Privacy Policy

1. Data we process

We only process the data needed to run POINT. Specifically:

• Account data: email address, password (stored exclusively as a hash), display name, profile photo, playing level, preferred side and the location you enter.
• Content you publish: match videos, cover images, title, date, court, match type, players involved, descriptions, comments, likes and clips.
• Data generated by the AI analysis: rallies, highlights, statistics, heatmaps, estimated MVP and automatic commentary derived from the video you upload.
• Social relations and organization: profiles you follow, invitations you send or accept, the organization (sports centre or group) you belong to and your role in it.
• Address book (only if you tap "Find friends from your contacts" and grant permission): the app reads only the email addresses of your contacts and sends the server a SHA-256 hash of each one (an irreversible version, never the address in clear) to find matches with other POINT users. Names and other address-book data are neither read nor transmitted; the hashes are not stored.
• Notifications: the device push token, if you enable notifications, and your preferences for push and marketing communications.
• Selected plan (Free, Monthly, Annual) and answers to optional in-app surveys.
• Technical data: IP address, device type and operating system, service access logs, generated automatically for security and diagnostics.
• App usage data: interaction events (app opened, sections visited, matches and analyses viewed, videos played, shares, recording started) recorded with their timestamp and, when you are signed in, linked to your account. On the getpointapp.com website we count visits and "Open the app" clicks anonymously.

2. Purposes and legal bases

• Providing the service (account creation, video upload and playback, feed, profile, sharing, AI analysis): performance of a contract, art. 6.1.b GDPR.
• Finding friends from your address book, receiving push notifications and marketing communications: consent, art. 6.1.a GDPR, which you can withdraw at any time from your device or profile settings.
• Security, abuse prevention, diagnostics and aggregated usage statistics: legitimate interest, art. 6.1.f GDPR.
• Compliance with legal obligations and requests from authorities: art. 6.1.c GDPR.

3. Videos, AI analysis and people on camera

The videos you upload are stored on our servers and made available in the app according to your publishing choices. AI analyses run automatically on our systems: they detect positions and movements on the court to segment rallies and estimate statistics, but they do not biometrically identify people.

To generate the automatic text commentary we send a language-model provider (OpenAI) only numerical and descriptive analysis data (number of rallies, durations, scores, highlight timestamps): we never send the video, images or user identification data.

You are responsible for informing the people being filmed and for obtaining their consent before uploading and publishing a video.

4. Who can see your content

Matches you publish are visible in the POINT community feed to registered users. The social cards and share links you generate are public and can be seen by anyone who receives them. Your profile (name, photo, level and activity) is visible to other users and reachable through QR codes and invitation links.

5. Recipients and processors

We do not sell your data. The following parties may process it on our behalf, as processors or independent providers:

• Hosting and infrastructure providers that host the API, database and media files.
• OpenAI, for generating the text commentary of the analysis (aggregated data only, as described above).
• Expo, Apple and Google, for delivering push notifications and distributing the app through the stores.
• For the getpointapp.com website, when enabled, a cookieless aggregated statistics service (Plausible) that collects no personal data. App usage data and the website counters stay on our own systems and are not sent to third-party analytics services.
• Public authorities, where required by law.

Some providers may process data outside the European Union; in that case we rely on the standard contractual clauses approved by the European Commission or on other safeguards under Chapter V of the GDPR.

6. Retention

• Account data and content: for as long as your account exists. You can delete individual matches at any time; when you delete your account we remove profile, matches, videos, analyses and organization memberships.
• Address-book email hashes: used in memory only to look up matches, never stored.
• Push tokens: until you disable notifications or delete your account.
• Technical logs: at most 12 months, unless security needs or legal obligations require otherwise.
• App usage data: linked to your account for as long as it exists; when you delete your account the events are anonymized and kept only as aggregated counts.

7. Your rights

At any time you can request access to your data, rectification, erasure, restriction of processing, portability, and object to processing based on legitimate interest. You can withdraw consent without affecting the lawfulness of prior processing.

To exercise your rights write to info@getpointapp.com. You can delete your account directly from the app (Profile → Settings → Delete account). You also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it) or with your local supervisory authority.

8. Cookies and tracking

The getpointapp.com website uses no profiling cookies or advertising trackers. Visit statistics are collected without cookies: an anonymous counter on our own systems (one visit per browser session, marked by a sessionStorage flag that does not identify you, plus "Open the app" clicks) and, when enabled, the Plausible service in aggregated form. The app stores on the device only what the session needs (for example the access token) and local preferences; the usage events described in §1 are sent exclusively to our servers.

9. Children

POINT is not intended for children under 14. If you believe a child has provided us with personal data without the consent of a parent or guardian, write to us and we will remove it.

10. Security

Data travels encrypted (HTTPS), passwords are stored only as hashes and access to our systems is restricted to authorised staff. No system is impenetrable, though: please use a strong password and do not share it.

11. Changes to this policy

We may update this policy when the service or the law changes. The current version is always published at getpointapp.com/privacy with the date of the last update; for material changes we will notify you in the app or by email.

12. Contact

For any question about this policy or about how we handle your data write to info@getpointapp.com.