• Guest. Every phone or browser gets a random device ID and its own key the first time it opens the app, with no account. That's all a guest is. The server keeps the device ID, its public key, a hash of its access token, the device's name, a short model label such as “Chrome on macOS”, its language, when it was last seen and, if you allow notifications, its push subscription.
• Email sign-in. You enter your email and we send a 6-digit code that works for 10 minutes. The email is sent by Tencent Cloud SES. We keep your email address and a keyed hash of the code, never the code itself. A password is optional; if you set one, only a salted scrypt hash is stored. Sign-in attempts are limited per hour and per 15 minutes, and the attempt records are kept for up to 24 hours.
• Name. The name you set (up to 40 characters) is shown to the people in your channels and on Demos you publish.
• Pairing a device. Scanning another phone's QR code carries the pairing secret in the code itself. When two phones are on the same account, or pair through a channel, the server creates the secret and delivers it over HTTPS. The server keeps which devices belong to which account.

We're adding “Continue with Google” as another way to prove you own an email address. It isn't live yet. When it ships:

• Google sends us a signed token. We read your Google account ID (sub), your email address, whether Google has verified it, and the Google Workspace domain (hd) if there is one. We refuse unverified emails. Google may also put your name and profile picture in the token. We don't read or store them.
• We store the Google account ID and that email next to your account, and use them only to sign you in. A Gmail or Google Workspace address is linked to the pose.video account with the same email. Any other address must first be confirmed with an emailed code.
• You can unlink Google any time in Settings › Account. Email-code sign-in keeps working. Resetting your account keeps the link. Closing your account deletes it.
• On the web, Google's sign-in script loads only on the sign-in screens and the Settings › Account page. No other page loads anything from Google.

• Recordings (camera or screen, with sound) and videos you import. Phones upload them automatically while and after they record. By default this uses any network. A switch in Settings holds video uploads and conversions until the phone is on Wi‑Fi (an unmetered network) or charging. These files are stored in Tencent Cloud Object Storage (COS), Silicon Valley region (US).
• Everything else is stored in our database (Azure Database for PostgreSQL, West US): poster frames of recordings, voice-overs, marks and their voice notes, clip notes, Talk messages, voice messages and pictures, transcripts, translations, video documents, summaries, names and settings.
• Live preview. When a paired phone or browser opens a camera's viewfinder, the live picture (and sound, if turned on) goes directly over the nearby link or through our server. It is not recorded.
• Data travels over HTTPS. Stored files are not end-to-end encrypted, so our servers can read them in order to stream, transcribe and summarise.
• Remote control. When devices can't reach each other directly, signed recording commands and clock-sync messages between them go through Agora's real-time messaging service. These carry device, session and run IDs, not video.
• Notifications (web). If you allow notifications for Talk, the server sends them through your browser's push service (for example Google, Apple, Mozilla or Microsoft). The contents are encrypted for your browser.

• Channel members. Recordings, Talk messages, transcripts, translations and summaries in a channel are visible to that channel's members (up to 16). Members watch the original videos.
• Channel links and invite codes. Anyone who has a channel's link (pose.video/c/…) or invite code can join while there's room. Share them only with people you want in.
• Public channels. A channel set to public can be found and joined by anyone signed in with an email.
• Demos. A video you publish to Demos is visible to every pose.video user, guests included: the video with sound, its poster, title, subtitles, source link and your name. Anyone can rename it, change its link, move it to the Demos bin or restore it.
• Your phone as a camera. By default, other members of your channels can start recordings on your phone and open its live preview. Change this in Settings › “Who can use this phone as a camera”. A phone that is filming always shows a notification, and the recording screen when the app is open.
• We don't look at your content except when you ask for help or to keep the service running.

Text messages, voice messages (up to about 30 seconds), pictures and video links you send in a channel are stored on our servers. Voice messages are transcribed automatically, and members can see translations. Short text messages also get a read-aloud voice clip when they're sent. Messages, voice, transcripts and translations are kept until the channel is deleted. The sender or the channel owner can withdraw a message, which deletes it. When you send a video link, your phone or browser may fetch its title and cover picture from that site (YouTube, Bilibili, Vimeo, Xiaohongshu, Douyin, TikTok, Instagram or X).

• Recordings. Deleting a recording moves it to the Recycle Bin, where you can restore it for 7 days. The stored files are removed 7 days after you delete it, or 7 days after Delete for good if you use it. A recording you haven't deleted stays until you delete it. A recording published as a Demo stays while the Demo exists.
• Demos moved to the Demos bin can be restored for 7 days, then are removed.
• Channels. A channel is archived first, then any member can delete it. Deleting a channel removes its messages, voice, pictures, transcripts, translations and summaries, and its member list. It does not delete the recordings, voice-overs or marks made in it. Delete those separately.
• Reset account (Settings › Account) signs out all your devices and removes your password, the channels you own, your memberships, clip notes and saved comparisons. It keeps your email and name.
• Close account (confirmed with an email code) deletes the account, its email and sign-in links, password and pairings, and the channels you own. You leave the channels you joined, and your devices become guests. Closing does not delete recordings (they stay with the phone that made them), Demos, or messages you sent in other people's channels. Delete recordings first, then use Delete for good.
• On the phone, recordings stay in the app's storage. Clips you save to the gallery go to Movies/Pose Video/ and stay there until you remove them.

In the web app, the browser asks before the camera, microphone or screen is used: the camera when the Record tab opens, the microphone for recordings, voice messages and voice-overs, the face camera for voice-overs if you choose, the screen when you choose screen recording, and the camera when you scan a QR code.

No cookies, no analytics, no ads, no third-party scripts or fonts. The only exception is the Google sign-in script described above, once it ships, on those pages only. The web app keeps its data in your browser: the device key and token, your settings, channel state, Talk messages and pictures, recordings waiting to upload, thumbnails, marks, comments, voice-overs, the Demos list, and offline copies of videos you open or save. Signing out forgets which channels you're in. Recordings, downloaded copies, pending messages and settings stay until you clear site data in your browser.

The web server logs page requests: IP address, time, path and request headers. These logs rotate at 5 × 10 MiB. App API requests are not logged there. Our server components log events such as “channel deleted” or “demo published” with device and channel IDs, never message contents. These logs rotate at no more than 3 × 10 MB. When you join with a channel link, your IP address is used as a rate-limit key and deleted within about an hour. We don't join logs with anything else.