Tennis Ally Privacy Policy

Effective September 30, 2026

Tennis Ally is a tennis coaching app made by Hard Candy, LLC, a California company. You talk with an AI coach that remembers your game between sessions. This policy explains what we collect to make that work, what we do with it, who else touches it, and how you delete it. It is written to be read, not skimmed past.

What we collect

Everything below comes from you using the app. We do not buy data about you or pull it from other apps.

Account. Your email address and password (stored hashed by our authentication provider), plus the display name you choose. Sign-up asks you to confirm you are 18 or older.
Coaching conversations. What you type or say to the coach and what the coach says back, whether the session was typed or a live voice call.
Voice. We do not store audio. Live voice sessions stream audio from your phone to our AI provider in real time; we keep the transcript and how long the session ran (there is a daily minute allowance).
Video. When you share a video of your game, the app samples a handful of still frames on your phone and sends only those to the coach for analysis. The video itself never leaves your device, and the frames are not stored after the coach has looked at them. What persists is the conversation and the coach’s observations.
Your game. The model the coach builds of you: goals, technique notes, patterns, equipment, and anything you tell it about physical limitations or practical constraints. Those last two are flagged sensitive and are excluded from anything the app can share.
Matches and commitments. Matches you log (date, result, score, an opponent label, notes) and things you told the coach you would do, so it can follow up.
League record. If you link your public league record, or ask the coach to scout an opponent, we fetch the public results pages from TennisRecord.com and cache a snapshot for you. We never calculate a rating of our own.
Settings and device. How often the coach may check in, your time zone, and a push notification token if you allow notifications. We also keep an internal log of account events, such as a “start over” reset, so support can answer questions.

How we use it

To coach you. The coach’s replies are produced by sending your current conversation, your game model, and (when relevant) your league record to an AI model. Nothing is used for advertising; there are no ads, no in-app purchases, and we do not sell personal data.

We keep conversation transcripts internally to improve coaching quality: to debug a bad answer, to evaluate changes to the coach before they ship, and to replay sessions in testing. We may use observability tooling to do this. Access is limited to the engineering team, and your conversations are never used to train AI models.

Who we share it with

Only the services that run the product. Each sees what it needs and nothing more.

OpenAI — produces the coach’s replies, transcribes voice, hosts live voice sessions, and analyzes video frames. Under OpenAI’s API terms, data sent this way is not used to train their models.
Supabase — our database and sign-in, hosted in the United States (AWS us-west-1).
Vercel — hosts our servers and this website, in the United States.
Expo — delivers push notifications. Expo sees your push token and the notification text.
TennisRecord.com — we read its public pages when you link your record or ask the coach to scout an opponent. Those requests are made from our servers, only when you ask, and are cached so we ask rarely.

Things you choose to share. The coach can draw a diagram or clip a moment from your video and give you a link to send to a friend. Everything on that page travels inside the link itself; we keep only a note that you shared it. Anyone with the link can open it, so share accordingly. Conversations are never shareable.

We will disclose information if the law requires it, and if Hard Candy, LLC is ever acquired, your data would move with the product under this same policy.

Retention and deletion

We keep your data as long as you have an account. You control it from inside the app:

Export my data gives you everything above as one file.
Start over with your coach wipes your conversations, transcripts, game model, matches, commitments, check-ins, shared visuals, and league lookups, and keeps your account. We also ask our debugging tools to drop their copies of those conversations.
Delete account removes your account and all of its data from our database. The step by step is on the support page.

Backups and debugging logs may hold copies for a limited time after deletion, after which they age out. Our service providers delete data on their own schedules under their terms.

Your choices

Camera, microphone, and photo access are optional. Deny any of them and the app still works for typing.
Push notifications are optional, and the coach’s check-in frequency is a setting you control.
Linking your league record is optional, and “start over” unlinks it.
You can correct anything in your game model from the Your game tab, or just tell the coach.

Children

Tennis Ally is for adults and is not directed at children under 13. We do not knowingly collect data from anyone under 13; if you believe we have, email us and we will delete it.

Changes

If this policy changes in a way that matters, we will update the date above and let you know in the app.

Contact

Hard Candy, LLC, California. Email support@hardcandy.ai with any question about your data, and we will answer.