Privacy Policy

goSmash ("we", "our", or "us") operates the goSmash mobile application and the website at https://gosmash.app (collectively, the "Service"). This Privacy Policy explains what information we collect, how we use it, and the choices you have.

By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Service.

1. Information We Collect

1.1 Account Information

When you register for an account, we collect:

• Email address and display name (email/password registration)
• Google account information (email, display name, profile photo URL) if you sign in with Google

Passwords are managed entirely by Firebase Authentication (Google) and are never stored directly by goSmash.

1.2 Profile & Preferences

During onboarding and profile editing, you may optionally provide:

• Skill level (Beginner, Intermediate, Advanced, Competitive)
• Playing style (Aggressive, Defensive, All-Round)
• Training goals (e.g., Improve Smash, Better Footwork)
• Dominant hand

1.3 Match Videos

When you upload a match video for analysis, we collect and process:

• The video file itself (compressed on your device before upload, max 500 MB)
• A thumbnail image generated from the video
• Match metadata you provide (match type, opponent name, notes)

Important: Match videos may contain footage of other individuals (opponents, spectators). You are responsible for ensuring you have the right to upload and process such videos.

1.4 Body Pose & Movement Data

Our analysis pipeline extracts the following from your uploaded videos using computer vision (AI-based pose estimation):

• Body keypoints — 17 anatomical reference points (shoulders, elbows, wrists, hips, knees, ankles, nose, eyes, ears) detected per video frame
• Joint angles — calculated from keypoint positions for technique scoring
• Movement patterns — court coverage heatmaps and distance traveled
• Shot classification — type, timing, and technique scores for each detected shot

This data is derived computationally from your video and is stored as numerical/statistical data in our database. We do not use facial recognition technology and do not attempt to identify individuals by their faces.

1.5 AI Coach Conversations

When you use the AI Coach feature, we collect:

• Your chat messages and the AI-generated responses
• Session metadata (title derived from your first message, timestamp)

To generate personalized coaching advice, the following context is shared with our AI provider (see Section 3): your display name, skill level, playing style, goals, and relevant match analysis data (scores, shot statistics, movement metrics).

1.6 Device & Technical Data

The app requests the following device permissions:

• Camera & Microphone — to record match videos in-app
• Storage / Photo Library — to select existing videos from your device
• Internet — for all Service functionality

We do not currently use analytics SDKs, crash reporting tools, or advertising trackers in the mobile app.

1.7 Local Caching

The app caches your profile and match list data locally on your device for performance. This data stays on your device and is not transmitted to any third party.

2. How We Use Your Information

Purpose	Data Used
Account creation & authentication	Email, name, Google account info
Personalized coaching experience	Skill level, goals, playing style, dominant hand
Video analysis & technique scoring	Uploaded videos, extracted pose/movement data
AI Coach conversations	Chat messages, profile data, match analysis results
Progress tracking & statistics	Aggregated match scores, shot data, trends
Service improvement	Aggregated, anonymized usage patterns

We do not sell your personal data to third parties. We do not use your data for advertising purposes.

3. Third-Party Services

We use the following third-party services to operate goSmash:

Service	Provider	Purpose	Data Shared
Firebase Authentication	Google LLC	User identity & login	Email, password (hashed), OAuth tokens
Cloud Firestore	Google LLC	Database	All user profile, match, analysis, and chat data
Firebase Storage	Google LLC	Video & image storage	Uploaded match videos and thumbnails
Google Sign-In	Google LLC	OAuth authentication	Google account email, name, photo URL
Anthropic Claude API	Anthropic PBC	AI coaching responses	Display name, skill profile, match stats, chat messages
RunPod	RunPod Inc.	GPU compute for video analysis	Video download URL, match ID; video processed ephemerally
Google Fonts	Google LLC	Website typography	Browser IP address, user agent (standard CDN request)

Each third-party service is governed by its own privacy policy. We encourage you to review them:

• Firebase Privacy
• Anthropic Privacy Policy
• RunPod Privacy Policy

4. Data Storage & Security

• Your data is stored on Google Cloud infrastructure (Firebase) with encryption at rest and in transit.
• Videos uploaded to Firebase Storage are accessible only to the uploading user and our backend service (via service account credentials).
• Analysis data is written only by our backend — you cannot modify it directly.
• All API communication uses HTTPS/TLS encryption.
• Firebase Authentication tokens (JWTs) are used for stateless authentication — no session cookies are stored on the backend.

While we implement reasonable security measures, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

5. Data Retention

• Your account data is retained for as long as your account is active.
• Match videos and analysis results are retained until you delete them or your account.
• AI Coach conversation history is retained until you delete it or your account.
• If you delete your account, we will delete your personal data within 30 days, except where retention is required by law.

6. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data (via the Profile screen in the app)
• Delete your account and associated data
• Export your data in a portable format
• Object to or restrict certain processing
• Withdraw consent where processing is based on consent

To exercise these rights, contact us at the address below. We will respond within 30 days.

7. Children's Privacy

goSmash is not directed at children under the age of 13 (or the applicable age in your jurisdiction). We do not knowingly collect personal information from children. If we learn we have collected data from a child, we will delete it promptly. If you believe a child has provided us with personal data, please contact us.

8. International Data Transfers

Your data may be transferred to and processed in countries other than your own, including the United States, where our third-party service providers (Google, Anthropic, RunPod) operate. By using the Service, you consent to such transfers. We ensure appropriate safeguards are in place in accordance with applicable law.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last Updated" date. Your continued use of the Service after changes constitutes acceptance of the revised policy.

10. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at:

• Email: contact@gosmash.app
• Website: https://gosmash.app