Privacy Policy for Tennect

Last updated: July 1, 2026.

This Privacy Policy explains how Tennect collects, uses, stores, displays, and protects data when you use the Tennect mobile application. The policy covers registration and login, tennis player profiles, player and court search, posts, media, messages, matches, training sessions, rankings, notifications, subscriptions, and support.

1. Controller and Contact

The data controller is the operator of the Tennect application. For privacy questions and requests to access, correct, or delete data, contact us at tennect@outlook.com.

If the application is published through a registered legal entity, the name, address, and additional contact details should be added to this policy.

2. Data We Collect

2.1 Account and Authentication

• Email address, password, and data required for login through the Supabase Auth system.
• Unique user identifiers, including Supabase auth ID and local profile ID.
• Email verification status, account creation date, last login time, password reset data, and verification codes.

Your password is not shown to other users. Authentication and sessions are processed through Supabase infrastructure.

2.2 Profile Data

• First name, last name, username, gender, date of birth, and age display setting.
• Country, city, profile image, biography, and other information you add to your profile.
• Email verification status and basic data required to display your profile in the application.

2.3 Location

Tennect uses location to find nearby players and courts, sort search results by distance, and display the weather forecast.

• We may process the country and city you select, precise GPS coordinates if you grant permission, the location of a selected court, and court addresses and coordinates.
• The application uses Apple CoreLocation.
• Location may be updated when the application opens or restores a session, when a new day has passed, when you move more than approximately 2 km, when opening search usually no more than once every 5 minutes, or when profile coordinates are empty or inconsistent.

Exact GPS coordinates are not displayed publicly to other users. However, search and proximity sorting may indirectly reveal approximate distance.

You can revoke location permission in iOS Settings. If you disable location, nearby player, nearby court, and local weather features may be limited.

2.4 Tennis Profile, Experience, and Equipment

• Tennis skill level, skill assessment score, and favorite court surfaces.
• Years of playing, dominant hand, playing style, and strongest shot.
• Racket and equipment, including brand, model, weight, head size, balance, string pattern, and string tension.

2.5 Playing Availability

• Days and time periods when you are available to play.
• Whether availability is one-time or recurring.
• Availability exceptions and record update times.

2.6 Connections, Follows, and Blocks

• Connection requests and statuses such as pending, accepted, declined, or blocked.
• Connection counts, follow relationships, and connection creation or update times.
• When a user is blocked, we may store the block reason, optional description, related content reference, and a moderation review record.

2.7 Posts, Comments, Reactions, and Media

• Post text, post type, photos, videos, captions, links, and link preview data.
• Comments, replies, likes, reposts, saved posts, and hidden posts.
• Content reports, report reason, optional description, reported content or user, source content ID, review deadline, and moderation status.
• Like, comment, and share counts, and content creation and update times.

Photos are compressed before upload. Images and videos are stored in Supabase Storage, while URLs and metadata are stored in the database.

2.8 Messages

• Sender and recipient IDs, message content, sending time, read status, and typing status through realtime channels.

Message content is encrypted at the application level before being written to the database. This is not the same as full end-to-end encryption: messages are not public, but the system and infrastructure still process metadata such as sender, recipient, and sending time.

2.9 Matches, Training Sessions, Results, and Rankings

• Who sends and receives a request, request type and status, date, time, duration, and message attached to the request.
• Court data, hourly price, currency, cost-splitting method, and weather data if displayed.
• Completion confirmations, match results, sets, tie-break scores, winner, loser, and duration.
• Verifications, result disputes, dispute messages, and proposed corrections.
• XP points, levels, win-loss statistics, match and training history, and ranking data.

2.10 Courts and Favorite Courts

• Court searches, favorite courts, and public court data such as name, address, coordinates, ratings, opening hours, phone number, and website.
• Google: Google Places for tennis court search and details, and Google Play Billing for Android purchases and subscriptions; nearby searches may send coordinates or a query.

2.11 Notifications

• APNs device token if you allow push notifications.
• Notification type, title, text, priority, read status, sending status, creation time, and data used to open the relevant screen.
• Local notification type settings are stored on the device.

2.12 Subscriptions

• Product ID, subscription status, purchase date, expiration date, original transaction ID, price, and currency if available.
• For the iOS/Apple application, data is obtained through Apple StoreKit, App Store in-app purchases, and Apple server-to-server notifications.
• For the Android application, data is obtained through Google Play Billing, Google Play in-app purchases, and Google Play purchase validation or notifications.

Tennect does not store card numbers, CVV, or payment instrument details. Payments are processed by Apple for iOS/Apple purchases, and by Google for Android/Google Play purchases.

2.13 Support, Feedback, and Technical Data

• Feedback category, rating, comment, and user ID if you are logged in.
• Email and communication content if you contact support.
• The selected language, notification settings, last location update time, last known coordinates, and profile, image, post, ranking, and search caches may be stored locally.

The disk cache is periodically cleaned, and part of the data uses a retention period of approximately 24 hours. Infrastructure providers may process technical request data, such as IP address, request time, and error information.

2.14 News and Third-Party Articles

• News article metadata such as title, description, source, author if available, URL, image URL, publication date, article ID, language, and category.
• Tennect syncs tennis news from Newsdata.io server-side and stores published article records in Supabase for display, caching, hiding, and reporting.
• If you hide or report a news article, we store your user ID, article ID, reason, optional description, and moderation status.

3. How We Use Data

• To create and maintain accounts, log users in, verify email addresses, and reset passwords.
• To display profiles, search for players and courts, and sort results by relevance and distance.
• To schedule matches and training sessions, display forecasts, exchange messages, and provide social features.
• To manage results, verifications, disputes, XP, statistics, and rankings.
• To provide in-app, local, and push notifications.
• To manage subscriptions and access to Pro features.
• For moderation, security, abuse prevention, bug resolution, and performance improvements.

We do not sell your personal data to third parties. No integrations for advertising tracking or selling data to advertisers were found in the project.

4. Legal Bases for Processing

• Performance of a contract: account, profile, messages, matches, training sessions, and subscriptions.
• Consent: location, push notifications, and optional data you enter yourself.
• Legitimate interest: security, moderation, abuse prevention, caching, and performance improvements.
• Legal obligation: when we must store or disclose data due to law or a competent authority's request.

5. What Other Users Can See

• Name, username, profile image, country, and city.
• Tennis information, statistics, posts, media, reactions, and rankings to the extent visible according to the feature and privacy settings.
• Data needed by the other party in a match, training session, or message: time slot, court, message, status, and result.

Privacy settings cover appearance in search, age, gender, skill level, experience, equipment, surfaces, statistics, posts, media, messages, and match activity. Settings cannot always hide data that is necessary for another participant in a match, training session, message, security process, or legal obligation.

6. Who We Share Data With

• Supabase: authentication, database, storage, realtime, edge functions, moderation queue records, news article storage/cache, and server-side synchronization.
• Apple: CoreLocation, WeatherKit, APNs, StoreKit, and App Store subscriptions.
• Google: Google Places for tennis court search and details, and Google Play Billing for Android purchases and subscriptions; nearby searches may send coordinates or a query.
• Newsdata.io: server-side synchronization and display of global tennis news; Newsdata.io may process technical request data for server-to-server news requests.
• Resend or an email delivery provider: sending moderation alert emails to the developer; alerts may include reporter, blocked or reported user identifiers, report or block reason, optional description, source content reference, and review deadline.
• External links: when you enter or open a URL, the external website may receive a technical internet request.

We may also disclose data to comply with the law, protect users, investigate abuse, or complete a business transaction, with appropriate data protection safeguards.

7. International Transfers

Service providers such as Supabase, Apple, and Google may process data in different countries. Where applicable, we rely on appropriate contractual, technical, and organizational safeguards.

8. Retention Periods

• Account data is stored while the account exists.
• Profile, location, posts, media, messages, and settings are stored while needed for the feature or until you edit them, delete them, or request account deletion.
• Matches, training sessions, results, disputes, XP, and rankings may be stored for sports history integrity, statistics, security, and abuse prevention.
• Content reports and moderation records may be stored for safety and accountability.
• Subscription data is stored as long as needed for Pro features, disputes, and legal obligations.
• Local cache is periodically cleaned.
• News articles older than approximately one month are deleted from the news table; hide, report, and moderation records may be kept longer for safety and accountability.

9. Account Deletion

Account deletion starts the removal of the profile image, user media from the gallery, media associated with posts, a call to the Supabase Edge Function for deleting or anonymizing the account, local cache cleanup, and user logout.

Some data may remain in anonymized or aggregated form when needed for result integrity, security, moderation, abuse records, dispute resolution, or legal obligations.

10. Security

• We use Supabase Auth, secure communication, database access rules, Supabase Storage, media compression, application-level message encryption, and cache cleanup.
• Content reports are used for moderation, and seriously reported posts may be hidden automatically.
• Reports and user blocks create moderation queue records and email alerts so objectionable content can be reviewed within 24 hours.

No system is completely secure. If you suspect account compromise or a security incident, contact us as soon as possible.

11. Your Rights and Choices

• You may request access, correction, deletion, processing restriction, objection, withdrawal of consent, and data portability, in accordance with applicable law.
• You may change your profile, privacy settings, notification settings, delete available content, log out, or request account deletion.
• On your device, you can disable location access and push notifications through iOS Settings.

In Serbia, you may contact the Commissioner for Information of Public Importance and Personal Data Protection. If you are in the EU or another jurisdiction, you may have additional rights under local law.

12. Children and Minors

Tennect is not intended for users who cannot lawfully use a social and sports application without parental or guardian consent. If you believe that a minor has provided data without appropriate consent, contact us.

13. Automation and Recommendations

The application may automatically sort players by distance, skill level, and filters, calculate XP and rankings, display statistics, prefetch data for performance, and generate event notifications. These processing activities are not used to sell data or for advertising profiling.

14. Policy Changes

We may update this policy from time to time. For significant changes, we may notify you through the application, email, or another appropriate channel.

15. Contact

For questions, requests, or objections related to privacy, write to tennect@outlook.com. We recommend including your account email and a short description of the request.