Privacy Policy (Players)

This Privacy Policy explains how Play Eye DOO (“Padelytics”, “we”, “us”, “our”) processes your personal data when you use Padelytics.

1) Who we are & scope

Controller: Play Eye DOO, Sime Igumanova 25, Belgrade, Serbia.
Contact: office@padelytics.ai

This Policy covers our B2C Service for padel players. (Club/venue arrangements are covered in separate documents.)

2) What we collect

• Account & contact data: email, display name, password hash.
• Transaction data: order IDs, session purchases, pricing, taxes (processed by Lemon Squeezy; we do not receive full payment card details).
• Session content: video footage you record via the Service; highlights generated in-app.
• Derived analytics/telemetry: ball/skeleton trajectories, shot types, speeds, heatmaps, timestamps, and related metadata.
• Technical data: device identifiers, app logs, IP address, timestamps, and basic diagnostics needed to run and secure the Service.
• Cookies/SDK: strictly necessary cookies/SDK for login, security, and service analytics. No advertising cookies.

We do not intentionally collect location, age, gender, health data, or special categories of data. We do not perform face recognition or uniquely identify individuals from the footage.

Biometric Data Note: Our processing of "skeleton trajectories" and "pose estimation" is performed for the sole purpose of generating athletic performance metrics. This data consists of mathematical coordinates of joints and limb movements. We do not use this data to uniquely identify any individual, nor do we perform facial recognition or use "biometric templates" for identification purposes.

3) How we use data (purposes & legal bases)

• Provide the Service (create account; process and display your sessions; enable sharing): Contract.
• Payments & tax records (via Lemon Squeezy): Contract / Legal obligation (tax).
• Security & fraud prevention (access controls, logs, abuse detection): Legitimate interests.
• Service analytics and improvement (quality monitoring, feature performance, model tuning): Legitimate interests.
• Customer support & communications (transactional emails, service notices): Contract/Legitimate interests.
• Marketing communications (news, offers): Consent (where required) with easy opt-out in every message.

We do not engage in automated decision-making producing legal or similarly significant effects.

4) Who sees your data

• Your sessions: visible to you (and anyone you choose to share with via in-app share features). We do not make sessions public by default — you can choose to make a session public (see below).
• Public live streaming (players & viewers): You may choose to make a session public. When you do, its live and recorded video, derived match statistics, and player thumbnails become viewable by anyone with the link, and the session may be listed in a public directory. You must have the consent of every participant appearing in the session before making it public, and you can revert it to private at any time (removing it from public view going forward). Padelytics may also revoke or take down any public session. Viewer analytics: to show live viewer counts and audience metrics for public sessions, we process a first-party analytics cookie (“padelytics_did”) and an irreversible keyed hash of a truncated portion of the viewer’s IP address — we never store the raw IP. Legal basis: our legitimate interest in audience measurement. Per-viewer records are short-lived; only aggregate counts are retained.
• Vendors (processors/sub-processors):
  • Lemon Squeezy (merchant of record & tax handling)
  • Microsoft Azure (EU/EEA cloud hosting & storage)
  • RunPod (GPU inference in the EU/EEA)
  We may add/replace vendors offering equivalent safeguards; we will update this section upon material changes.

5) International transfers & location

Primary storage and processing occur in the EU/EEA. Access from Serbia (our location) may occur for support/operations. Where EU/UK data is accessed from or transmitted to a country without an adequacy decision, we rely on Standard Contractual Clauses (SCCs) and implement supplementary measures as appropriate.

6) Children

You must meet the minimum age applicable where you live (see the Terms). Where law requires parental consent, do not use the Service without it.

7) Retention

We retain video and analytics so that you can access what you paid for. Accordingly, we keep data until you request deletion or your account is deleted, subject to:

• Backups/logs: typically retained for limited periods needed for security and continuity.
• Aggregated/anonymized statistics: may be kept indefinitely (these are not personal data).

You can request deletion at office@padelytics.ai.

8) Your rights

Depending on where you live (including the EEA/UK and Serbia), you may have the right to request access, rectification, erasure, restriction, portability, and to object where we rely on legitimate interests, as well as to withdraw consent (for marketing).

To exercise rights, email office@padelytics.ai.

You also have the right to lodge a complaint with your local data protection authority (for Serbia: the Commissioner for Information of Public Importance and Personal Data Protection; for the EEA/UK: your national authority).

We have not appointed an EU/UK representative or a DPO at this time; if that changes, we will update this Policy.

9) Security

We use industry-standard safeguards, including encryption in transit and at rest, access controls/least privilege, monitoring and logging, and vendor due diligence. No system is perfectly secure; if we become aware of a data breach affecting you, we will notify you and regulators where required.

10) Your role when recording & sharing

User Responsibility. When you record or share sessions, you are the "initiator" of that data collection. You represent and warrant that you have obtained all necessary permissions (verbal or written) from all participants and any third parties visible or audible in the footage. You are responsible for ensuring that your use of the Service complies with the rules of the venue where you are playing.

Notice & Takedown. If a third party (e.g., an opponent or bystander) objects to being included in a video hosted on our Service, they may contact us at office@padelytics.ai.

Company Rights. Because we do not provide manual video editing, blurring, or redaction services, our sole remedy in response to a valid privacy or consent complaint will be to disable access to or permanently delete the video session in its entirety. We reserve the right to take such action at our sole discretion to protect third-party privacy rights or comply with legal obligations.

No Refunds. If a session is removed due to a third-party complaint resulting from your failure to secure the necessary permissions, you will not be entitled to a refund or credit for that session.

11) Cookies & similar technologies

We use only strictly necessary and service analytics cookies/SDK to operate the Service (e.g., session authentication, stability). We do not use advertising cookies. Where required by law, we will present a consent banner and honor your choices.

12) Changes to this Policy

We may update this Policy. If we make material changes, we will provide reasonable notice (e.g., in-app/email) before they take effect. Continued use after the effective date means you acknowledge the changes.

13) Contact

Play Eye DOO – office@padelytics.ai
Address: Sime Igumanova 25, Belgrade, Serbia