Template notice. This policy describes how Tennis HUD actually processes data, but it is not legal advice and has not been reviewed by a lawyer. Have it reviewed against the laws that apply to you before relying on it.
Who this covers
This policy explains what Tennis HUD collects when you use tennishud.com and the analysis dashboard, why we collect it, who else processes it, and how to get it deleted. It applies to the website and the video analysis service.
Tennis HUD is operated from Bulgaria, so the EU General Data Protection Regulation (GDPR) applies. For the purposes of the GDPR, the data controller is Iassen Gueorguiev, who can be reached at yassi801@gmail.com.
What we collect
Account information. To sign in you either provide an email address for a magic link, or sign in with Google. With Google sign-in we receive your email address, display name, and profile picture URL. We do not receive or store your Google password.
Videos you upload. The video file itself, plus everything derived from it: body landmark positions, joint angles, detected stroke phases, an annotated copy of the video with the skeleton overlay, a thumbnail image, and the resulting scores and written feedback.
Analytics. If you accept cookies, Google Analytics records pseudonymous usage events such as pages visited. If you decline or ignore the banner, analytics storage stays disabled — consent is denied by default and only enabled when you accept.
Technical data. Our host records standard server logs, including IP address and browser user agent, as part of serving the site.
Why we use it
Account information exists so you can sign in and see your own analyses. Video and derived data exist to produce the analysis you asked for and to show you progress across uploads over time. Analytics tell us which parts of the site are useful. We do not sell your data, and we do not use your videos for advertising.
Legal basis for processing
Under the GDPR we rely on the following bases:
- Performance of a contract — account data and video processing, because they are what you signed up for and the service cannot work without them.
- Consent — analytics cookies. You give it via the cookie banner and can withdraw it at any time by clearing the stored preference in your browser.
- Legitimate interests — keeping the service secure and available, and improving analysis accuracy using anonymised measurements.
Where your data is processed
Your uploaded videos are stored and processed on Google Cloud in the us-central1 region, in the United States. Other providers listed below may also process data outside the European Economic Area.
This means your personal data is transferred outside the EEA. Such transfers rely on the European Commission's Standard Contractual Clauses and, where applicable, the EU–US Data Privacy Framework. You can request details of the safeguards in place by contacting us.
Who else processes your data
We use the following third parties. Each one only receives what it needs to do its job:
| Provider | Purpose | Data involved |
|---|---|---|
| Supabase | Authentication, database, and thumbnail storage | Email address, name and avatar (if you sign in with Google), analysis results |
| Google Cloud Platform | Video storage and video processing | Uploaded videos and generated annotated videos |
| Vercel | Website hosting | Standard server request logs, including IP address |
| Google Analytics 4 | Usage analytics — only after you accept cookies | Pseudonymous usage events |
| Anthropic | Generating written coaching feedback | Numeric measurements only — never your video or images |
How AI feedback works
The written coaching feedback is generated by a large language model. It is worth being precise about what that involves: we send numeric measurements only — joint angles, detected phases, and whether you are left- or right-handed. Your video, individual frames, images of you, and your name or email are never sent to the language model provider.
Pose estimation and video annotation run entirely on our own infrastructure. Your video is not sent to any third-party AI service.
Cookies
We store a single value in your browser's local storage recording whether you accepted or declined cookies, so we do not ask on every visit. Google Analytics cookies are only set after you accept. Authentication uses cookies necessary to keep you signed in; these are required for the service to function.
Retention and deletion
Videos and their analyses are kept until you delete them or close your account. Deleting a video from your dashboard removes the original video, the annotated video, and the thumbnail from storage, along with the associated analysis records.
Anonymised measurement data may be retained after deletion to improve analysis accuracy. This data consists of joint angles and quality metrics with no link back to you, your account, or your video.
To delete your account and everything associated with it, contact us at the address below.
Your rights
Under the GDPR you have the right to access a copy of your data, correct it, delete it, restrict or object to processing, receive it in a portable format, and withdraw consent at any time without affecting processing carried out before withdrawal.
To exercise any of these, contact us at the address below. We will respond within one month, as the GDPR requires.
If you believe we have handled your data unlawfully, you have the right to lodge a complaint with the Bulgarian supervisory authority, the Commission for Personal Data Protection (Комисия за защита на личните данни), at cpdp.bg, or with the supervisory authority in your country of residence.
Video of other people
Only upload video you have the right to upload. If someone else appears in your footage, you are responsible for having their permission — and for a child, the permission of a parent or guardian.
Children
Tennis HUD is not directed at children under 13, and we do not knowingly collect their personal data. If you believe a child has provided us with personal data, contact us and we will delete it.
Changes
If we change this policy we will update the date at the top of this page. Material changes will be communicated to signed-in users.
Contact
Questions about this policy, or requests about your data: yassi801@gmail.com.