1. Information We Collect
We collect information to provide better services to all our users. The types of information we collect include:
Personal Information
- Account information (name, email address)
- Profile information (profile photo and chosen racket sports)
- Authentication data from Google Sign-In
- Billing and subscription records (plan, status, purchase provider, and provider customer, purchase, or subscription identifiers). Stripe handles web payment details, Apple handles iOS App Store payment details, and Google handles Google Play payment details; UNFORCE does not receive your full card or store-account credentials from them.
Session Data
- Video recordings of your racket-sport sessions
- Measured shot analysis and statistics
- Metrics supported by the footage and named reasons for metrics that cannot be measured
- Session history and trends that held across sessions
Device Information
- Device type and operating system
- App version and usage statistics
- Camera and storage access for video recording
Location Data
- We do not collect precise location data
- General region information for analytics purposes only
2. How We Use Your Information
Your information helps us provide, maintain, and improve our services:
Service Delivery
- Analyse your footage to produce your debrief
- Produce one finding and the clips that prove it
- Show whether a fix held across later sessions
- Sync your data across devices
- Create and manage subscriptions and paid entitlements
Improvement
- Improve our models only when you explicitly opt in for that session; the opt-in can be revoked
- Develop new features
- Fix bugs and enhance performance
Communication
- Send service updates and notifications
- Respond to your inquiries and support requests
- Share tips and coaching recommendations
3. Data Storage & Security
We implement robust security measures to protect your data:
Cloud Storage
- Your videos and analysis data are stored securely on Google Firebase
- Data is encrypted in transit and at rest
- Access is protected by secure authentication
Data Retention
- Session video, clips, analysis and the session record use a rolling 30-day retention window
- Profile, consent and billing records are retained while your account is active
- Deleted content is removed within 30 days
- You can request complete data deletion at any time
Session Processing
- The computer-vision pipeline runs on our self-hosted Lambda Cloud GPU pull-workers in current United States regions.
- In parallel, the full uploaded video is submitted by
gs:// reference to Gemini on Google Vertex AI's global endpoint for a separate video-analysis report. That path is active and is not region-pinned.
- Worker-local processing copies are not retained after the job. Video, clips, reports, and session records remain in Firebase only for the retention period described above.
- Processing models do not retain personal information
4. Data Sharing
We do not sell or share your personal information
UNFORCE does not sell personal information for money or other valuable consideration. We also do not "share" personal information for cross-context behavioural advertising (as those terms are defined under the CCPA/CPRA). We honour Global Privacy Control (GPC) signals from browsers that send them. There is nothing to opt out of because no sale or sharing is occurring — if that ever changes, we will update this policy and provide an opt-out mechanism before any such sharing begins. To confirm your status or exercise any privacy right, email [email protected].
Current Service Providers, Payment Platforms, and Historic Processor Record
- Google Cloud (Google LLC / Google Ireland Ltd) — Firestore, Firebase Storage, and Cloud Functions are configured for
europe-west1. Firebase Hosting, Authentication, messaging, support systems, and opt-in analytics are Google-managed services that are not pinned by that regional setting. The active full-video Gemini analysis uses Vertex AI's global endpoint.
- PostHog (PostHog Inc.) — product analytics on the marketing website. Loaded only after you opt in to analytics cookies; EU-hosted (
eu.i.posthog.com).
- Lambda, Inc. — GPU processing for racket-sport analysis through our self-hosted pull-worker pool. Production workers currently run in United States regions.
- RunPod Inc. (historic) — a disabled adapter is retained for historic jobs. It receives no production traffic and is not a current processing path.
- Resend Inc. — transactional email delivery.
- Apple Inc. — Sign in with Apple and iOS App Store subscriptions, payments, and purchase lifecycle events.
- Google LLC — Android Google Play subscriptions, payments, and purchase lifecycle events.
- Stripe, Inc. — web hosted checkout and customer portal, plus payment, customer, and subscription events.
Legal Requirements
- When required by law or valid legal process
- To protect our rights and safety
- To prevent fraud or security threats
With Your Explicit Consent
- When you explicitly authorize sharing
- For features that require third-party integration
5. Your Rights & Choices
You have control over your data:
Access & Portability
- View all your data in the app
- Export your data in standard formats
- Request a copy of your information
Correction & Deletion
Communication Preferences
- Manage notification settings
- Opt out of promotional emails
- Control push notification frequency
6. Biometric-Adjacent Data
To analyse your technique, we derive the following from your uploaded videos:
- Pose keypoints — coordinates of shoulders, elbows, wrists, hips, knees, ankles, and other skeleton joints, per video frame.
- Ball and racket tracking — trajectory, impact location, contact speed.
- Shot classification — inferred shot types.
This data is never used to identify you. We do not extract facial biometrics, do not match pose across users, and do not sell or share it. It trains nothing unless you explicitly opt in for that session; that consent can be revoked. Delete at any time via Settings → Delete Account.
7. Children's Privacy
UNFORCE is for users aged 16 and above. We ask users to attest that they meet the applicable minimum age at sign-up; we do not independently verify date of birth.
- We do not knowingly collect personal information from anyone under 16.
- If you discover that a minor has created an account, email [email protected] and we will delete the account and all associated data.
- We do not run behavioural advertising and do not profile children for marketing.
- COPPA (US): we do not direct our service to children under 13.
- GDPR-K (EU): minimum age set to 16 to align with the strictest EU member-state threshold.
- UK Age Appropriate Design Code: under-16s blocked entirely.
- India DPDP Act: users under 18 in India should not register.
8. International Data Transfers
Your data may be processed in different countries:
- Firebase user content is configured for
europe-west1; Google authentication metadata and support systems may be processed elsewhere. Account-specific acceptance of Google's Data Processing and Security Terms has not yet been evidenced in our compliance record.
- Lambda Cloud GPU processing currently runs in United States regions (
us-east-1, us-south-2, and us-southeast-1). No Article 28 DPA or Article 46 transfer mechanism is currently on file with Lambda; both are outstanding compliance actions.
- The parallel Gemini full-video analysis uses Google Vertex AI's
global endpoint and is not region-pinned. Resend, Apple, Google Play, and Stripe may also process data outside your country.
- RunPod is a historic disabled adapter, not fallback or standby capacity, and receives no production traffic.
9. Changes to This Policy
We may update this Privacy Policy periodically:
- Significant changes will be notified via email or in-app notice
- The "Last Updated" date will be revised
- Continued use after changes constitutes acceptance
- Previous versions are available upon request
10. Contact Us
If you have questions about this Privacy Policy:
📧 Email: [email protected]
🌐 Website: https://unforce.io
For data protection inquiries in the EU, contact our Data Protection Officer at [email protected].