Legal

Privacy Policy

Effective Date: October 7, 2026
Last Updated: October 7, 2026

CourtLab ("we," "us," or "our") operates the CourtLab mobile application and related web services, including the coach website (collectively, the "Service"). This Privacy Policy explains what information the Service handles, where it is processed, what reaches our servers, and the choices you have.

By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with this policy, please do not use the Service.

1. Information We Collect

1.1 What stays on your device

CourtLab analyzes your tennis swings on your iPhone. Recording, pose detection, scoring and the skeleton shown on your videos all run on the device. Videos and analysis results are stored on your device. If iCloud is turned on, the app also stores copies in your own iCloud account (iCloud Drive and your private iCloud database). That data is managed by Apple under your Apple ID; CourtLab cannot access it.

If you use CourtLab as a guest (without an account), nothing about your videos or analyses is sent to our servers.

1.2 Information You Provide Directly

• Account Information: Email address, display name, and password (stored in hashed form). If you use Sign in with Apple, we receive an Apple user identifier and, if you choose to share it, your email address (which may be an Apple private relay address).
• Player Profiles: Age, height, playing hand, skill level and preferred grip, used to tailor scoring. If you add other players (for example, family members) to your account, the same details for those players.
• Coach Credentials: If you register as a coach, certifications, specialties, and hourly rate.

1.3 Video Recordings

When you are signed in to a CourtLab account, the app uploads the videos you record or import to our servers so your coach can review them and so they are kept with your account. You can turn this off at any time in Settings → Cloud & Sharing → Upload Videos to Coach. Videos larger than 100 MB are not uploaded.

1.4 Body Pose and Biometric Data

To analyze your technique, the app detects the positions of 19 body joints (such as ankles, knees, hips, shoulders, elbows, wrists, neck, and head) in your video frames. This happens on your device. The frame-by-frame joint positions are kept on your device and are not sent to our servers.

From those positions the app calculates measurements such as joint angles, rotation and swing speed, and scores for your technique. When you are signed in, these measurements and scores are sent to our servers with your shot analysis. We treat body pose data and the measurements derived from it as biometric data (see Section 6).

1.5 Analysis Results

When you are signed in, we store the results of your analyses with your account:

• Shot type classifications (forehand, backhand, serve, volley, etc.)
• Scores across 19 technique dimensions (grip, racquet face, follow-through, stance, etc.)
• Identified issues with severity ratings and corrective recommendations
• Key moments of each shot with their labels

1.6 Coach, Messaging and Sharing Data

• Coach review text and score overrides
• Messages between coaches and players
• Video commentary uploaded by coaches
• Workouts you choose to share by link (anyone with the link can see the shared workout, your display name, and your note)
• Workout party information: your display name, the workout, and chat messages, which are visible to the other people in the party

1.7 Technical Information and Usage Statistics

When the app communicates with our servers, our servers receive standard technical information such as your IP address, app version, and the time of the request. We use it to operate and secure the Service.

The app also sends anonymous usage statistics: an identifier created when the app is installed (it changes if you reinstall), your iOS and app version, your iPhone model, and simple events such as "app opened", "shot analyzed", "Practice finished", "upgrade page shown" or "purchase completed", with details like the shot type. If you are signed in, these are linked to your account. They never include your videos, body pose data, measurements, or anything you type. We use them to understand which features help players and to fix problems. You can turn this off at any time in Settings → Share Usage Statistics.

1.8 Payments

Subscriptions are purchased through Apple's App Store. Apple processes your payment; we do not receive your payment card details. The app checks with the App Store which subscription you have.

2. How We Use Your Data

We use the information we collect to:

• Provide Shot Analysis: Analyze your videos on your device and keep your results with your account when you are signed in.
• Deliver Personalized Coaching: Suggest drills and workouts based on your identified weaknesses and progress history.
• Track Progress: Keep your score history so you can monitor improvement over time.
• Facilitate Coach Interactions: Let coaches you are linked with review your shots, provide feedback, and message you.
• Operate and Secure the Service: Keep the Service running, prevent abuse, and fix problems.
• Improve the Service: Use usage statistics (Section 1.7) to understand which features help players.
• Communicate with You: Send service-related messages, such as password-reset emails, and respond to support requests.

3. Data Storage and Security

3.1 Storage Infrastructure

• Video files and images that reach our servers are stored in cloud object storage (Amazon Web Services S3) with server-side encryption at rest.
• Structured data (account information, player profiles, shot analyses, scores, coach feedback) is stored in a PostgreSQL database hosted on Amazon Web Services.

3.2 Security Measures

We implement industry-standard security measures including:

• TLS encryption for all data in transit
• Server-side encryption for stored objects
• Passwords hashed with bcrypt
• Signed, expiring sign-in tokens
• Role-based access controls (player, coach, support, admin), with an audit log of administrative actions
• Network isolation of database and storage services

4. Data Retention

• Videos and associated analysis data on our servers: Retained for 24 months from the date the video was recorded. After this period, the video, its analysis, and any coach feedback on it are automatically deleted.
• Account data (email, display name, profiles): Retained until you delete your account.
• Coach feedback and review data: Retained for the lifetime of the associated shot analysis record.
• Usage statistics: Retained for 13 months, then automatically deleted. Statistics linked to your account are deleted when you delete your account.
• Data on your device and in your iCloud: Kept until you delete it or delete the app. Deleting a video in the app moves it to the app's trash, which is emptied after 30 days.

Deleted files may remain in our storage backups for up to 90 days before they are permanently erased.

You may delete your data earlier at any time (see Section 7).

5. Third-Party Data Processors

We use the following third-party services to process your data:

We do not sell, rent, or share your personal data with third parties for their own marketing purposes.

All third-party processors are contractually bound to process your data only as instructed by us and to maintain appropriate security measures.

6. Biometric Data Notice

6.1 What Constitutes Biometric Data

The Service detects body joint positions in your videos and derives measurements from them (Section 1.4). Under various laws, this data may be classified as biometric information:

• Illinois Biometric Information Privacy Act (BIPA): Body geometry data derived from video may constitute "biometric information."
• EU General Data Protection Regulation (GDPR): Body pose data processed for identification purposes may constitute "biometric data" under Article 9.
• California Consumer Privacy Act (CCPA) / California Privacy Rights Act (CPRA): Physiological and biological characteristics used to identify an individual constitute "biometric information."

6.2 Purpose of Collection

We use body pose data solely to analyze your tennis technique and provide coaching feedback. We do not use biometric data for identification, surveillance, or any purpose other than the coaching services you have requested.

6.3 Consent

Before the app analyzes your first video, it asks for your explicit consent to detect and use body pose data. You may withdraw this consent at any time, though doing so will prevent the app from analyzing your shots.

6.4 Storage and Destruction

Frame-by-frame joint positions stay on your device and are deleted with the video. Measurements and scores on our servers are deleted when the associated analysis is deleted: automatically after the 24-month retention period, when you delete your account, or upon your request.

6.5 Disclosure

We do not sell, lease, trade, or otherwise profit from your biometric data. Biometric data is not disclosed to third parties except to our hosting provider for storage, and to coaches you have linked with (Section 10).

7. Your Rights Under GDPR (EEA/UK Users)

If you are located in the European Economic Area or United Kingdom, you have the following rights under the General Data Protection Regulation (Articles 15-22):

• Right of Access (Art. 15): You have the right to obtain confirmation of whether we process your personal data and to access that data.
• Right to Rectification (Art. 16): You have the right to request correction of inaccurate personal data.
• Right to Erasure (Art. 17): You have the right to request deletion of your personal data ("right to be forgotten").
• Right to Restriction of Processing (Art. 18): You have the right to request restriction of processing of your data under certain circumstances.
• Right to Data Portability (Art. 20): You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit that data to another controller.
• Right to Object (Art. 21): You have the right to object to the processing of your personal data for certain purposes.
• Right Not to Be Subject to Automated Decision-Making (Art. 22): Our analysis generates coaching suggestions and scores automatically. You have the right to request human review of any automated decision that significantly affects you.

You can delete your account and all data on our servers in the app at Settings → Delete Account & Data. For a copy of your data or any other request, contact us at privacy@courtlab.ai.

We will respond to all requests within 30 days, as required by law.

8. Your Rights Under CCPA/CPRA (California Residents)

If you are a California resident, you have the following rights under the California Consumer Privacy Act and California Privacy Rights Act:

• Right to Know: You have the right to request that we disclose what personal information we collect, use, disclose, and sell about you.
• Right to Delete: You have the right to request deletion of personal information we have collected from you, subject to certain exceptions.
• Right to Correct: You have the right to request correction of inaccurate personal information.
• Right to Opt-Out of Sale: We do not sell your personal information. Therefore, there is no need to opt out, but we honor such requests nonetheless.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.

Categories of Personal Information Collected (past 12 months):

To submit a verifiable consumer request, contact us at privacy@courtlab.ai.

9. Children's Privacy (COPPA Compliance)

CourtLab accounts are not intended for children under the age of 13, and we do not knowingly allow children under 13 to create an account. A parent or guardian may add a child as a player inside the parent's own account. That child's videos and results are then part of the parent's account, under the parent's control, and the parent can delete them at any time. If you believe a child under 13 has created an account or provided us with personal information without a parent, please contact us at privacy@courtlab.ai, and we will promptly delete such information.

For users in the European Union, the minimum age to create an account is 16, in accordance with the GDPR's requirements for consent to data processing.

If we learn that we have collected personal information from a child under the applicable minimum age without verifiable parental consent, we will take steps to delete that information as quickly as possible.

10. Coach Access to Player Data

Coaches may access a player's videos and analysis results only after the player links with that coach, by accepting the coach's invitation or entering the coach's code. Specifically:

• Coaches cannot browse or search player data without a link to that player.
• A linked coach can see the player's shots that reached our servers, and can review them, adjust scores, and message the player.
• Players can remove a coach at any time in the app (Profile → My Coaches), which ends the coach's access.
• Coach reviews and feedback become part of the player's data and are subject to the player's data deletion rights.

11. International Data Transfers

Your data may be processed in the United States, regardless of your country of residence. If you are located outside the United States, please be aware that your data will be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your jurisdiction.

For EEA/UK users, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission as the legal mechanism for such transfers, ensuring an adequate level of data protection.

By using the Service, you consent to the transfer of your data to the United States as described in this section.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy within the app and updating the "Last Updated" date at the top of this document. For material changes that affect how we handle biometric data, we will request renewed consent.

Your continued use of the Service after any changes constitutes acceptance of the updated Privacy Policy.

13. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us:

• Email: privacy@courtlab.ai
• Subject Line: Privacy Policy Inquiry

For data protection inquiries from EEA/UK residents, you may also lodge a complaint with your local data protection supervisory authority.