Pontaro Privacy Policy

Last updated: November 2, 2026

This Privacy Policy explains how SkillSwap LLC (Pontaro, we, us, or our) collects, uses, shares, and protects information when you use Pontaro. It also explains the choices available to you.

1. Information we collect

Account information

When you create an account, we collect your email address, username, display name, password, date of birth, and self-declared region. Passwords are stored as salted cryptographic hashes rather than readable text. We also store account status, email-verification status, privacy settings, and notification preferences.

Challenge and social activity

We process challenge agreements and revisions, invitations, acceptances, negotiation messages, results, confirmations, disputes, appeals, Credit and Point ledger entries, achievements, friendships, blocks, Circle memberships, Circle activity, reactions, comments, reports, and moderation actions.

Evidence and recordings

When a challenge requires evidence, we may collect videos, photos, live-session recordings, capture times, file hashes, file size and type, analysis results, and retention dates. Recordings may include your image, voice, surroundings, and other people who appear in frame.

AI and computer-vision information

AI Witness may process pose landmarks, joint angles, repetition timing, quality flags, structured referee reports, and related verification records. Pontaro's current computer-vision pipeline measures movement; it is not designed to identify a person or match faces across recordings.

We also record operational information about AI requests, including task type, provider and model identifiers, prompt version, token counts, latency, validation outcome, and a cryptographic hash of the input. This helps us test reliability, investigate failures, and control costs.

Device, security, and usage information

We collect session identifiers in hashed form, session expiry, a limited user-agent fingerprint, account activity dates, rate-limit events, authentication failures, upload-security events, and audit records. IP addresses may be used transiently for security and rate limiting; security records use salted, shortened hashes where source correlation is needed.

Optional information

You may choose to provide interest tags for challenge suggestions or a referral source through a tagged signup link. You can change optional-interest consent in your profile.

2. How we use information

We use information to:

• create and secure accounts;
• apply age-appropriate privacy and safety protections;
• create, operate, verify, and settle challenges;
• operate Credits, Points, leaderboards, Circles, and social features;
• analyze evidence and explain verification results;
• resolve disputes, appeals, support requests, and safety reports;
• detect fraud, abuse, collusion, manipulated evidence, and service attacks;
• maintain audit trails and reconcile platform ledgers;
• measure product reliability, engagement, and retention using limited analytics; and
• comply with law and protect users, Pontaro, and others.

We do not sell personal information, use it for cross-context behavioral advertising, or show third-party ads. We do not use teen information for advertising or advertising profiles.

3. AI providers and automated processing

AI Witness uses local, deterministic computer vision for movement measurements. Videos are not sent to a language-model provider. If an approved language-model provider is configured, Pontaro may send limited text and structured facts needed to draft challenge terms, explain a verification result, assist with moderation, or summarize a dispute.

Provider selection is controlled on the server. Sensitive requests are limited to providers that meet the configured privacy requirements, and text is minimized or redacted where appropriate. Pontaro validates structured AI outputs and uses human review for consequential disputes. AI output does not silently override an agreed result.

4. How we share information

We may share information with:

• Other participants: Challenge participants can see the agreement, relevant messages, evidence, and result for their challenge.
• Circle members: Members can see content and activity shared within their Circle. Challenge evidence remains limited to authorized participants unless a result is deliberately shared.
• Authorized Pontaro personnel: Trained staff may access information needed for support, safety, moderation, dispute review, security, and legal compliance. Privileged access to sensitive areas is logged.
• Service providers: Hosting, database, storage, email, security, and approved AI providers may process information for us under appropriate contractual and security controls.
• Legal and safety recipients: We may disclose information when required by law, to respond to valid legal process, to report child-safety matters, or to protect someone from serious harm.
• Business transactions: Information may be transferred as part of a merger, financing, acquisition, reorganization, or sale, subject to this Policy and applicable law.

5. Evidence, pose data, and sensitive information

Video necessarily contains visual information about a person. The current movement-analysis pipeline identifies body landmarks and calculates angles and timing. It does not create a facial-recognition template, identify who is shown, or match faces across videos.

Laws in some locations may treat video, body measurements, health-related inferences, or similar information as sensitive or biometric information. We use this information only to provide the verification feature, secure the service, resolve disputes, and meet legal obligations. We will request additional consent before introducing processing that requires it.

6. Children and teens

Pontaro is for people age 13 and older. We do not knowingly create accounts for children under 13. If we learn that an account belongs to a child under 13, we will restrict the account and delete information as required by law.

Accounts for people ages 13–17 receive protective defaults, including a private profile, exclusion from global leaderboards, limits on result sharing, separation from adult discovery and contact features, and no access to purchases. A parent or guardian can use Pontaro's support or privacy-request channel to ask about, correct, or request deletion of a teen's information, subject to applicable law and identity verification.

7. Retention

We keep information only as long as reasonably necessary for the purposes described in this Policy, including safety, disputes, fraud prevention, legal obligations, and account administration.

Evidence scheduled for deletion is removed unless a dispute, safety matter, or legal hold requires continued retention. Production backup retention depends on the hosting configuration and will not be represented as active until a verified backup process is established.

8. Security

Pontaro uses safeguards designed to protect information, including hashed passwords and session tokens, HTTP-only session cookies, server-side authorization, evidence access checks, encryption for protected evidence, file-integrity hashes, rate limits, input validation, append-only audit records, and access logging.

No service can guarantee perfect security. If you believe your account or information has been compromised, use the support channel in Pontaro promptly.

9. Your choices and rights

Depending on where you live, you may have the right to access, correct, delete, or receive a copy of personal information; object to or restrict certain processing; withdraw consent; or appeal a privacy decision.

Pontaro provides controls for profile privacy, leaderboard visibility, optional interests, result sharing, blocking, reporting, and account deletion. Some records may be retained after deletion when required for disputes, safety, fraud prevention, ledger integrity, or law. We will not discriminate against you for exercising a privacy right.

To make a privacy request, use the privacy-request or account controls available in Pontaro. We may need to verify your identity before completing a request.

10. Cookies

Pontaro uses a strictly necessary session cookie named pontaro_session to keep you signed in and protect your account. We do not use advertising cookies or third-party cross-site tracking cookies.

11. International access

Pontaro is currently intended for users in supported locations. If information is processed outside your state or country, we use safeguards required by applicable law. Hosting regions and production service providers will be identified here when finalized.

12. Changes to this Policy

We may update this Policy as Pontaro evolves. We will post the updated version and give additional notice when a change materially affects how we handle personal information. We will seek consent where required, particularly for new uses of sensitive information or changes affecting teens.

13. Contact

For privacy questions or requests, use the privacy-request and support channels provided within Pontaro. A dedicated privacy email and mailing address will be added here when those operational channels are established.