Proprietary evidence stays confidential.

PoolTrack is a field-testing and movement-analysis application developed by Goodfield Studio in South Australia. It is intended to help authorised testers review how robotic pool cleaners move through a pool and return structured evidence to engineering or manufacturing teams.

Depending on the features used, PoolTrack may handle video recordings, optional pool photographs and saved pools (a name, shape and outline you set), coded test and unit names, firmware or build identifiers, tester notes, analysis settings, detection boxes, routes, movement candidates, confidence information and generated reports, including schematic replay videos and PDF reports. Reports and PDF reports contain a schematic and figures only; they do not contain camera footage or your pool photo.

When you upload a recording PoolTrack also keeps its file name, size, a SHA-256 checksum used to check the upload arrived intact, and the recording time embedded in the file, if there is one. PoolTrack makes a restricted review copy of each analysed recording: a silent, reduced-resolution video (MP4 or WebM) of the analysed frames, which is not the original.

If you use the website contact form, it handles your name, reply email, selected topic, message and any optional organisation or coded test ID you provide. Testers should use internal codes rather than company names, product names or proprietary details wherever practical.

If you create a PoolTrack account, PoolTrack also handles your email address, the display name you choose, which version of the terms you accepted and when, and your sign-in identity (the identifier Cloudflare Access assigns to you). It keeps simple usage counts (the number of tests, the storage used and the analyses started each day) so that fair-use limits can be applied; the daily counts are kept as one-way hashes for a few days. You sign in with a one-time code that Cloudflare Access emails to you, so Cloudflare processes your email address to send the code and keep you signed in under its own privacy policy. Each account can see only its own tests and files.

If you use the free 7 days or subscribe to PoolTrack Pro, PoolTrack also handles your plan, when your free 7 days started and ended, and, if you subscribe, the subscription product, its renewal and expiry dates and status. Section 8 explains how subscriptions are processed.

PoolTrack keeps a security log of events such as sign-ins, refused requests and account actions. Each entry records the event type, time and internal identifiers, not your email address or test content, and is kept for 365 days. The person who operates PoolTrack can see account-level information (email, display name, status, usage and storage totals) and can suspend, purge or delete accounts to keep the service safe and fair. Because the operator also administers the servers, stored files are technically within reach; we open test material only to operate the service, to help with a problem you ask us to look at, or where the law requires.

The hosted PoolTrack service runs on a private server hosted with Microsoft Azure, delivered through Cloudflare’s network and Cloudflare Access sign-in. Uploaded recordings, pool photos, saved pools, the analysis database, trained model files and reports are stored there. Subscription purchases are processed by Apple and RevenueCat (section 8), whose servers are outside Australia, including in the United States. The development build can also run within a controlled local workspace on a computer or server of your own; the person or organisation operating that computer remains responsible for its user access, backups, retention, device encryption and physical security.

Local model analysis processes footage without sending frames to a hosted inference provider. This is the preferred mode for highly confidential or unreleased products.

Hosted processing is off unless an authorised user deliberately selects it and confirms that the material may be sent. When enabled, selected images and the minimum required project metadata may be sent to a third-party machine-learning provider. The development workflow currently supports Roboflow for optional annotation, inference and training. Full videos are not automatically uploaded to that service by PoolTrack’s local training workflow.

Third-party processing is subject to the provider’s terms, privacy practices, account settings and data location. It must be approved by the organisation that owns or controls the material. Local processing should be used when external disclosure is not authorised.

An optional photograph of the pool may be used to estimate its boundary and shape. You can save a pool, with its photo and outline, and reuse it for later tests; applying a saved pool to a test copies the outline and photo into that test, so deleting the pool does not change existing tests. Reports can present a schematic pool, coded unit and generic animated cleaner so the default view does not reveal product styling. This reduces exposure but does not anonymise the restricted original footage.

Goodfield Studio does not publish, sell, license, disclose or otherwise release a customer’s non-public footage, product design, specifications, model details, test results or reports to other companies, advertising networks, marketing channels, public datasets or public repositories.

Customer material is used only for the authorised test, support or development purpose. It is not used to train a shared or public model, demonstrate PoolTrack, develop a model for another customer, or create marketing material without the owner’s prior written authorisation.

Disclosure is limited to an authorised user’s direction, an approved service needed to perform the requested work, or a legal obligation. Goodfield Studio will use reasonable care to limit any approved disclosure to the minimum information required.

Hosted service, how long each kind of material is kept:

Original recordings: deleted 24 hours after a report is produced, or seven days (168 hours) after upload if no analysis was run. A partial upload that stops receiving data is removed after 72 hours. Restricted review copies, reports, schematics, replay videos and PDF reports: kept until you delete the test. Saved pools and their photos: kept until you delete the pool or your account. The temporary file that shows live analysis progress: removed when the analysis ends. Usage counts: a few days. Security log: 365 days. Subscription record: until you delete your account. Subscription notification log: 90 days. The one-way hash that stops the free 7 days being given twice: kept after account deletion for as long as the service runs (section 8).

Deleting a test, or the deletion control in the interface, removes the selected PoolTrack database record, its copy of uploaded footage, optional pool photo, maps, reports, replay videos, PDF reports and related analysis records. It does not remove an original file stored elsewhere, such as on your phone.

You can delete your account at any time from the dashboard (Account, then Delete my account) or from the app’s account settings. This removes your tests, recordings, saved pools, pool photos, reports and analyses, your sign-in link and the account record, and it cannot be undone. The security log described above may be kept to protect the service. Cloudflare may keep its own sign-in logs. Signing in again later with the same email address starts a new, empty account, without another free 7 days.

Backups. The server is backed up each day. Backups hold the database (which includes your account details, test records and analysis results), the report files and PDF reports, and the pool reference photos, both those attached to tests and those in saved pools. They do not hold recordings or any video (original footage, review copies or replay videos). Backups are kept for 14 days on the server, and an encrypted copy is held by the operator for 30 days. Material you delete stays in those backups until they expire, and is not restored into the live service except to recover from a failure.

Copies already exported, shared or sent to another organisation must be managed separately. Data stored with an optional third-party provider must be deleted through that provider or its account controls. When PoolTrack runs in a local workspace, test material remains until an authorised user deletes it or applies an organisation’s retention process.

Apple. PoolTrack Pro is bought through Apple In-App Purchase. Apple takes the payment under its own privacy policy; your payment details never reach PoolTrack or RevenueCat.

RevenueCat. We use RevenueCat, Inc. (United States) as a service provider to link purchases to accounts and to tell our server whether a subscription is active. RevenueCat receives your PoolTrack account's random identifier (not your email address or name), purchase and renewal records from Apple (product, dates, price paid and status), and details its software in the app sends: app version, operating-system version, device model, App Store country and language, and your IP address. RevenueCat stores this in the United States and keeps purchase records under its own retention rules, which it needs for accounting and tax purposes. It uses the data only to provide its service to us. See RevenueCat's privacy policy.

What PoolTrack keeps. Your plan, the dates of your free 7 days, the subscription product and its renewal and expiry dates and status, and a 90-day log of subscription notifications (event type and time, no payment details). The subscription record is deleted with your account. The notification log keeps only an internal identifier, and it is detached from your account when you delete it.

Once per person. To stop the free 7 days being given twice, PoolTrack keeps a one-way hash of your email address and sign-in identity, with the date, after you delete your account. It cannot be turned back into your email address. Signing up again with the same email address or sign-in identity does not start another 7 days.

Deleting your account. This does not cancel your Apple subscription (cancel it in your Apple Account settings) and does not delete the purchase records Apple and RevenueCat hold. To ask RevenueCat to delete a customer record, email hello@goodfield.studio and we will ask RevenueCat to do it.

The PoolTrack app stores recordings you make or import in its own storage on your phone, separate for each account, until you delete them or the account. Those recordings are marked so they are not included in iCloud or computer backups. The app also keeps the list of recordings waiting to upload, with their progress and the zoom and steadiness notes from filming, and while a recording uploads in the background it stores temporary slices of the file, deleted when each part is confirmed or the upload is cancelled. These are protected until the phone has been unlocked once after a restart.

Your sign-in refresh token is kept in the iOS Keychain on that phone only. It is not synced to iCloud or other devices, and it can be read after the phone has been unlocked once since it started, so uploads can continue while the screen is locked. Signing out, deleting your account or reinstalling the app removes it. The app includes RevenueCat’s software development kit to manage subscriptions (section 8). The app asks for camera access only to record silent video; it does not record audio and does not use your location, contacts or microphone.

The local pilot binds its dashboard to the host computer, rejects unrecognised hosts and cross-origin requests, uses per-process request protection and keeps credentials outside the repository. The hosted service requires every user to sign in with an emailed one-time code, uses encrypted transport, keeps each account’s tests and files separate from every other account and stores data on private servers. Organisation-run deployments should add the authentication, least-privilege access and private storage appropriate to their test programme.

These controls are intended to prevent unauthorised access and data leakage. No responsible technology provider can promise that a security incident is impossible. Goodfield Studio will investigate a reported or detected incident, contain it and notify affected organisations when required by law or an applicable agreement.

The PoolTrack product website may receive standard web-request information such as IP address, browser type, requested page and approximate traffic statistics through Cloudflare’s hosting and security services. The site does not contain advertising trackers. Accounts are created in the PoolTrack dashboard and app, not on this website.

The contact form uses Cloudflare Turnstile to distinguish legitimate submissions from automated spam and Resend to deliver the enquiry to hello@goodfield.studio. Goodfield Studio also stores a limited enquiry record containing the category, reply email, message, creation time and a one-way hash of the submitting IP address in Cloudflare D1 for reporting and recovery. The raw IP address is not stored in that enquiry record.

The PoolTrack app collects your email address and display name, the photos and videos you record or add, and the other content you create in it (test notes, labels and analysis reports). This data is linked to your account and used only to provide the app’s functionality. It is not used for tracking, advertising or analytics, and there are no advertising or analytics tools in the app. If you subscribe to PoolTrack Pro, the app also collects your purchase history (what you bought and when it renews) and your PoolTrack account identifier, which are sent to Apple and to RevenueCat (section 8). They are linked to your account, used only to provide the subscription, and not used for tracking or advertising.

You can use local analysis, choose whether to add a pool photo or save a pool, decide whether hosted machine-learning services are enabled, delete tests, pools and your account, cancel a subscription in your Apple Account settings, and control which outputs are exported or shared. An organisation may apply additional policies to managed devices and test material.

PoolTrack is under active development. We may update this policy as hosting, account features, service providers or release capabilities change. The revision date above will show when the policy was last updated.

Questions, privacy requests or concerns can be sent to hello@goodfield.studio.

Goodfield Studio
South Australia, Australia