What we collect

Account email, language preference, and the match data you choose to log. Health data (heart rate, zones, calories, activity duration and smartwatch screenshots) is optional and is only collected after you give explicit, unticked-by-default consent, which you can withdraw at any time in Settings — withdrawal deletes the stored health data and screenshots.

How it is stored

In a managed Postgres database (Supabase) with row-level security. Only your authenticated account can read your matches.

Third parties

We use Supabase (hosting / database / auth), a secure AI processing gateway (insights and screenshot parsing) and Google Analytics (anonymised usage). We do not sell personal data.

Cookies & advertising

Necessary cookies keep you signed in and remember your language choice. Analytics and advertising cookies are disabled by default. Tennis Log may display advertising on editorial pages. Advertising-related storage is denied by default under Consent Mode v2 and is updated according to your consent choices. If ads are served, their personalization depends on your consent and applicable Google settings and policies. See Google's advertising policies.

AI processing

When you request AI insights, match data passes through a privacy filter before it leaves the app: an allowlist limits the fields sent, opponent and partner names are replaced with ephemeral labels such as "opponent_2", and emails, account identifiers and phone numbers are removed. Health data is shared only while your explicit consent is active.

Retention

Account and match data are kept while your account is active and are deleted or anonymised within 30 days of account deletion. A scheduled automatic purge then applies fixed windows: contact messages after 180 days, email delivery logs after 30 days, used unsubscribe tokens 30 days after use (unused tokens are kept so unsubscribe links in already delivered emails keep working) and failed queued-email payloads after 30 days. Email suppression (do-not-contact) entries are kept for as long as needed so we do not email you again after an unsubscribe or bounce; their nonessential metadata is cleared after 30 days.

Age requirement

Tennis Log accounts are for people aged 16 or over; this is confirmed on every account-creation path.

Your rights

Under GDPR you can export your data (one-click CSV), correct it, restrict processing or delete your account. Contact us via the contact page for any data request.