Privacy Policy

Last updated 25 August 2026

Ojo Tennis is a service for recording, reviewing and sharing your own tennis matches. This policy explains what we hold about you, why, and what you can do about it. It covers the Ojo iPhone app and ojotennis.com, which are the same service.

Ojo Tennis is operated by Toby Keating, a sole trader based in Denmark, who is the data controller for the purposes of the EU General Data Protection Regulation (GDPR). Contact: privacy@ojotennis.com.

What we collect

Account details

Your email address, the name you give us, and your playing hand. If you sign in with Google we receive your email address and name from Google — nothing else, and never your Google password.

Match recordings

The video you record or upload, a still frame used as its thumbnail, and details you attach: the title, the date, and the names of who played. Video is the most sensitive thing here, and it is treated as private by default — see Who can see your matches below.

Things you post

Comments, likes, who you follow, and any report you file about someone else’s content.

Technical data

Ordinary server logs from our hosting provider: IP address, timestamps and which pages or API endpoints were called.

How you use the app

A record of the actions you take, so we can tell which parts of Ojo Tennis work and which do not. Concretely: that a recording finished, that an upload started, finished or failed and how big it was, that a match was shared and by which route, that a shared link was opened, that an account was created, that playback started and roughly how long it ran, and that an AI breakdown was requested and how it turned out. Each is stored with the time it happened and, when you are signed in, with your account.

Some things we deliberately do not put in that record: any part of your video or a still from it, the text of comments, who you follow, what you search for, your location, or any advertising or device identifier. We use no third-party analytics service — this is our own database, and nothing about how you use the app is sent to anyone else. We do not use advertising trackers, we do not sell data, we do not build advertising profiles, and we do not track you across other companies’ apps or websites.

You can turn this off. In the iPhone app: You → Settings → Privacy → Share usage data. On the web: your profile → Usage data. Switching it off stops the collection immediately, and the app discards anything it had not yet sent. Everything else keeps working exactly as before.

We also count page views on ojotennis.com through Vercel, our hosting provider, to see how people find the site. It sets no cookie and stores no identifier that could be traced back to you or followed between visits, and the switch above turns it off too.

Why we hold it, and on what basis

To run the service — storing and streaming your matches, signing you in, showing your library. Lawful basis: performance of our contract with you.
To produce the AI breakdown, when you ask for one on a specific match. Lawful basis: performance of our contract, on your request.
To keep the service safe — acting on reports, blocking abuse, preventing fraud. Lawful basis: our legitimate interest in a service that is not harmful to use.
To email you about your own matches and invitations you were sent. Lawful basis: performance of our contract.
To understand how the app is used and decide what to fix or build next, as described under How you use the app above. Lawful basis: our legitimate interest in improving a service people find useful. You can object to this at any time by turning the setting off — see that section for where it is.

Who can see your matches

Every match is private to you when it is created. It becomes visible to someone else only when you do one of these things:

Send a share link. Anyone holding the link can watch that match. Links are unguessable, and you can revoke one at any time, after which it stops working.
Post it to your followers. It appears in the feed of people who follow you.
Name someone as a player. They can see and manage that match as one of its participants.

We never make a match public on our own initiative, and search engines are instructed not to index match pages.

Filming other people

A tennis recording shows an identifiable person who is not you: your opponent. You are responsible for having their agreement before you record and before you share the footage. Do not record people who have asked you not to, do not record in a place where filming is prohibited, and do not record anyone under 18 who is not your own child without their parent’s agreement. If you appear in someone else’s match and want it taken down, email privacy@ojotennis.com and we will remove it.

Who processes your data for us

These are the only third parties that touch your data, and each is a processor acting on our instructions:

Supabase — accounts, sign-in, and all match metadata (EU region).
Amazon Web Services — video and thumbnail storage (S3) and delivery (CloudFront), in the eu-west-1 region (Ireland). Stored objects are private and can only be fetched through short-lived signed URLs.
Vercel — application hosting, and the anonymous page-view counting described above.
TwelveLabs — the AI rally breakdown. A match is sent to TwelveLabs only when you ask for a breakdown of it, and only for as long as the analysis takes. If you never request a breakdown, your video is never sent there.
Resend — sending transactional email.
Google — only if you choose to sign in with Google.

Some of these operate outside the UK/EEA. Where they do, transfers rely on the UK International Data Transfer Addendum and the EU Standard Contractual Clauses.

How long we keep it

Matches — until you delete them. Deleting a match removes its video and thumbnail from storage; it is not recoverable afterwards.
Account data — until you delete your account.
Analysis copies — a temporary downscaled copy is made for a long match so it fits the analysis service’s limits, and is deleted within 48 hours.
Content reports — kept after the reported content is gone, because a report has to stay actionable against the account. Retained for two years.
Usage records — twelve months, then deleted automatically. Deleting your account deletes yours straight away, without waiting for that.
Server logs — retained by our hosting provider on their standard schedule (currently around 30 days).

Deleting your account

You can delete your account and everything in it from inside the app: You → Settings → Delete account, or on the web from your profile page. This removes your matches and their video files, your comments, likes, follows, profile and the record of how you used the app. It happens immediately and cannot be undone. If you would rather we did it, email privacy@ojotennis.com.

Your rights

Under the GDPR you can ask us for a copy of your data, ask us to correct it, ask us to delete it, ask us to restrict or stop a particular use, object to any use we make on the basis of our legitimate interests, and ask for it in a portable format. The one use that rests on legitimate interests is the usage record described above, and you can stop it yourself with the setting rather than having to ask us. For anything else, email privacy@ojotennis.com and we will respond within one month. If you are not satisfied, you can complain to Datatilsynet, the Danish Data Protection Agency, at datatilsynet.dk — or to the supervisory authority in the EU country where you live.

Children

Ojo Tennis is not intended for children under 13, and you may not create an account if you are under 13. If we learn that we hold data about a child under 13 we will delete it.

Security

Traffic is encrypted in transit. Video files are stored in a private bucket that is not publicly readable, and playback goes through signed URLs that expire. Access to the underlying database is restricted per user by row-level security, so one account cannot read another’s matches. No system is perfect, and we do not claim otherwise.

Changes

If this policy changes materially we will say so in the app before the change takes effect. The date at the top always reflects the current version.