Privacy Policy

Last updated 18 August 2026

Ojo Tennis is a service for recording, reviewing and sharing your own tennis matches. This policy explains what we hold about you, why, and what you can do about it. It covers the Ojo iPhone app and ojotennis.com, which are the same service.

Ojo Tennis is operated by Toby Keating, a sole trader based in the United Kingdom, who is the data controller for the purposes of UK GDPR. Contact: privacy@ojotennis.com.

What we collect

Account details

Your email address, the name you give us, and your playing hand. If you sign in with Google we receive your email address and name from Google — nothing else, and never your Google password.

Match recordings

The video you record or upload, a still frame used as its thumbnail, and details you attach: the title, the date, and the names of who played. Video is the most sensitive thing here, and it is treated as private by default — see Who can see your matches below.

Things you post

Comments, likes, who you follow, and any report you file about someone else’s content.

Technical data

Ordinary server logs from our hosting provider: IP address, timestamps and which pages or API endpoints were called. We do not use advertising trackers, we do not sell data, and we do not build advertising profiles.

Why we hold it, and on what basis

To run the service — storing and streaming your matches, signing you in, showing your library. Lawful basis: performance of our contract with you.
To produce the AI breakdown, when you ask for one on a specific match. Lawful basis: performance of our contract, on your request.
To keep the service safe — acting on reports, blocking abuse, preventing fraud. Lawful basis: our legitimate interest in a service that is not harmful to use.
To email you about your own matches and invitations you were sent. Lawful basis: performance of our contract.

Who can see your matches

Every match is private to you when it is created. It becomes visible to someone else only when you do one of these things:

Send a share link. Anyone holding the link can watch that match. Links are unguessable, and you can revoke one at any time, after which it stops working.
Post it to your followers. It appears in the feed of people who follow you.
Name someone as a player. They can see and manage that match as one of its participants.

We never make a match public on our own initiative, and search engines are instructed not to index match pages.

Filming other people

A tennis recording shows an identifiable person who is not you: your opponent. You are responsible for having their agreement before you record and before you share the footage. Do not record people who have asked you not to, do not record in a place where filming is prohibited, and do not record anyone under 18 who is not your own child without their parent’s agreement. If you appear in someone else’s match and want it taken down, email privacy@ojotennis.com and we will remove it.

Who processes your data for us

These are the only third parties that touch your data, and each is a processor acting on our instructions:

Supabase — accounts, sign-in, and all match metadata (EU region).
Amazon Web Services — video and thumbnail storage (S3) and delivery (CloudFront), in the eu-west-1 region (Ireland). Stored objects are private and can only be fetched through short-lived signed URLs.
Vercel — application hosting.
TwelveLabs — the AI rally breakdown. A match is sent to TwelveLabs only when you ask for a breakdown of it, and only for as long as the analysis takes. If you never request a breakdown, your video is never sent there.
Resend — sending transactional email.
Google — only if you choose to sign in with Google.

Some of these operate outside the UK/EEA. Where they do, transfers rely on the UK International Data Transfer Addendum and the EU Standard Contractual Clauses.

How long we keep it

Matches — until you delete them. Deleting a match removes its video and thumbnail from storage; it is not recoverable afterwards.
Account data — until you delete your account.
Analysis copies — a temporary downscaled copy is made for a long match so it fits the analysis service’s limits, and is deleted within 48 hours.
Content reports — kept after the reported content is gone, because a report has to stay actionable against the account. Retained for two years.
Server logs — retained by our hosting provider on their standard schedule (currently around 30 days).

Deleting your account

You can delete your account and everything in it from inside the app: You → Settings → Delete account, or on the web from your profile page. This removes your matches and their video files, your comments, likes, follows and profile. It happens immediately and cannot be undone. If you would rather we did it, email privacy@ojotennis.com.

Your rights

Under UK GDPR you can ask us for a copy of your data, ask us to correct it, ask us to delete it, ask us to restrict or stop a particular use, and ask for it in a portable format. Email privacy@ojotennis.com and we will respond within one month. If you are not satisfied, you can complain to the Information Commissioner’s Office at ico.org.uk.

Children

Ojo Tennis is not intended for children under 13, and you may not create an account if you are under 13. If we learn that we hold data about a child under 13 we will delete it.

Security

Traffic is encrypted in transit. Video files are stored in a private bucket that is not publicly readable, and playback goes through signed URLs that expire. Access to the underlying database is restricted per user by row-level security, so one account cannot read another’s matches. No system is perfect, and we do not claim otherwise.

Changes

If this policy changes materially we will say so in the app before the change takes effect. The date at the top always reflects the current version.