Privacy Policy

FortyTwo Motion ("FortyTwo Motion", "we", "us") provides running gait analysis software for physio practices in New Zealand and Australia. This policy explains what personal information we collect, why we collect it, and how it is handled.

1. Who this policy applies to

This policy covers two groups of people:

• Practice users — physiotherapists and staff at practices using FortyTwo Motion.
• Runners / clients — individuals whose running footage and movement data is uploaded by a practice for the purpose of generating a report.

Practices are responsible for obtaining a runner's consent before recording or uploading their footage, as set out in our consent-first workflow.

2. Information we collect

• Practice account information — practice name, contact details, and login credentials.
• Runner footage — short side and rear-view video clips uploaded by a practice for gait analysis.
• Movement and report data — the movement observations, scores, and report content generated from uploaded footage, along with any notes added by the reviewing physio.
• Communications — information you send us when booking a walkthrough or contacting support.

3. How we use this information

• To process uploaded footage and generate a movement report for physio review.
• To operate, maintain, and improve the FortyTwo Motion product.
• To support reassessment over time by retaining report history and movement scores.
• To communicate with practices about their account, onboarding, and product updates.

Reports are intended to support a physio's professional judgement. FortyTwo Motion does not use this information to provide a diagnosis or automated medical advice.

4. Data minimisation and retention

We retain report history and movement scores for as long as a practice maintains an active account with us, to support reassessment over time. Raw video footage is retained only for as long as needed to generate and finalise a report, and is then deleted or de-identified unless a practice requests a longer retention period for clinical record-keeping. Practice account information is retained for as long as the account is active and for a reasonable period afterward to meet legal and accounting obligations.

5. Processing and storage

Uploaded footage is processed using computer-vision analysis to extract visible movement observations. We use reputable third-party hosting and processing infrastructure to deliver this service. Any service provider we engage is bound by confidentiality and data protection obligations consistent with this policy and is only permitted to use personal information to provide services to us.

6. Consent

Practices must obtain a runner's consent before recording or uploading their footage for analysis. Practices should explain to runners that footage will be used to generate a movement report reviewed by a physio.

7. Disclosure of information

We do not sell personal information. We may share information with service providers who help us operate FortyTwo Motion (for example, hosting or processing infrastructure), and only to the extent needed to provide the service. We may also disclose information if required by law.

8. International data transfers

Personal information may be stored or processed in New Zealand, Australia, or other jurisdictions where our service providers operate. Where information is transferred outside New Zealand or Australia, we take reasonable steps to ensure it receives a comparable standard of protection to that required under the New Zealand Privacy Act 2020 and the Australian Privacy Act 1988.

9. Your rights

Practices and runners can request access to, correction of, or deletion of their personal information by contacting us at [email protected]. We will respond in line with our obligations under the New Zealand Privacy Act 2020 and, where applicable, the Australian Privacy Act 1988.

10. Security

We maintain administrative, technical, and physical safeguards designed to protect personal information against loss, misuse, and unauthorised access, appropriate to the sensitivity of the information involved. No method of storage or transmission is completely secure, and we cannot guarantee absolute security.

11. Children's information

FortyTwo Motion is not directed at children. Where a practice uploads footage of a minor, the practice is responsible for obtaining consent from a parent or guardian before recording or uploading.

12. Changes to this policy

We may update this policy from time to time to reflect changes in our practices or legal obligations. Material changes will be reflected by an updated "last updated" date above.

13. Contact us

If you have questions about this policy or how your information is handled, contact us at [email protected].