Privacy Policy

1. Introduction

Welcome to Junior Tennis Journal ("we," "our," or "us"). We are committed to protecting your personal data and respecting your privacy rights. This Privacy Policy explains how we collect, use, store, and protect your information when you use our tennis journal application.

This application is designed for junior tennis players, and we take special care to protect the privacy of children under 16 years of age in compliance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

2. Data Controller

The data controller responsible for your personal data is Junior Tennis Journal. For any questions about this Privacy Policy or your personal data, please contact us at: [Contact Email]

3. Information We Collect

3.1 Information You Provide

• Account Information: Name, email address, date of birth, role (player/coach/parent)
• Profile Information: Player level, playing style, dominant hand, location
• Journal Entries: Pre-match preparations, post-match reflections, fitness sessions, training notes
• Match Data: Tournament names, opponent information, match results, scores, strategies
• AI Chat History: Conversations with our AI coaching assistant
• Comments: Feedback from coaches and parents on journal entries

3.2 Information Collected Automatically

• Usage Data: Pages visited, features used, time spent in the application
• Device Information: Browser type, operating system, IP address
• Cookies: Session cookies for authentication and functionality

4. How We Use Your Information

We process your personal data for the following purposes:

• Service Provision: To provide and maintain the tennis journal functionality
• Performance Analysis: To generate statistics, trends, and insights about your tennis performance
• AI Coaching: To provide personalized coaching recommendations through our AI assistant
• Communication: To send you important updates about your account or the service
• Collaboration: To enable coaches and parents to view and comment on journal entries (with your consent)
• Security: To detect and prevent fraud, abuse, and security incidents
• Legal Compliance: To comply with legal obligations and enforce our Terms of Service

5. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Consent: You have given explicit consent for us to process your personal data for specific purposes
• Contract Performance: Processing is necessary to provide the services you requested
• Legitimate Interests: Processing is necessary for our legitimate interests (e.g., improving our service, security)
• Legal Obligation: Processing is necessary to comply with legal requirements

For users under 16 years of age, we obtain consent from a parent or guardian before processing personal data.

6. Special Protections for Children

We recognize that children's personal data requires special protection. For users under 16 years of age:

• We require verifiable parental consent before collecting or processing personal data
• Parents can review, modify, or delete their child's personal data at any time
• We provide a child-friendly privacy notice explaining data collection in age-appropriate language
• We do not use children's data for marketing or profiling purposes
• We implement additional security measures to protect children's data

7. Data Sharing and Disclosure

We may share your personal data with:

• Authorized Users: Coaches and parents you grant access to view your journal entries
• Service Providers: Third-party companies that help us provide our services (authentication, cloud storage, AI services)
• Legal Requirements: When required by law, court order, or to protect our rights

We do not sell your personal data to third parties. All service providers are contractually obligated to protect your data and use it only for specified purposes.

8. Data Retention

We retain your personal data for as long as necessary to provide our services and comply with legal obligations:

• Account Data: Retained until you delete your account
• Journal Entries: Retained until you delete them or your account
• AI Chat History: Retained for 12 months, then automatically deleted
• Audit Logs: Retained for 2 years for security purposes

After account deletion, we permanently erase all personal data within 30 days, except where retention is required by law.

9. Your Rights Under GDPR

You have the following rights regarding your personal data:

• Right to Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive your data in a machine-readable format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent at any time
• Right to Lodge a Complaint: File a complaint with your data protection authority

To exercise these rights, please contact us at [Contact Email] or use the privacy settings in your account.

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction:

• Encryption of data in transit (HTTPS/TLS)
• Secure authentication via OAuth 2.0
• Role-based access controls
• Regular security audits and updates
• Employee training on data protection

11. International Data Transfers

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). When we transfer data internationally, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

12. Cookies and Tracking

We use essential cookies to provide our services. You can manage cookie preferences through our cookie consent banner. For more information, see our Cookie Policy.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through a prominent notice in the application. Your continued use of the service after changes constitutes acceptance of the updated policy.

14. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us at:

15. Supervisory Authority

You have the right to lodge a complaint with your local data protection supervisory authority if you believe we have not complied with applicable data protection laws.