Privacy Policy

Last updated: October 22, 2026

This policy explains what personal data the Tennis Level app (the "app" or the "service") collects, why, how long we keep it, who we share it with, and what rights you have.

1. Who is responsible for your data

The data controller is Kostiantyn Tymoshchenko ("we", "us").

For any question about your personal data, email support@tennislevel.app.

2. Data we collect

Category	Details	Source
Account	Email address, password (stored only as a hash), interface language, role in the service, email verification status, registration and last activity dates, number of failed sign-in attempts.	You, when you register and use the app
Profile	First name, last name, nickname, profile photo (optional), your self-assessed playing level.	You
Task videos	Videos you record or upload for task verification. They may show your face, body, voice, and the place where you play.	You
Progress	Completed tasks, levels, ranks, experience points (XP), video review results, and reviewer comments.	Generated by the service
Requests	Support messages and questions about tasks.	You
Device and notifications	Push notification token, platform (iOS/Android), device language and time zone, notification settings.	Your device, if you allow notifications
Technical logs	IP address, request time and type, server response code.	Automatically while you use the app

We do not collect your precise location, contacts, or payment details, and we do not use advertising identifiers or third-party analytics.

3. Why we use your data and our legal basis

Providing the service: creating your account, signing in, reviewing videos, awarding levels and ranks, answering your requests. Legal basis: performance of our contract with you (Terms of Use).
Security: protection against password guessing, abuse, and fraud; troubleshooting. Legal basis: our legitimate interests.
Notifications: reminders and achievement messages. Legal basis: your consent, which you can withdraw in the app or device settings.
Service emails: email verification, password reset and change. Legal basis: performance of contract.
Legal compliance: responding to lawful requests from authorities. Legal basis: legal obligation.

4. Task videos

Videos are checked automatically for technical requirements (format, duration, size) and transcoded for playback.
Whether a video meets the task is assessed by reviewers and administrators we authorize. Reviewers may be experienced players or coaches rather than our employees. They see the video, your nickname, and your progress on that task, may open videos only to review them, and are bound by confidentiality obligations.
We do not show your videos to other players, do not use them for advertising or to train artificial intelligence models, and do not apply biometric identification to them.
If we later offer showing videos to other players as examples, it will happen only with your separate consent.
You can delete a video until it is approved. An approved video is kept as evidence of your result while your account exists. It is deleted together with your account, or earlier at your request to support; in that case the result of that task may be cancelled.
Record only yourself or people who have agreed to appear on camera.
If you appear in a video without your consent, you can ask us to remove it even if you do not have a Tennis Level account: email support@tennislevel.app with the approximate date and place of the recording. We will review the request and delete the video if it is justified.

5. Who we share data with

We do not sell personal data. We share it only with providers that help us run the service, and only to the extent needed:

Amazon Web Services: server hosting, database, video and photo storage (EU region, Frankfurt, Germany).
Google Firebase Cloud Messaging: push notification delivery (device token and notification text).
Amazon Simple Email Service: delivery of service emails (your email address and the message text; EU region, Frankfurt, Germany).
Cloudflare: hosting of this website.
Public authorities: only when required by law.

Some providers may process data outside Ukraine and the European Economic Area. In such cases we rely on standard contractual clauses or other lawful data transfer mechanisms.

6. How long we keep data

Account, profile, progress, and video data: as long as your account exists.
Videos that fail the technical check: up to 7 days.
Technical logs: up to 30 days.
After you delete your account, we delete your data within 30 days, except data we are legally required to keep longer. Database backups are overwritten within the following 7 days.

7. Your rights

You have the right to:

get a copy of your data;
correct inaccurate data (most of it directly in your profile in the app);
delete your account and data, see Account deletion;
restrict or object to processing;
receive your data in a machine-readable format;
withdraw consent (for example, to notifications) at any time;
lodge a complaint with the Ukrainian Parliament Commissioner for Human Rights or with the data protection authority of the EU country where you live.

To exercise your rights, email support@tennislevel.app from the address linked to your account. We will respond within 30 days.

8. Security

Data is transmitted only over encrypted connections (HTTPS), video and photo storage is closed to public access, and files are served through temporary signed links. Passwords are stored only as hashes. No security measure is absolute, so please tell us if you notice suspicious activity in your account.

9. Age

The service is intended for people aged 18 and over. We do not knowingly collect data from younger users. If you believe a minor has created an account, contact us and we will delete it.

10. Changes to this policy

We may update this policy. We will notify you of material changes in the app or by email at least 14 days before they take effect. Changes required by law or for security, and changes in your favor, may take effect immediately. If we add features that process your data in a new way, we will update this policy before they launch, and where new processing requires your consent, we will ask for it separately. The date of the latest revision is shown at the top of this page.