Privacy Policy
Last updated August 10, 2026
SetPoint is a match-tracking app for racket sports. This policy explains what we collect, why, who we share it with, how long we keep it, and what you can ask us to do about it. It covers the iPhone and Apple Watch apps and the SetPoint website.
1. Who we are
SetPoint is operated by [LEGAL ENTITY NAME], [REGISTERED ADDRESS]. For anything in this policy, including any request about your data, contact us at [CONTACT EMAIL].
2. What we collect
Your account
- Your first and last name, and a nickname if you set one.
- Your email address.
- Your password, stored only as a cryptographic hash — we never see it.
- Your date of birth.
- Your profile photo, if you upload one.
- Two-factor authentication settings, if you turn them on.
Your matches
- The point-by-point log of each match: who served, who won each point, the running score, and how each point ended.
- Who played, which team they were on, when the match started and finished, and how long it lasted.
- The venue, if you choose one — its name, address and coordinates. These come from a place you pick by searching for it by name; we do not read your device's location.
- Skill ratings we calculate from your results, and their history.
- Your friends list and friend requests.
Match recordings (optional, off by default)
In Pro mode for pickleball singles you can turn on a recording of the match. When you do, we ask you to confirm it every single time — not once — because the people on court change from match to match, and a recording of a court captures the other players, in picture and in sound, as well as you. If you confirm, we record and upload:
- Video of the match, with sound.
- Technical details of the capture: your device model, its operating system and build, the lens, resolution and frame rate the camera actually used, and labels for the venue and where the phone was placed.
You can discard a recording at any time during or after the match. Discarding deletes it — from your phone and from our storage — rather than hiding it.
People you add who do not have an account
You can add someone to a match by typing their name, so you can start playing without waiting for them to sign up. We store that name. If you then invite them to register, we also store the email address you gave. See section 7, which is written for those people rather than for you.
Technical
- Sign-in tokens and web sessions, so you stay signed in.
- The device name your phone reports when you sign in, so you can tell your sessions apart.
- Ordinary server logs.
3. What we deliberately do not collect
- Health data. Your Apple Watch reads your heart rate during a match and shows it to you live. It is never sent to us. Nothing in our apps transmits health data anywhere.
- Your voice, when scoring by voice. Voice scoring recognises your spoken calls entirely on your iPhone. If your iPhone cannot do that yet — the offline speech files download in the background after you install iOS updates — voice scoring refuses to start rather than sending your voice to a speech service. This is separate from match recordings above, which you opt into per match.
- Your location. We never request location permission.
- Tracking. No advertising identifiers, no analytics SDKs, no third-party trackers. Our apps contain no third-party code at all, so there is nothing in them that could combine your data with data from elsewhere.
4. Why we use it
We use the information above only to run the service:
- To create and secure your account and sign you in.
- To record, store and show your matches, and to sync them between your phone, your watch and the web.
- To calculate ratings and statistics from your results.
- To send you an email when you ask for one — a password reset, an email verification, or an invitation you chose to send to someone.
- To let you watch back the rallies of a match you chose to record.
We do not use it for advertising, profiling unrelated to the sport, or automated decisions with legal effects.
5. Who we share it with
We do not sell your personal information, and we do not share it for cross-context behavioural advertising. We have never done either. We use a small number of service providers, who may only process data on our instructions and for the purposes above:
| Provider | What they handle |
|---|---|
| Cloudflare (R2) | Storage of match recordings |
| Mailgun | Delivery of the emails we send you |
| [HOSTING PROVIDER] | The servers and database running the service, located in [SERVER REGION] |
We may also disclose information if the law requires it, or to protect the rights and safety of our users. If the service is ever sold or merged, we will tell you before your information becomes subject to a different policy.
6. How long we keep it
| What | How long |
|---|---|
| Your account | Until you delete it. After you ask, you have 30 days to change your mind by signing back in; after that we permanently remove your name, email, date of birth, photo and other personal details. |
| Your matches | Kept. See the note below. |
| Match recordings | At most 90 days from upload, then erased automatically. If you delete the match, its recordings are erased within 30 days. If you discard a recording, it goes immediately. |
| Backups | Our encrypted backups are kept on a declining schedule for up to 2 years. Data you delete stays in those backups until they expire, and is restored only if we ever have to recover from a disaster. |
7. If someone added you and you do not have an account
Another player can add you to a match by typing your name, before you have ever heard of us. If they invited you to register, we also hold the email address they gave. We know this is not something you agreed to, so:
- Every invitation email contains a link to remove your data. Following it and confirming removes your name and email address straight away — there is no waiting period, because you never signed up for anything.
- If you never received an invitation email, or the link no longer works, email us at [CONTACT EMAIL] and we will do it for you.
- As in section 6, the match results themselves stay with the people who played them, with you shown as a deleted player.
8. Your choices and rights
Whoever and wherever you are, you can:
- See what we hold. Email us at [CONTACT EMAIL] and we will send you a copy of your data.
- Correct it. Your name, nickname, date of birth and photo are editable in the app and on the web at any time.
- Delete your account. In the iPhone app, under your profile. It works from inside the app — you do not have to email us or visit a website.
- Turn recording off. It is off unless you switch it on, and we ask you to confirm every time.
If you live in California, the California Consumer Privacy Act gives you the rights to know what personal information we collect and how we use it, to have it deleted, to correct it, and not to be discriminated against for exercising any of them. Everything above applies to you, and we do not sell or share personal information, so there is nothing for you to opt out of. Use the same contact address to make a request; we will verify it against your account before we act on it, and reply within 45 days.
9. Security
All traffic between our apps and our servers uses HTTPS, with no exceptions for insecure connections. Passwords are stored only as hashes. Your sign-in token is held in the iPhone Keychain, marked so it is not copied into backups or transferred to a new device. On your phone, a match in progress and any recording waiting to upload are stored inside the app's own protected storage.
10. Children
SetPoint is not directed at children under [MINIMUM AGE], and we do not knowingly collect their personal information. If you believe a child has given us data, email us at [CONTACT EMAIL] and we will remove it.
11. Changes to this policy
If we change this policy we will update the date at the top. If a change materially affects what we collect or what we do with it, we will tell you in the app before it takes effect.
12. Contact
[LEGAL ENTITY NAME]
[REGISTERED ADDRESS]
[CONTACT EMAIL]