Android / iOS coming November 2026

Privacy Policy

Effective October 1, 2026

MyStudio (the "operator") runs the MyTennis app and website (mytennis.uk). This policy explains how personal data is protected under the Korean Personal Information Protection Act and how concerns are handled.

1. Data we process and why

  • Google sign-in: your Google account identifier and email address, to identify you, keep you signed in and prevent abuse. Your Google account name and profile photo are stored only on your device, to show them in the app.
  • Subscriptions (Google Play): the purchase token (stored encrypted), order number, plan, and the times and status of payment, renewal and expiry, to provide the subscription, confirm payments and handle refunds and disputes. Card numbers and other payment details are handled by Google; the operator never receives them.
  • AI Rally Cut and My Play: video analysis runs on your device. The app sends the server only numbers computed at short intervals (serve, point end and rally probabilities) and the model version, never the video, and the server does not store them after returning the result. The AI in the web editor sends body pose coordinates and 3 still pictures for court detection, which are not stored either. The number of analyses, processing time and analyzed video length are recorded per account for the daily limit.
  • Device integrity (Google Play Integrity): when the AI models are used, a device and app verdict token issued by Google is checked with Google and only the verdict is used, to keep the models from leaking to modified apps or devices.
  • Training video sharing (optional): match videos you choose to upload with your consent, the AI result and your corrected result, the video length and your consent record, to improve the AI model.
  • Benefits: referral codes and referral links and free benefit quest progress, to provide benefits and prevent abuse.
  • Support requests: your email address and message, to reply and handle disputes.
  • Service protection: your IP address is used only to block excessive requests; it is not stored as such and is discarded within minutes.
  • What we do not receive: your editing projects, original and finished videos and photos stay on your device. The only exception is a training video you upload yourself.

2. Retention and destruction

  • Account data is deleted as soon as you delete your account, at once and without operator review, from Settings > Account > Delete account in the app or from the account deletion page on the web.
  • The records below are kept for the period set by law and then destroyed. While kept, your email and Google account link are removed so the records cannot be traced to you. Records of contracts, withdrawals, payments and supply: 5 years. Records of consumer complaints and disputes: 3 years (Korean Act on Consumer Protection in Electronic Commerce).
  • The retention limit for training videos is 3 years from upload. Completed training videos are not currently deleted automatically when that period expires. Completing account deletion also deletes that account’s server-held training videos. Individual video deletion can be requested through support and is handled by the operator. The absence of automatic deletion does not extend the 3-year retention limit. A model that has already been trained cannot un-learn an individual video.
  • Destruction means deleting the data from the database and storage so that it cannot be recovered.

3. Processors and transfers outside Korea

  • The operator uses the companies below to run the service. Their servers are outside Korea, and data travels to them over encrypted connections while you use the service.
  • Cloudflare, Inc. (United States): servers, database and video storage; the items kept on the server in section 1, for the periods in section 2.
  • Google LLC (United States): Google sign-in, Google Play billing and Play Integrity; account identifier, email, payment information and device verdicts, kept under Google policies.
  • YouTube API Services (Google LLC, United States): the Explore tab in the app uses YouTube API Services to list public videos from official channels. No user data is sent to YouTube for this. Thumbnails load directly from YouTube servers, so connection details such as your device IP address may reach Google. Kept under Google policies. Google Privacy Policy: https://www.google.com/policies/privacy
  • RevenueCat, Inc. (United States): subscription status; a randomly generated member number and purchase history, kept for the payment record period.
  • If you do not want your data transferred outside Korea, you can use the editor as a guest without signing in. Subscriptions and AI features are not available then.
  • The operator does not share or sell personal data to third parties and does not use advertising trackers.

4. Your rights

  • You can ask to see, correct, delete or stop the processing of your personal data at any time. Write to [email protected] and the request will be handled without delay.
  • You can delete your account yourself in the app settings or on the web account deletion page.
  • Children under 14 cannot create an account.

5. Security measures

  • All connections are encrypted with HTTPS.
  • Purchase tokens are stored encrypted, and sign-in data in the app is encrypted with the Android Keystore on your device.
  • Admin functions are limited to authorized accounts and their use is logged.

6. Cookies and similar technologies

  • The website uses no advertising or analytics cookies. It keeps you signed in with browser session storage, which is cleared when you close the tab.
  • The website counts visits with Cloudflare Web Analytics, without cookies: pages viewed, the referring page, country and device type. These statistics are not used to follow visitors or identify anyone.
  • The Google sign-in button on the web runs a script provided by Google.

7. Privacy enquiries

8. Remedies

  • Personal Information Dispute Mediation Committee: 1833-6972 (www.kopico.go.kr)
  • Personal Information Infringement Report Center: 118 (privacy.kisa.or.kr)
  • Supreme Prosecutors Office: 1301 (www.spo.go.kr)
  • Korean National Police Agency: 182 (ecrm.police.go.kr)

9. Changes to this policy

  • Changes are announced on the website and in the app 7 days before they take effect, or 30 days before for changes that are less favorable to you.

10. Diagnostics and Optional App Error Reporting - Advance Notice

  • Published: 2026-10-11. Automatic server error reporting is currently off. This is advance notice of the proposed addition; the effective date will be announced separately after checking the existing policy notice period and required consent procedures.
  • MyTennis uses Sentry (Functional Software, Inc.) to investigate errors and improve service reliability. Automatic Android app error reporting is off by default and reports errors and crashes only after you enable it in Settings. Editing and customer support remain available if you decline. Automatic app error reporting is not enabled in this iOS release.
  • Android reports contain a random diagnostic ID, timestamp, error and operation category, code location, app and build version, device model, operating system version, and code identifiers used to restore error locations. We filter out videos, photos, screenshots, original video filenames, account email addresses, authentication tokens, payment information, request bodies, and original error messages. Sentry may receive an IP address through the network connection; our event-storage settings remove IP addresses and geographic information.
  • Server fault reporting is separate from optional app reporting. When enabled by the operator, it covers HTTP 5xx failures and failed background jobs only. Requests recovered with successful responses and ordinary HTTP 4xx request errors are excluded. Server reports contain a diagnostic ID, timestamp, error and operation category, code location, server version, and code identifiers. Account emails, authentication tokens, payment information, videos, and request bodies are excluded from events. Turning app reporting off does not change server reporting settings.
  • Reports are transferred over encrypted connections to Sentry in the United States when an error occurs or connectivity returns. The recipient is Functional Software, Inc.; its privacy contact is [email protected]. The purpose is error investigation and reliability improvement. Error events are retained for 30 or 90 days depending on the applicable plan, with a maximum of 90 days for the scope prepared here. A plan change does not immediately change existing events' retention. This period applies to error events, not Sentry administration-account audit records.
  • Turning Android reporting off stops subsequent and pending reports and attempts to remove the local diagnostic cache. If removal fails, reporting remains blocked until the cache is removed. Reports already sent or in flight cannot be retracted by changing this setting. App reporting is optional and can be declined or withdrawn without restricting editing or customer support.
  • For deletion or processing-restriction requests, contact [email protected] with the diagnostic ID and approximate event time. Because events do not contain account IDs or email addresses, we may be unable to locate a report without its diagnostic ID. A server-supplied diagnostic ID can also be used for support. An issued ID does not imply app-reporting consent or confirm receipt by Sentry.