Skip to main content

Privacy Policy

Last Updated: October 11, 2026

1. Information We Collect

We collect the following types of information:

  • •Account information: name, email address, sign-in identifiers (email/password or Google sign-in), your profile photo if you add one or sign in with Google, and your plan and subscription status
  • •Player profiles you create: name, and optionally age, playing level, dominant hand, height and rating. A profile may describe someone other than you, such as a student or your child
  • •Video you upload for analysis, and details you add at upload (for example, clothing colour, or what you were practising)
  • •What the Service produces and what you add to it: reports, scores, shot timelines, your shot corrections, session notes, goals, and your Ask Coach questions and answers
  • •Social activity: friends, duels, matches, comments, reactions and notifications
  • •Usage data: upload counts, feature usage, timestamps and activity logs
  • •IP address: the address you sign up and sign in from, kept as your most recent one, used for security and to detect duplicate accounts
  • •Payment information: processed by Stripe. We receive limited billing details such as subscription status and transaction identifiers, never full card numbers
  • •Bot-protection data: sign-up is protected by hCaptcha, which processes device and interaction signals to tell people from bots
  • •Analytics data: page views and navigation events collected by Vercel Analytics, which does not use cookies or identify you personally

2. How We Use Information

We use collected information to:

  • •Provide AI tennis analysis, Ask Coach answers, drills, and progress tracking
  • •Improve future analyses of a player using the shot corrections you made for that player
  • •Show your friends the activity described in section 7a of the Terms
  • •Manage accounts and subscriptions, and enforce usage limits
  • •Prevent fraud and abuse, including repeat claims of referral rewards and duplicate accounts (an automated daily check compares account details such as email addresses, IP addresses, video file details and player profiles)
  • •Keep the Service secure, reliable and fast, and understand aggregate usage
  • •Send transactional messages (receipts, verification emails, alerts)

3. Video Processing

Uploaded videos are sent securely to Google's Gemini AI for analysis. Our servers may also measure individual frames to check body position. When processing finishes, the video is deleted from our servers and from Gemini's file storage; we keep the report, not the footage. If you watch a video in the app, a copy may be saved in your own browser's storage so the report's timeline can play on later visits. That copy stays on your device, is never uploaded, and is cleared when you sign out. We do not sell your data or use your videos to train AI models.

4. Third-Party Services

We use these service providers to run Baseline:

  • •Cloudflare: our API, sign-in, database and temporary video storage (Workers, D1 and R2)
  • •DigitalOcean: servers that analyze uploads
  • •Resend: sends sign-in codes and account emails
  • •Google Gemini (Google LLC): AI video analysis and Ask Coach answers
  • •Google: optional sign-in with Google
  • •Stripe: payments and subscription management
  • •hCaptcha: bot protection at sign-up
  • •Vercel: website hosting and cookie-free analytics

5. Children's Privacy

Baseline is not intended for users under 13 years of age. We do not knowingly collect data from children under 13. If we become aware of such data, we will delete it promptly. Users between 13 and 17 should use the Service only with parental or guardian permission. If you create a profile for, or upload video of, a player under 18, you must have their parent or guardian's permission.

6. Data Retention

We retain data only as long as necessary to provide the Service.

  • •Account data: while your account is active
  • •Reports, Ask Coach conversations, corrections and notes: until you delete them or your account
  • •Video files: deleted from our servers and from Gemini file storage when analysis finishes
  • •Deleting your account removes your account, players, analyses, reports, Ask Coach conversations, goals, friendships, duels, matches, comments, reactions, notifications and processing records from our live systems immediately. Backup copies are purged within 30 days
  • •After deletion, we keep a one-way hash of your email address (not the address itself) and your referral redemption record, only to prevent referral bonuses being claimed again by re-registering
  • •Stripe retains payment records as required by law

7. Data Security

We implement reasonable technical and organizational security measures including encrypted transmission (HTTPS/TLS), JWT-based authentication, and restricted server access. However, no system is completely secure, and we cannot guarantee absolute security of your data.

8. Your Rights

Depending on your location, you may have rights to:

  • •Access a copy of your personal data
  • •Request correction of inaccurate data
  • •Request deletion of your data (you can delete your account at any time from Account settings)
  • •Withdraw consent or object to certain processing
  • •Data portability: receive your data in a machine-readable format

9. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

  • •Right to know what personal information we collect, use, disclose, or sell
  • •Right to delete your personal information (subject to certain exceptions)
  • •Right to opt out of the sale of personal information. We do not sell your personal information.
  • •Right to non-discrimination for exercising your CCPA rights
  • •To exercise your California privacy rights, contact us at privacy@baselinecoach.app

10. EU/UK Data Subject Rights (GDPR)

If you are located in the European Union or United Kingdom, we process your personal data based on the following legal bases: (a) contract performance: to provide the Service you signed up for; (b) legitimate interests: to ensure the security and performance of the Service; and (c) consent: for optional data uses. You have rights to access, rectify, erase, restrict processing, and port your data. You also have the right to lodge a complaint with your local data protection authority. To exercise any of these rights, contact privacy@baselinecoach.app.

11. Data Breach Notification

In the event of a data breach that is likely to result in a high risk to your rights and freedoms, we will notify affected users without undue delay. Where required by applicable law, we will also notify the relevant supervisory authorities.

12. Cookies and Local Storage

We don't use advertising cookies or cross-site tracking. We use your browser's storage for things the app needs: your sign-in session, theme and other preferences, a copy of your latest dashboard figures so it loads instantly, optional video copies for playback (see section 3), and your setup-checklist progress. Signing out clears your session, cached dashboard data and saved videos. Vercel Analytics is cookie-free.

13. International Data Transfers

Your data may be processed in countries outside your own, including the United States, where our service providers (Cloudflare, DigitalOcean, Resend, Google, Stripe, hCaptcha, Vercel) operate. We rely on appropriate safeguards, including standard contractual clauses, for transfers of EU/UK personal data.

14. Changes to This Policy

We may update this Privacy Policy periodically. We will indicate the date of the most recent revision at the top of this page. Continued use of the Service after changes constitutes acceptance of the updated policy.

15. Contact

For privacy-related requests or to exercise your data rights: privacy@baselinecoach.app