Privacy Policy

1. What we collect

Account data (name, email and its verification state, verified phone number, sign-in provider, handedness); the swing videos you submit and the analysis derived from them (2D/3D pose and a body-geometry reconstruction — used to measure your swing, never to identify you); purchase, subscription and wallet-credit history; device push tokens (if you enable notifications); diagnostic and crash-report data; and your IP address, used transiently to rate-limit sign-ups and prevent abuse.

2. Why we use it, and our legal basis

Under the GDPR we rely on:

• Performance of our contract with you — to run the analysis you request, store your results and history, and process payments.
• Your consent — to capture and analyse your swing videos, send optional marketing/digest emails, and collect crash diagnostics; you can withdraw it at any time.
• Our legitimate interests — to prevent fraud and abuse (one account per verified phone, rate-limiting) and to keep the Service reliable and secure.
• Legal obligations — e.g. retaining the records tax law requires.

We do not sell your personal data.

3. Processors and sub-processors

We share data only with providers who process it on our behalf, each receiving only what it needs:

• Google Firebase — authentication, database, file storage, crash reporting and push delivery.
• RunPod — GPU compute that analyses your swing video.
• Anthropic (Claude) and Google (Gemini) — generate coaching text from your swing metrics (not your video).
• Stripe (web payments), RevenueCat and Apple / Google (in-app purchases) — process payments and subscriptions.
• Resend — sends transactional email (e.g. analysis-complete notices).

4. International transfers

Some processors above are located in the United States. Where data is transferred outside the EEA we rely on the European Commission’s Standard Contractual Clauses and, where applicable, the EU–US Data Privacy Framework, and we prefer EU-region hosting where a provider offers it. We keep such transfers to the minimum needed to run the Service.

5. Retention & deletion

Your uploaded video is deleted once its analysis is ready — we do not keep the raw clip by default. Your analyses are kept while your account is active so your history works, subject to a limit on how many we store (and, where enabled, a maximum age). You can download a copy of your data or delete your account at any time from Settings — deletion removes your profile, swings, videos, sessions, progress and phone claim, and cancels any active subscription. A minimal record of your phone number is retained after deletion solely to prevent sign-up-bonus abuse (a legitimate interest). Residual copies in backups are purged on their normal cycle.

6. Your rights

Depending on your region you have rights to access, rectify, export (data portability), erase, restrict or object to the processing of your personal data, and to withdraw consent. Exercise them in-app (Settings → “Download my data” / “Delete account”) or by emailing support@anchorstance.com. EEA/UK users also have the right to lodge a complaint with their data-protection supervisory authority.

7. Security & children

Data is encrypted in transit, access is scoped per-account by security rules, and payment card data never touches our servers. The Service is not directed at children; you must be at least 16 (or the minimum digital-consent age in your country) to use it.

8. Changes & contact

We may update this policy; material changes will be announced in the app. For any privacy question or to reach the data controller, contact support@anchorstance.com.