Your data belongs to you.

The party responsible for data processing is Janos Wartig, Rellinger Straße 70, 20257 Hamburg, Germany. For privacy questions you can reach us at support@smashfield.app.

The game analysis runs on your device: the app evaluates recorded and imported videos right there. No upload is required for the analysis.

In our cloud we store what your account and the features you use require: your email address, optionally your name and language, your player list including optional photos, your monthly recording quota, your subscription status and messages you send us via “Give feedback”. If you count the points of a match or enter a final score, we store that score too. If you share a match, its analysis is added. If you back it up to the cloud, so are the rally videos with their audio, preview images and an analysis backup with the players' names, small image crops of the players and the optional location. Everything is stored on servers in the EU.

If you share a match with your opponent, the shared page is deliberately reachable without an account. You decide whether and for how long. Anyone who saves the match into their app via the link keeps their copy, though.

Payments are handled entirely by Apple. We never see your payment details.

All AI models in Smash Field are built into the app and run directly on your device. That is where the app detects rallies, the ball, players, the court and shots. No videos, images or other data leave your device for this.

We do not use any third-party AI services. We do not send videos, images, names or any other personal data to an AI provider. This also applies when you back up or share a match in the cloud.

The models are stored encrypted inside the app. After you sign in, iOS downloads a key for them from Apple once. No videos, images or other content of yours are transferred in the process. After that, the analysis also works without internet.

We process personal data to perform the user contract and to provide the app and its features under Art. 6 (1) (b) GDPR, to ensure secure and stable operation on the basis of our legitimate interest under Art. 6 (1) (f) GDPR, and, where you have consented, on the basis of your consent under Art. 6 (1) (a) GDPR. Where legal obligations exist, we process data under Art. 6 (1) (c) GDPR.

Our website and our app server api.smashfield.app run on Cloudflare. When you open the website and whenever the app sends a request, Cloudflare automatically processes technical access data such as your IP address, the date and time and the browser or app version. This data serves only the secure and stable operation, for example to find errors and fend off abuse (Art. 6 (1) (f) GDPR). The logs are deleted automatically after a few days.

The website sets no cookies. Your language follows from the address you visit. We do not use tracking, analytics or advertising cookies, and we do not run any website analytics. That is why there is no cookie banner to dismiss on our site.

Only when you sign in on the website does your browser store your session in this website's local storage, so you stay signed in. While you sign in with Apple or Google it briefly keeps a random value that secures the sign-in. When you are signed in, the browser also remembers which displays in the video you collapsed. All of this is technically necessary for features you explicitly use (Section 25 (2) no. 2 TDDDG) and stays in your browser. Signing out deletes the session.

To use the app you sign in with Apple, Google or your email address. We process the data required for sign-in, meaning your email address and optionally your name, to create your account, sign you in and keep your account secure (Art. 6 (1) (b) GDPR). With “Sign in with Apple” you can hide your real email address and use a relay address generated by Apple.

If you sign in by email, we send you a one-time sign-in code. We do not store a password. Account management is handled by our processor Supabase on servers in the EU (Frankfurt region); your session is stored securely on your device, so the app keeps working offline afterwards.

You can use the same account to sign in on the website and watch your matches from the cloud. If you choose Apple or Google there, we forward you to the sign-in page of Apple or Google. Whatever you enter there is processed by that provider under its own responsibility. Afterwards we only receive the confirmation of your sign-in with your email address and, if you share it, your name (Art. 6 (1) (b) GDPR).

The rally detection and analyses are computed by the app locally on your device. For the analysis itself, your videos are not transmitted to our servers.

If you tap “Back up to the cloud” (Pro) on a match, we upload that one match to our servers (Art. 6 (1) (b) GDPR). This includes the rally videos with their audio, one preview image per rally, the data for the ball trail and ball marks, the analysis and an analysis backup. The analysis backup contains the AI results, meaning the positions of the ball, players and court and the detected shots. It also holds your corrections, the score, the first and last names and playing hand of the players, the optional location with coordinates, and small image crops of the players with features calculated from them, such as clothing colour. The app uses these to tell the players apart within that match. No facial recognition takes place.

The analysis backup only serves to give you your complete match back after a reinstall or on another device. Everything is kept in private storage under EU jurisdiction and can only be reached through your account. Matches you share yourself are the exception: their videos, preview images, ball trail and analysis can then be opened by anyone who has the link. The link never gives out the analysis backup. The next section explains how that works. You can delete your videos at any time.

Whether you export or share finished clips is entirely up to you. Please respect the rights of others when filming: you are responsible for recordings in which practice partners or third parties are recognizable and, where necessary, for obtaining their consent.

The app only asks for permissions that a feature needs. It uses the camera and microphone to record your match with picture and sound. The recordings stay on your device until you back up a match to the cloud yourself.

You choose videos and player photos through the iOS photo picker. The app only sees what you select. It only saves to your photo library when you export a clip.

With the Apple Watch you control the recording and count points. Watch and device exchange commands, the preview image, the watch's battery level and the counted points directly with each other, without going through our servers.

While you count on the watch, it runs a tennis workout. For this the watch asks for access to Apple Health: it saves the workout there and uses heart rate and active energy for the running workout. We don't send this health data to our servers and don't use it for advertising.

When you share a match, we store it under a random identifier and make it available at its own address (Art. 6 (1) (b) GDPR). This happens as soon as you choose the link while sharing, even if you have not sent it yet. This covers the analysis of the match, meaning numbers such as rallies, shots and serve speed plus the ball marks, the players' first and last names with their profile photos from your player list, the date and a counted score. So that names and photos are also right in the shared match, we store which players from your player list took part and show their current name and profile photo when the match is opened. If you have backed up the match to the cloud, the link also shows the rally videos with their audio, the preview images and the ball trail. The analysis backup with the player image crops and the location stays private.

If you added a location to the match, we store it together with its coordinates so you can restore the match completely. The location is not visible through the link. Only you can retrieve it with your account.

That page is deliberately reachable without signing in, so your opponent can open it without the app and without an account. Anyone who knows the link sees the content. The address contains a random identifier, cannot be guessed and is not picked up by search engines.

Because your opponent is shown in it with their name and profile photo, you are responsible for the content of a shared match. Let them know before you share, and only pass the link on to people who are okay with it.

As long as the link is active, anyone who has it and uses Smash Field can save the match with everything the link shows into their own app and keep it. For this we note the identifier of their account on your match. The saved copy then belongs to that account and can be backed up and shared from there. If you withdraw your sharing or remove your match from the cloud, that copy remains.

You can withdraw the sharing at any time in the app. The link then shows nothing and nobody can newly save the match into their app. Whatever you backed up to the cloud stays stored privately. If you tap “Remove from the cloud”, we delete the videos, preview images, analysis backup and analysis from our servers, and the link only shows a note that the match is no longer available. If someone is still downloading the match into their app at that moment, we delete the files as soon as that download has finished. Otherwise a shared match stays stored until you remove it from the cloud or delete your account. What happens to the videos after Pro ends is explained under “Retention”.

You can optionally add a location to each match, for example your club. You type it in yourself or pick it from suggestions. Searching for places runs through Apple's map service (Apple Maps), so your search terms are sent to Apple.

If you tap “Use current location”, the app asks for your permission and determines your position once, accurate to about 100 metres. It uses this to look up nearby tennis facilities via Apple Maps. Your position is not tracked continuously and is not requested in the background. You can withdraw the permission at any time in the iOS settings.

The app stores the chosen location with its name and coordinates alongside the match on your device. If you pick a city from the suggestions, these are the coordinates of your position. If you back up or share the match, we transfer the location together with the analysis to our servers (Art. 6 (1) (b) GDPR). You can change or remove the location at any time. It is permanently deleted together with the match or your account.

If you count the points of a match in the app or enter a final score, we store that score with your account so it is back on your other devices and after a reinstall (Art. 6 (1) (b) GDPR). This includes the scoring format, who won the point in each rally, the final score and the identifiers of the two assigned players from your player list. This applies to all users, also without Pro and without a cloud backup. It contains no videos or images.

If you share a match via link, the link also shows the current score, meaning the scoring format, points and final score, but not the player identifiers. If you correct a point afterwards, the link shows it right away.

If you delete a match in the app, we remove its score from our servers. Only an anonymous identifier remains so the deletion also reaches your other devices. When you delete your account, we delete everything permanently.

We do not use recordings from the app to train our AI. The app sends nothing to us for this. Matches you back up to the cloud or share via link are not used for it either.

So that your player list is available on all your devices, we sync the player profiles you create, meaning first and last name, playing hand and optionally a photo, with our servers (Art. 6 (1) (b) GDPR). If you create profiles for other people, please make sure they are okay with it.

Player photos are stored in private storage at Cloudflare R2 under EU jurisdiction. The storage is not publicly accessible. Access happens exclusively through short-lived signed URLs. We issue these for your account and, when you share a match, for the match page so the players' profile photos appear there.

If you delete a player profile, we remove the name and photo immediately and permanently. Only an anonymous identifier remains so the deletion also reaches your other devices.

On the free plan, monthly recording time is limited. So that this quota stays correct after a reinstall or on a second device, we store the recording seconds used per calendar month with your account (Art. 6 (1) (b) and (f) GDPR). No conclusions about the content of your recordings can be drawn from this.

Via “Give feedback” in the settings you can send us a message. We store your message and its category, the email address of your account so we can reply, as well as the app version, iOS version, device model, language and your plan. The technical details help us understand reported problems. The message is linked to your account (Art. 6 (1) (b) and (f) GDPR).

New messages trigger an email to our support mailbox at Google Workspace, delivered through Resend. It contains your message, the email address of your account, your account identifier and the technical details. In our database we keep your feedback for as long as we need it to handle it and improve the app, and delete it at the latest together with your account. We delete the notification in the mailbox as soon as we no longer need it, or immediately on request.

Purchases and subscriptions are processed exclusively through the Apple App Store. Apple processes your payment details (such as credit card or bank account) on its own responsibility; we never receive them.

To provide your subscription we store its status, meaning plan, billing period, expiry date and a transaction identifier assigned by Apple (Art. 6 (1) (b) GDPR). Apple notifies us about changes such as renewals, cancellations or refunds so your access is always unlocked correctly.

We only send you transactional emails, such as your sign-in code or important information about your account. We use the provider Resend for delivery. You will only receive marketing emails from us if you have explicitly consented, and you can withdraw that consent at any time.

To provide our services we use carefully selected providers that process your data only on our behalf: Supabase (account management and database, hosted in the EU/Frankfurt), Cloudflare (hosting of our website and our app server api.smashfield.app, plus the private R2 storage for photos and recordings under EU jurisdiction), Resend (email delivery) and Google Workspace (our mailbox for support and feedback). We have concluded data processing agreements under Art. 28 GDPR with these providers. In them, they commit to processing your data only on our instructions and to protecting it at least as well as we do.

Apple and Google act on their own responsibility when you sign in with Apple or Google, buy in the App Store or search for places via Apple Maps. Their own privacy policies apply to this. They are also bound by the GDPR and must protect your data to an equivalent standard.

Beyond that, we do not pass your data on to anyone, unless you share a match link yourself. We do not sell it, do not use it for advertising and do not send it to any AI provider.

We store our core data in the EU: the database and account management are hosted by Supabase in Frankfurt, photos and recordings by Cloudflare R2 under EU jurisdiction. However, some of our providers, such as Apple, Google, Cloudflare, Supabase and Resend, are companies based in the United States, so in individual cases data may also be processed outside the EU. Such a transfer only takes place where an adequate level of data protection is ensured, for example through certification under the EU-US Data Privacy Framework or through the conclusion of the EU Standard Contractual Clauses.

We store your account data for as long as your account exists. We remove the score of a match as soon as you delete the match in the app. Matches you back up or share in the cloud remain stored until you remove them from the cloud or delete your account. If your Pro subscription ends, your videos stay in the cloud for another 30 days. After that we automatically delete the videos, the preview images, the data for ball trail and ball marks and the analysis backup. We notify you by email beforehand. The analysis of your matches and your match links remain.

If you delete your account, we permanently remove all associated data from our servers: profile, player list including photos, scores, backed-up and shared matches including videos, analysis backup and location, recording quota, subscription status and your feedback. Recovery is not possible afterwards. The only thing that remains is a log of subscription events such as purchase, renewal or cancellation. It contains your account identifier and Apple's transaction identifier, but neither your name nor your email address. We need it to resolve billing questions and delete every entry automatically after 90 days (Art. 6 (1) (f) GDPR). If Apple reports further changes to your subscription afterwards, we note them there too. Copies of your matches that others saved into their app via your link belong to their accounts and remain.

Technical access data is deleted after a few days. Where statutory retention obligations exist, individual data remains stored for their duration.

All connections between the app, the website and our servers are encrypted according to the state of the art. Access to your data is only possible with your personal sign-in session and is strictly limited to your account. Only a match you share yourself can be opened without signing in. Its videos and profile photos are delivered through short-lived signed URLs. Player photos live in private, non-public storage, and our interfaces are protected against abusive access.

You have the right at any time to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). You may object at any time to processing based on our legitimate interest (Art. 21 GDPR). You may withdraw any consent you have given at any time with effect for the future (Art. 7 (3) GDPR).

You also have the right to lodge a complaint with a data protection supervisory authority, for example the authority at your place of residence. For anything concerning your data, reach us at support@smashfield.app.

We do not make automated decisions that have legal effects on you (Art. 22 GDPR). The AI in Smash Field cuts and analyzes your tennis videos solely for sports purposes.

You can delete your account at any time directly in the app. Tap your profile at the top right, then Settings and “Delete account”. Alternatively, request deletion by email to support@smashfield.app from the address you registered with. Upon deletion we permanently remove your data from our servers, except for the subscription log mentioned under “Retention”. The app also removes the recordings, analyses and players on the device you delete from. You cancel an active subscription separately in your Apple account.

We update this privacy policy when app features or legal requirements change. The current version can always be found on this page.