handle. It contains identifiable images of you and of anyone else on or near the court.
Capture metadata. Recording length, device model, camera settings, court-detection results, camera intrinsics and motion sensor readings that flag when a mount was knocked. This exists to make the analysis accurate and to explain when it isn't.
Derived analysis. Everything the pipeline produces from your video: rally counts, shot classifications, shot speeds, positional heatmaps and quality metrics.
Website enquiries. If you use the contact form, the name, email, organisation, role, country and message you submit. These are stored in a Google Sheet we control and used only to reply to you.
Technical logs. IP address, timestamps and error traces, retained for security and debugging.
3.Why we process it, and on what basis
- To provide the service — recording, uploading, analysing and returning your session results. Basis: performance of our contract with you.
- To keep the analysis honest — capture metadata lets us tell you when a session was recorded poorly rather than silently returning worse numbers. Basis: legitimate interests.
- To improve our models — only where you or your academy have given us specific, separate consent. We do not use your footage for model training by default. Basis: consent, withdrawable at any time.
- To reply to enquiries — Basis: consent, given via the tick box on the contact form.
- To keep the service secure — Basis: legitimate interests and legal obligation.
4.Who can see your sessions
A session is visible to the player it belongs to and to the academy that recorded it. Sessions are never shared between academies, are not public, and are not sold or licensed to anyone.
If you are a player at an academy, your coaches and academy administrators can see your sessions and your analysis. If you leave an academy, contact us to have your data separated or removed.
5.Recording other people, and minors
Anyone recording a session is responsible for having the right to record everyone visible in the frame. In practice that means an academy must tell its players — and, where the player is a minor, their parent or guardian — that sessions are recorded and analysed, and must hold appropriate consent.
Minors. Junior coaching is a substantial part of how badminton academies operate, so this matters. We require that academies obtain verifiable parental or guardian consent before recording players under 18 years old. We do not knowingly collect data directly from children without that consent, and we will delete any such data promptly if we are told about it.
6.How long we keep things
- Session video: 90 days from upload, after which it is permanently deleted.
- Derived analysis: retained for the life of the account, since a player's history is the point of the product. Deleted on account deletion.
- Account data: retained while the account is active, then deleted within 30 days of closure.
- Contact-form enquiries: 1 year.
- Technical logs: 30 days.
7.Who we share it with
We use a small number of processors, each contractually bound to process data only on our instructions:
- Clerk — authentication and identity.
- Cloudflare R2 — storage of session video and analysis results.
- Modal — GPU compute that runs the analysis pipeline.
- Google — Sheets storage for website enquiries, and Google sign-in where you choose it.
- Vercel — hosting for this website.
Some of these operate outside India. Where data is transferred internationally we rely on Standard Contractual Clauses and adequacy decisions where applicable.
We do not sell personal data, and we do not share it with advertisers.
8.Your rights
Depending on where you live, you have some or all of the following rights: to access the data we hold about you; to correct it; to have it deleted; to restrict or object to how we process it; to receive it in a portable format; and to withdraw consent at any time.
Email privacy@runpacelab.com and we will respond within 30 days. If you are unhappy with our response, you may file a complaint with the Ministry of Electronics and Information Technology or relevant data protection authority in India.
9.Security
Video and results are stored in access-controlled object storage. Access is scoped so an account can only reach its own sessions and, for academy staff, their academy's sessions. Uploads and API traffic are encrypted in transit.
No system is perfectly secure. If a breach affects your data and poses a risk to you, we will notify you and the relevant regulator as required by law.
10.Cookies
This marketing website sets no advertising or analytics cookies. The Veritas app uses cookies and local storage strictly to keep you signed in. If we add analytics later, this section will be updated and, where required, consent requested first.
11.Changes to this policy
We will update the “last updated” date above whenever this policy changes, and will notify account holders directly about material changes to how we handle video.
