Privacy Policy

Introduction

CalmCourt (“we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and share information when you use our mobile application and web platform (“App”).

Information We Collect

Account Information

• Email address (for authentication)
• Display name (optional)
• Tennis level and playing style preferences

Session Data

• Pre-match and post-match coaching session content
• Chat messages with your AI coach
• Confidence and satisfaction ratings
• Focus points and mental goals

Game Information

• Tennis goals you set
• Doubles partners information
• Opponent scouting notes
• Match schedules and outcomes

How We Use Your Information

• Provide personalized AI mental coaching
• Track your progress and patterns over time
• Improve our coaching algorithms
• Send match reminders and notifications
• Provide customer support

Third-Party Services

We use the following third-party services to provide our App:

Supabase

Authentication and secure data storage. Your data is stored on Supabase's servers with encryption at rest and in transit.

OpenAI

AI-powered coaching conversations. Your chat messages are processed by OpenAI's API to generate personalized coaching responses. OpenAI may use this data to improve their models unless you opt out through their privacy settings. We explicitly disclose this in our consent flow before you use the app.

Expo

Push notifications for match reminders. We send your device token to Expo's notification service.

Sentry

Crash reporting and error tracking to improve app stability. Sentry receives anonymized error reports and device information but no personal data or coaching content.

Your Rights

• Access: View all data we have about you in the app
• Deletion: Delete your account and all associated data from Settings
• Export: Request a copy of your data by contacting support
• Correction: Update your information through the app

Legal Basis for Processing (GDPR Article 6)

• Consent (Art. 6(1)(a)): You provide explicit consent when creating your account and accepting this Privacy Policy. You may withdraw consent at any time by deleting your account.
• Performance of a Contract (Art. 6(1)(b)): Processing necessary to provide the AI coaching service you signed up for.
• Legitimate Interest (Art. 6(1)(f)): Improving our coaching algorithms, ensuring service security, and preventing abuse.

Your Rights Under GDPR (EEA/UK Residents)

• Right of Access (Art. 15): Request a copy of all personal data we hold about you.
• Right to Rectification (Art. 16): Request correction of inaccurate or incomplete personal data.
• Right to Erasure (Art. 17): Request deletion of your personal data via Settings > Delete Account.
• Right to Restriction of Processing (Art. 18): Request that we limit how we use your data.
• Right to Data Portability (Art. 20): Request your data in a structured, machine-readable format.
• Right to Object (Art. 21): Object to processing based on our legitimate interests.
• Right to Withdraw Consent (Art. 7): Withdraw your consent at any time without affecting the lawfulness of prior processing.
• Right to Lodge a Complaint: File a complaint with your local data protection supervisory authority.

To exercise any of these rights, contact us at support@calmcourt.app. We will respond within 30 days.

Your Rights Under CCPA (California Residents)

• Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected about you.
• Right to Delete: Request deletion of your personal information via Settings > Delete Account or by contacting us.
• Right to Opt-Out of Sale: We do not sell your personal information to third parties.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.

International Data Transfers

Your data may be processed in the United States by our service providers (Supabase, OpenAI, Expo, Sentry). Where required, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission to ensure adequate protection for international transfers of personal data.

Data Retention

• Account data: Retained while your account is active.
• Coaching session data: Retained while your account is active for progress tracking.
• Match and opponent data: Retained while your account is active.
• Voice recordings: Processed in real-time for transcription and immediately discarded. We do not store audio recordings.
• Crash reports (Sentry): Retained for 90 days.
• Push notification tokens: Retained while your account is active.

When you delete your account, all your personal data is permanently deleted within 30 days. Anonymized, aggregated data used for service improvement may be retained indefinitely.

Security

We implement industry-standard security measures including encryption in transit (TLS), encryption at rest, and secure authentication protocols to protect your data.

Contact Us

For privacy-related questions or to exercise your data rights, contact us at support@calmcourt.app.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy in the app and updating the “Effective Date” above.