POSA – Privacy Policy

Version: 1 — Last updated: 5 November 2026

1. Who is responsible

Controller within the meaning of the EU General Data Protection Regulation (GDPR): Kinematik Studio, Germany, e-mail: [email protected]. Our full provider details (name and address) are in the imprint on our website: https://kinematik-studio.com/imprint.

2. Summary

• POSA is a local Windows application. It has no user accounts, no advertising and no tracking by us.
• We receive data from the game only when you send a problem report yourself (section 4.1). Otherwise everything you create and every file you open stays on your computer.
• The webcam is used only when you start live pose capture. Camera images are analysed on your computer and are not stored and not transmitted.

3. Data processed by the game on your computer

The following data is processed only locally on your computer. We have no access to it.

• Settings, scenes, poses, presets, renders and videos you save: for providing the game's functions. Stored: your user folder, e.g. %USERPROFILE%\AppData\LocalLow\Kinematik Studio\POSA, and the output folders you choose.
• Your confirmation of the age gate and these terms (yes/no, version, date): for remembering that you agreed. Stored: same folder.
• Images, videos and audio files you open (pose capture, lip sync): for analysing them for the function you started. Stored: read from where you store them; results cached in the user folder.
• Webcam images (only during live pose capture): for estimating body pose in real time. Stored: in memory only, discarded immediately; not saved, not sent.
• Content you import from your Daz Studio libraries (library paths, list of products, converted files): for the Import function. Stored: read from your libraries; converted files in the user folder. For some imports POSA starts your installed Daz Studio in the background on your computer; nothing is sent to us or to Daz 3D by POSA.
• Log files and crash reports: for finding errors. Stored: Player.log and crash dumps in the user folder; never sent automatically. A log (of the current or the previous session) is sent only if you include it in a problem report (section 4.1); crash dumps are never sent.

Pose estimation and speech analysis use open-source components (Google MediaPipe, whisper.cpp) that run entirely on your computer without an internet connection.

4. Data we receive from you

4.1 Problem reports

In Settings › Help › Report a problem (also in the command palette, and offered when POSA starts after it closed unexpectedly) you can send us a report about an error. Nothing is sent automatically: the game shows you what will be sent, and each report is sent only when you click "Send report".

• What is sent: your description and steps; system details (POSA version and build, Desktop or VR mode, Windows version, processor, graphics card and graphics API, memory, screen resolution, language setting, Unity version, quality level, display mode and refresh rate, headset (if any), where in POSA you were (for example "Studio, Pose"), memory used by POSA, free disk space and the kind of problem you chose); the game log (Player.log: its start and its last 2 MB, with a list of the steps you took - buttons, screens, dialogs and the names of projects and objects, never what you type - and of the errors of the session; included by default, you can untick it); the log of the previous session (Player-prev.log), offered when there is one and ticked when POSA closed unexpectedly last time, you can untick it (both logs together at most 2.5 MB); only if you choose or tick it: a picture (of the POSA window, or a view you frame yourself in the game's photo mode, or in VR what your headset shows; this picture is also kept with your screenshots) and a scene file (the current scene or, in a report after POSA closed unexpectedly, the recovery copy of your unsaved work from before it closed; with the scene goes a list of the assets it uses, i.e. names and ids of presets, clothing, poses and the like). Before sending, the game replaces your Windows user name, computer name, home folder paths, network addresses and any e-mail addresses in the logs and scene file, as well as any passwords, access tokens or keys that other programs wrote into the log, with placeholders. Reports never contain webcam images, crash dumps or your e-mail address.
• Purpose and legal basis: finding and fixing errors in POSA. Art. 6(1)(f) GDPR (legitimate interest in a working product) and, for members, Art. 6(1)(b) GDPR. Because you start the sending yourself, reading these files on your computer is permitted under § 25(2) no. 2 TDDDG.
• Recipients: The report is sent over an encrypted connection to our server at kinematik-studio.com, operated by Cloudflare, Inc. as our processor. Cloudflare processes your IP address to deliver the request and to limit abuse, possibly also in the USA (Cloudflare is certified under the EU-US Data Privacy Framework); we do not store it. Attachments (logs, picture, scene) are stored with Cloudflare in the EU. Your description, the system details and the report number are also stored as a private ticket in our issue tracker at GitLab (GitLab Inc., USA, as our processor; the transfer to the USA is based on the EU standard contractual clauses in its data processing agreement). Attachments are not stored at GitLab. We are notified of new tickets by e-mail; our e-mail is hosted by Google Workspace (Google Cloud EMEA Ltd., Ireland, as our processor).
• Storage: Attachments are deleted automatically after 90 days. Tickets are kept while we work on the problem; afterwards we delete them or remove any personal data from them.
• The IDs of reports you sent are kept on your computer (Settings › Help) so you can find fixes in the release notes.
• We do not reply to individual reports; fixes are listed in the release notes. Please do not write personal information into the description. A picture or scene shows your content; only include it if you are comfortable sharing it.
• To have a report deleted earlier or to object to its processing, e-mail [email protected] with the report number shown after sending (e.g. A-1234).

4.2 Support

If you contact us by e-mail or through the contact form on our website, we process your message, contact details and any files you send (such as log files) to answer your request. Details on the website and the form: https://kinematik-studio.com/privacy. Legal basis: Art. 6(1)(b) GDPR (contract) and Art. 6(1)(f) GDPR (legitimate interest in handling support requests). We delete this data when it is no longer needed, unless statutory retention periods apply.

Please only send log files or scenes you are comfortable sharing; logs may contain file paths that include your Windows user name.

4.3 Patreon membership

Access to POSA is provided through Patreon (Patreon, Inc., USA). Patreon processes your account and payment data as an independent controller under its own privacy policy: https://www.patreon.com/policy/privacy. As the creator we receive from Patreon the information Patreon shares with creators (in particular your Patreon name, e-mail address, membership tier and payment status). We use it to provide your membership benefits and to meet tax and accounting obligations. Legal basis: Art. 6(1)(b) and (c) GDPR.

5. Third parties involved when you use certain features

• Game engine. POSA is built with the Unity engine. Unity's diagnostics data collection is switched off in POSA; the Unity runtime does not send usage or diagnostics data.
• VR. If you use VR, your VR runtime (e.g. SteamVR, Meta Quest Link, Windows Mixed Reality) processes data under its own privacy policy. POSA does not send VR data to us.
• Links. Links in the game (e.g. to our Patreon page) open your web browser. The privacy policy of the respective website applies there.

6. Your rights

You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). To exercise them, contact us at [email protected].

Apart from problem reports, the game does not send data to us, so you can delete all game data yourself by uninstalling POSA and deleting the user folder named in section 3. For problem reports, see section 4.1.

You also have the right to lodge a complaint with a data protection supervisory authority, for example the authority of your place of residence or the one responsible for us: the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg (LfDI BW), https://www.baden-wuerttemberg.datenschutz.de.

7. Children

POSA is intended exclusively for adults (18+). We do not knowingly process data of minors.

8. Changes

We update this policy when POSA's features change. The current version is always in the game under "Legal & Credits".