Dataset agreement and licence

WaviTrack Dataset Access Agreement

Save this document as a text file

WaviTrack Dataset Access Agreement
Version: v1.0
Effective date: 3 October 2026

Provider and licensor: Franklin Wu, project lead of the WaviTrack Team ("Provider", "I" or "me").
Contact: admin@wavitrack.com
Project website: https://wavitrack.com/

This Agreement governs applications and approved personal access. Publishing it does not open Dataset access or approve an application.

1. What you are agreeing to

This Agreement is between you, the individual applicant, and the Provider. "WaviTrack Team" describes the project team; it is not a separate contracting party. Your institution is not made a party merely because you enter its name.

The WaviTrack Dataset Research and Education Licence with the same version identifier forms part of this Agreement and must be available to read and save before you accept. It defines the Dataset, Approved Purpose, Derived Data and Research Outputs and states the full conditions for using the files.

For an approved application, the Provider supplies conditional access without a licence fee in return for your undertakings in these documents. No Dataset permission begins until the application is approved and the required account activation and acceptance steps are completed. A summary, checkbox or email cannot enlarge the permission in the full Licence.

2. Application, email verification and review

Give your genuine name, an email address you control, your current affiliation and an accurate description of the intended research or educational use. Disclose relevant commercial sponsorship, partners and intended beneficiaries. Do not submit another person's address, impersonate anyone or omit a commercial purpose.

Institutional or educational email addresses are strongly preferred, but an email domain alone neither establishes eligibility nor guarantees approval. Verify your email before the application is submitted for human review. Verification proves control of an address; it is not approval or proof of all other application details.

The Provider may request relevant clarification, approve or decline the application, and limit approval to a particular project or release. Do not send identity documents or unrelated personal information unless specifically requested through an appropriate secure process. Tell the Provider if your affiliation or purpose materially changes and obtain renewed approval before proceeding with the changed use.

3. Your principal undertakings

You agree to:
(a) use the Dataset and Derived Data only for the Approved Purpose: non-commercial academic research or education;
(b) make only the working and backup copies needed for that purpose;
(c) refrain from all commercial or industrial use, including analysis, benchmarking, model training, fine-tuning, evaluation, consulting and product or service development;
(d) refrain from commercial exploitation of models and other data-dependent artefacts developed using the Dataset, as specified in the Licence;
(e) not redistribute, mirror, publish, sell or share the Dataset, its subsets or Derived Data, including through repositories or supplementary files;
(f) not share your account, access credentials or access-granting download links;
(g) not attempt participant identification, re-identification, identity linkage or contact, and not use the data for prohibited surveillance, sensitive profiling or harmful decisions;
(h) use appropriate security measures, report incidents without undue delay and comply with applicable law; and
(i) preserve notices, cite the specified paper and follow the Licence's conditions for publishing Research Outputs.

These undertakings are subject to the Licence's express permissions and to rights that cannot lawfully be excluded. Commercial use is prohibited even when performed without payment or at an academic institution. Academic publication itself is allowed within the Licence; redistribution of participant records is not.

4. Account security and service use

Use a unique password and protect your email account and credentials. Notify the Provider promptly if you suspect compromise. You are responsible for your own authorised use and reasonable security precautions; this does not make you automatically liable for every event beyond your control.

Do not bypass verification or approval, use another person's account, interfere with the service, or attempt to obtain unauthorised files. Do not use multiple identities or requests to evade restrictions.

Access may be interrupted for maintenance, security, legal requirements or investigation of suspected misuse. The Provider does not promise uninterrupted service, permanent hosting, technical support or a particular release schedule. Suspension, termination, notices and deletion are governed by Licence section 9.

5. Publications, models and separate licences

Permitted research publications and non-identifying aggregate results may be shared with the required acknowledgement. Trained weights may be shared only under the non-commercial downstream conditions and participant-protection requirements in Licence section 6. Do not publish recoverable Dataset records disguised as model outputs, examples or another file format.

The paper's licence does not grant rights to the separately supplied Dataset. Code, hardware, separately released pretrained models and third-party body-model assets have their own applicable terms. This Agreement neither replaces those terms nor grants rights the Provider does not control.

6. Closing your account

You may contact admin@wavitrack.com to withdraw an application, close your account or request erasure of personal information. If information needed to maintain a verified, approved account is erased, access ends and the Licence's termination and deletion provisions apply to Dataset copies.

An erasure request is not misconduct. Necessary information may still be retained where lawful, for example to comply with a legal obligation or establish, exercise or defend a legal claim. The Provider will explain any applicable reason for retention. Do not assume that account closure requires withdrawal of already lawfully published findings; Licence section 9 explains the distinction.

7. Applicant and account privacy notice

This section concerns information about applicants and account holders. It is not the participant consent notice or a statement that Dataset records can never identify someone. Reading this notice does not waive your rights or constitute blanket consent to processing.

Controller and contact. For the application and account service described here, the controller is Franklin Wu, operating in the United Kingdom. Contact admin@wavitrack.com for account, privacy, permission and security requests. No university is the contracting party or controller for this service merely because it is credited on the project website.

Information handled. This includes your name, email, affiliation, stated purpose, correspondence, email-verification and review status, approval decisions, account details, securely hashed password, agreement-acceptance information and download records. Security information may include IP addresses in server logs and hashed email/IP identifiers used for rate limiting. Necessary session and security cookies support sign-in and protect forms; they are not permission for advertising tracking.

Purposes. Applicant details are used to verify and review access requests, administer approved access, communicate about the account, protect the service and participants, investigate misuse and meet applicable legal obligations. They are not used for marketing, sold, or made part of the research Dataset. "Verification only" would not accurately describe these necessary account and security operations.

Lawful bases. Processing objectively necessary to assess the application you request and administer approved access is based on steps requested by you before entering this Agreement and performance of it (UK GDPR Article 6(1)(b)). Proportionate verification, abuse prevention, service and participant protection, and defence of legal rights rely on legitimate interests where those interests are not overridden by your rights (Article 6(1)(f)). A specific applicable legal obligation may require processing under Article 6(1)(c). Equivalent EU GDPR provisions apply only where that law applies. Agreement acceptance is not relied on as blanket data-protection consent.

Who receives information. Access is limited to the Provider and authorised reviewers or administrators who need it, and infrastructure or email-delivery providers processing it for the service under appropriate arrangements. Application information may be included in reviewer notifications. Disclosure to advisers, regulators or authorities may occur where necessary and lawful. Reviewer access is not permission for unrelated reuse.

Hosting and international processing. The application database and private downloads are hosted on Alibaba Cloud in its UK (London) region. Transactional and administrative email is handled by Resend (Plus Five Five, Inc.), which stores email data in the United States even when an EU sending region is selected. Its data-processing agreement incorporates Standard Contractual Clauses and the UK International Data Transfer Addendum for relevant transfers. Alibaba Cloud's data-processing terms also address international processing and the applicable transfer safeguards. This does not mean that provider support or all subprocessors operate only in London.

Review notifications and messages to admin@wavitrack.com are delivered or forwarded to authorised reviewers' institutional mailboxes. Their email infrastructure may also involve international processing; access is restricted to service administration. Contact admin@wavitrack.com for details of the relevant recipients and transfer arrangements, or to request copies of the applicable safeguards, with unrelated confidential information redacted where necessary. Provider information is available at https://resend.com/legal/dpa and https://www.alibabacloud.com/help/en/legal/latest/fe2cxg.

Retention. The ordinary retention period for transient or closed records is 30 days:
(a) unverified or still-pending applications expire 30 days after submission; denied applications are removed 30 days after the decision;
(b) approved application details, account details and the latest accepted version/time are retained while needed to maintain an active approved account, then removed within 30 days after account closure; unused invitations and inactive accounts that have never been activated expire after 30 days;
(c) individual acceptance-event and download logs, and the website's administrative email records, are removed after 30 days; retaining the latest account acceptance does not mean retaining every historical personal event indefinitely;
(d) operational logs and website backup copies are retained for no more than 30 days, with shorter operational periods possible. Deleted information may remain in an access-restricted backup until that backup expires, for up to a further 30 days, and is not used for ordinary operations;
(e) verification-rate-limit identifiers use a rolling 24-hour window, and expired sign-in sessions are cleared regularly;
(f) forwarded administrative correspondence is removed from reviewers' working mailboxes within 30 days after its administrative purpose ends. Resend's email/log storage follows its published retention rules, ordinarily 30 days on its standard plans, with separate restricted backup and legal-retention rules. The Provider requests earlier removal where appropriate rather than claiming to control all third-party backup copies.

Copies of the legal documents without applicant information may be kept to identify releases and accepted versions. Limited personal records may be retained longer for a specific legal obligation, unresolved security incident or legal claim; any such hold must be necessary, documented, restricted and reviewed, and its reason explained where lawful. The 30-day policy does not automatically expire an actively approved user's access or waive your right to request earlier erasure.

Your rights. Depending on the applicable law and circumstances, you may request access, correction, erasure, restriction or portability of your information, and object to processing based on legitimate interests. Contact admin@wavitrack.com. Proportionate identity verification may be needed before a request is acted on. Requests will be handled within applicable legal deadlines, ordinarily one month under the UK/EU GDPR subject to lawful extensions or other applicable provisions.

You may complain to the UK Information Commissioner's Office at https://ico.org.uk/make-a-complaint/ where it is the relevant authority, or to the competent authority in your jurisdiction, including an EEA authority where applicable. You do not have to waive that right or accept the Provider's answer as final.

Providing the required identity, affiliation and purpose information is necessary to assess an application and administer personal access. Without it, an application cannot be approved or an account maintained. Access decisions are intended to be made by human reviewers; automated security controls can limit requests, but do not themselves grant approval.

8. Legal effect, updates and responsibility

Applicable copyright and database rights support the Licence where their legal requirements are met. Your express contractual undertakings are distinct from those rights. The documents do not claim ownership of all raw facts, universal database protection or that every breach is a criminal offence.

The Licence's provisions on research-material limitations, liability, mandatory rights, severability and governing law apply equally to this Agreement. This Agreement is governed by the law of England and Wales with non-exclusive jurisdiction there, without removing mandatory legal protections.

The Provider must present a versioned final Agreement and Licence before acceptance. Material changes require notice and express acceptance before governing further access under the new version; a website edit alone does not retrospectively rewrite your agreement. A privacy-notice update must accurately explain processing, not disguise an unrelated new purpose.

9. Acceptance

The registration checkbox reads: "I have read and agree to the WaviTrack Dataset Access Agreement and Dataset Licence, and I acknowledge the applicant privacy notice."

By selecting that checkbox and submitting your request, you confirm that the information you give is accurate, you understand the personal, research-only and non-commercial nature of access, and you agree to the terms presented. You acknowledge the privacy information; this is not blanket consent or a waiver of data-protection rights.

The Provider records the version and time of acceptance at application submission and account activation, keeps an archived copy of the terms, and asks for fresh acceptance before downloads under materially revised terms. Personal event records are subject to section 7's retention policy; the latest account acceptance is retained while needed to maintain approved access. Email verification and approval remain separate requirements.

Questions about these terms, permissions, privacy or misuse should be sent to admin@wavitrack.com. The automated sender noreply@wavitrack.com is not a support or privacy-request inbox.

WaviTrack Dataset Research and Education Licence

Save this document as a text file

WaviTrack Dataset Research and Education Licence
Version: v1.0
Effective date: 3 October 2026

Provider and licensor: Franklin Wu, project lead of the WaviTrack Team ("Provider").
Contact: admin@wavitrack.com
Project website: https://wavitrack.com/
Copyright (c) 2026 Franklin Wu, to the extent of the rights held by him. Other rights remain with their respective holders.

This Licence applies only to access approved by the Provider and accepted under the matching Dataset Access Agreement. Publishing these terms does not, by itself, open Dataset access.

1. Scope and definitions

"Dataset" means the WaviTrack data package supplied with this Licence, including motion-capture records, sensor measurements, aligned or processed motion data, SMPL-X parameter files, calibration data, metadata and accompanying dataset documentation, to the extent included. It includes copies and subsets of those materials. It does not mean every file available from the project website or code repositories.

"You" means the individual whose application has been approved by the Provider. Approval is personal: it does not automatically license your laboratory, employer, supervisor, students or collaborators.

"Approved Purpose" means the non-commercial academic research or educational purpose described in your application and approved by the Provider. A materially different purpose or affiliation requires renewed approval before further use.

"Derived Data" means a transformation retaining record-level Dataset content, including trimmed, resampled, calibrated, relabelled, augmented or reformatted records, extracted features and reconstructed motion sequences. Changing the format or removing fields does not remove these restrictions.

"Research Outputs" means research findings, aggregate statistics, papers, methods, independently written software and trained models resulting from permitted work. An output that contains or allows recovery of Dataset records remains Derived Data to that extent. Calling material a model, embedding, synthetic dataset or research output does not avoid that rule.

2. Limited grant of permission

Subject to approval, your express acceptance of this Licence and the matching WaviTrack Dataset Access Agreement, and continued compliance with both, the Provider grants you a royalty-free, non-exclusive, non-transferable and non-sublicensable permission, within the rights the Provider owns or is authorised to license, to:
(a) download and securely store the Dataset;
(b) make working and backup copies reasonably necessary for the Approved Purpose;
(c) analyse, process and create Derived Data for that purpose;
(d) train, validate, evaluate and compare models solely for that purpose; and
(e) publish Research Outputs as permitted by section 6.

This is a restricted research licence, not an open-data or open-source licence. No ownership is transferred. Receiving a file, having an academic affiliation, verifying an email address or obtaining a copy from another user does not by itself grant permission. An application is not approval.

3. No commercial or industrial use

You must not use the Dataset or Derived Data for any commercial or industrial purpose, whether directly or indirectly, for payment or free of charge. Prohibited activities include commercial analysis, benchmarking, model training, fine-tuning, distillation, validation, evaluation, product testing, industrial research and development, consulting, and development, improvement or operation of a commercial product or service.

The restriction includes work for or on behalf of a commercial organisation, and work directed towards commercial advantage even if performed at a university or described as research. You must disclose commercial sponsorship, commercial partners and intended commercial beneficiaries when applying; approval under this Licence cannot authorise a commercial purpose.

You also agree not to commercially exploit, deploy, sell or license a model, its weights or another data-dependent artefact developed using the Dataset, or use it to provide a commercial service. This is your contractual undertaking; it does not claim that the Provider owns all such outputs.

Ordinary academic salaries, tuition fees and public or charitable research grants do not, by themselves, make otherwise permitted academic research or education commercial. They do not excuse any prohibited purpose. This Licence grants no commercial permission; silence or failure to enforce a restriction is not permission.

4. No redistribution or shared access

Except for the limited publication permission in section 6 or a non-excludable legal right under section 12, you must not copy for others, distribute, publish, upload, mirror, sell, lend, sublicense, transfer or otherwise make the Dataset or Derived Data available to any other person.

This includes public or private repositories, data hubs, shared drives accessible to others, file-transfer links, supplementary materials, model repositories containing training examples, and inclusion in another dataset. It applies to the entire Dataset and to subsets. Do not evade it by making repeated small releases.

Each collaborator who needs Dataset access must apply separately and obtain their own copy through the authorised service. Approval of another person does not permit you to redistribute files to them. Do not share passwords, authentication tokens or download links that grant access.

Secure institutional computing or contracted cloud infrastructure may be used only for your Approved Purpose, with access restricted to your approved use and operators acting solely to supply that infrastructure under appropriate confidentiality and security obligations. This does not authorise independent use by those operators. Do not upload the Dataset to public AI services or services whose terms allow training on, onward sharing of, or independent use of your uploads.

5. Participant protection and security

You must not attempt to identify or re-identify any participant, associate Dataset records with a named or otherwise identifiable individual, or link records with external information for that purpose. Do not contact or attempt to contact a participant through information obtained or inferred from the Dataset. Participant codes do not constitute permission to identify individuals.

You must not use the Dataset to build identification or surveillance systems targeting individuals, infer sensitive personal attributes unrelated to the Approved Purpose, or make decisions about an identifiable person's employment, insurance, credit, healthcare or legal status. Do not use it for harassment, discrimination or other harm.

Keep copies on appropriately secured systems, restrict access, use secure transfer and protect credentials. Do not bypass access controls, probe other accounts, defeat download authorisation or deliberately overload the service. Necessary automated downloads through an authorised method are not prohibited merely because they are automated.

If you discover identifying information, a credible re-identification risk, a leak or unauthorised access, stop the affected processing, restrict access and notify admin@wavitrack.com without undue delay. Do not investigate by identifying further participants or circulate the identifying material. Cooperate reasonably in containment. This reporting duty does not replace any independent legal reporting obligation.

6. Research publications and trained models

You may publish papers, theses, methods, non-identifying aggregate statistics and independently written analysis code produced through the Approved Purpose. Cite the WaviTrack paper identified in section 7 and identify the dataset release used. Publication in a journal or conference operated by a commercial publisher is not, by itself, prohibited commercial use.

Do not include downloadable participant-level records, motion sequences, calibration files or record-level features in those publications or their supplements. Obtain written permission before publishing participant-level visualisations or examples not expressly supplied for public illustration. Aggregate figures must not enable identification or recovery of restricted records.

You may share trained model weights for non-commercial research or education only if they do not contain or permit reasonably practicable recovery of Dataset records or identifying information, and you distribute them under express downstream terms prohibiting commercial or industrial use and redistribution on more permissive terms. State that the model was developed using WaviTrack and that access to the underlying Dataset must be obtained separately. Do not attach a permissive licence that contradicts these obligations.

The Provider does not acquire ownership of your independently created Research Outputs merely because you used the Dataset. No prior approval of a paper's scientific conclusions is required. Restrictions on Dataset disclosure, participant protection and your commercial exploitation of data-dependent outputs still apply.

7. Attribution, notices and separate materials

In publications materially using the Dataset, acknowledge "WaviTrack dataset" and cite:
WaviTrack: Exploiting Body-Area RF Channels for Wearable Human Motion Reconstruction.
https://doi.org/10.1145/3830727.3834831

State the dataset version and describe relevant processing or modifications without implying that the Provider validated them. Preserve this Licence and any supplied attribution or third-party notices with permitted copies. Citation does not replace the requirement for permission. Do not imply endorsement by the Provider, the WaviTrack Team or any associated institution.

The paper's Creative Commons licence does not license these separately supplied Dataset files. Project code, hardware files, separately published pretrained models and third-party assets are governed by their own stated terms; this Licence does not replace them.

SMPL, SMPL-X or other third-party model files, software and assets are not licensed by this document. Obtain any required third-party permissions separately. Distribution of motion parameters does not grant rights to redistribute a third-party body-model package.

8. Compliance and incidents

You are responsible for ensuring that your use is lawful and within the Approved Purpose. If Dataset records are personal data in your circumstances, you must satisfy the data-protection obligations applicable to your own processing. Access approval is not a blanket legal basis, ethics approval or international-transfer authorisation.

On a reasonable, specific request concerning suspected non-compliance, provide information sufficient to explain your use and protective measures. This does not give the Provider unrestricted access to your systems, unrelated confidential research or personal information.

The Provider may seek remedies available under applicable law for breach of contract or infringement of rights that actually apply. This Licence creates no automatic fine, penalty or presumption that every breach is a criminal offence.

9. Suspension, termination and deletion

The Provider may suspend access immediately where reasonably necessary to investigate suspected misuse, protect participants, address a security incident or comply with law. Where lawful and practicable, the Provider will explain the reason and allow you to respond. Access may be terminated for a material breach, a false application, an unapproved change of purpose or a legal requirement. A remediable breach should ordinarily be given a reasonable opportunity to be corrected.

You may end your participation by contacting the Provider. Closing your account, including because you ask to erase identity information necessary to maintain your approval, ends further access and permission for new Dataset processing. Exercising a privacy right is not itself a breach.

On termination, stop using the Dataset and Derived Data and delete accessible copies under your control. Put residual backups beyond active use and remove them through the ordinary secure backup-expiry process. Retain a restricted copy only where required by law, or where the Provider separately agrees in writing to a justified retention requirement. Such retained data must not be used for further research or shared.

Ordinary account closure does not require withdrawal of already lawfully published Research Outputs that satisfy section 6. It does not authorise further Dataset use or commercial exploitation of data-dependent outputs. Restrictions concerning disclosure, participant protection, commercial exploitation and retained copies survive as necessary to give them effect. Accrued legal rights are unaffected.

10. Research material and liability

The Dataset is experimental research material. It may contain measurement error, omissions, alignment uncertainty, artefacts or bias and may not represent other populations or settings. No particular accuracy, completeness, availability or fitness for a particular purpose is promised. It is not supplied for clinical, safety-critical or operational decision-making.

To the extent permitted by applicable law, implied warranties are excluded, and the Provider is not liable for indirect or consequential loss arising from use of, or inability to use, the Dataset. This does not exclude or restrict liability for fraud, fraudulent misrepresentation, death or personal injury caused by negligence, or any other liability or statutory right that cannot lawfully be excluded or restricted. Any remaining liability is determined under applicable law; there is no automatic entitlement to compensation or blanket waiver of all remedies.

11. Versions and relationship to the Access Agreement

This Licence and the Dataset Access Agreement bearing the same version identifier form the agreed dataset-access terms. The Licence governs Dataset use; the Access Agreement governs the application and account process. Its privacy notice explains personal-information handling and is not a grant of Dataset rights or a waiver of privacy rights.

A later website edit does not silently or retrospectively replace the terms for an earlier release. Material new terms must be brought to your attention and expressly accepted before they govern further access under that version. A change required by law applies only to the extent the law requires. Keep the Licence supplied with each release.

12. Legal framework and mandatory rights

Applicable protections may include copyright under the Copyright, Designs and Patents Act 1988 and database rights under the Copyright and Rights in Databases Regulations 1997. In the EEA, applicable national laws implementing Directive 96/9/EC may provide protection where their qualification and territorial requirements are met. This wording does not assert automatic UK or EEA database protection for every file or raw measurement.

The restrictions you expressly accept are also contractual obligations, subject to applicable law. Nothing in these terms excludes or limits a statutory exception, lawful-user entitlement, consumer protection or other right that cannot lawfully be excluded or limited by agreement.

This Licence is governed by the law of England and Wales, with the courts of England and Wales having non-exclusive jurisdiction. This does not remove mandatory protections or court rights available to you under applicable law.

13. General provisions and contact

If a provision is unenforceable, the remaining terms continue so far as they can operate lawfully. Failure to enforce a provision on one occasion is not a waiver. An individual exception or variation must be expressly agreed in writing by the Provider; general project discussion or a supervisor's informal comment is not permission.

This Licence grants no trademark rights, endorsement, partnership or agency. It does not authorise you to bind your institution or anyone else. Do not assign your personal access permission.

For permissions, clarification, security reports or account closure, contact admin@wavitrack.com and identify the release and your approved account. Do not email participant records, passwords or access tokens unless a secure method has been agreed.