Privacy Policy

Last updated: April 12, 2026

🌐 Lire cette politique en français

1. Data Controller

The controller responsible for the processing of personal data is EACT.PRO, reachable at: eact.pro83@gmail.com

2. Data We Collect

Identification data

• Email address
• Password (hashed, never stored in plain text)
• Profile photo (stored locally on your device)

Sports data

• Tennis profile: ranking, laterality, dominant hand, playing style
• Training session history (fitness)
• History of completed mental sessions
• Match and tournament results
• Opponent sheets and tactical analyses
• Equipment: rackets, strings, hours of play

Health and nutrition data

• Height, weight, age, sex (metabolic calculations)
• Declared injuries (exercise adaptation)
• Food diary and meal photos (AI analysis)
• Daily hydration

Usage data

• XP points and progression (gamification)
• Notification preferences
• GDPR consents

3. Purposes of Processing

• Provide and personalize the Application's services
• Adapt training plans to your physical profile and injuries
• Calculate nutritional needs (BMI, BMR, TDEE)
• Generate tapering plans and tactical advice
• Analyze meals using artificial intelligence (GPT-4o Vision)
• Generate mental preparation audio sessions (TTS)
• Send personalized notifications (if authorized)

4. Legal Basis

• Explicit consent (health data, notifications)
• Performance of the contract (operation of the Application)
• Legitimate interest (service improvement)

5. Storage and Security

Most sports and nutrition data is stored locally on your device (AsyncStorage, SecureStore) for optimal offline use.

Data synchronized with the server is hosted on Hostinger servers located in the European Union.

Passwords are hashed using bcrypt. Authentication tokens are stored in the device's SecureStore.

AI analyses (nutrition, tactics) are processed through OpenAI's servers. No personally identifiable data is transmitted to these services.

6. Data Retention

• Account data: retained as long as the account is active
• Analysis videos: automatically deleted after 7 days
• TTS audio cache: deleted after 30 days
• Upon account deletion: all data is erased within 30 days

7. Your Rights (GDPR)

In accordance with the General Data Protection Regulation, you have the following rights:

• Right of access: view your data from the Privacy screen
• Right to rectification: edit your profile at any time
• Right to erasure: delete your account and all your data
• Right to data portability: export your data in JSON format
• Right to object: disable notifications and analytics

To exercise these rights, use the features built into the Application (Profile > Privacy & Data) or contact the DPO at: eact.pro83@gmail.com

8. Data Sharing

Your data is never sold or shared with third parties for commercial purposes.

The only data transfers concern:

• OpenAI: AI processing (meal analysis, coach, TTS) — anonymized data
• Google Play / App Store: payment processing (no banking data ever passes through our servers)

9. Cookies and Trackers

The mobile Application does not use cookies. Session data is managed via JWT tokens stored locally.

10. Account Deletion

You can delete your account and all of your data directly from the Application: Profile > Privacy & Data > Delete my account. You may also request deletion by email at eact.pro83@gmail.com — deletion takes effect within 30 days.

11. DPO Contact

For any question regarding your personal data: eact.pro83@gmail.com

You may also lodge a complaint with the French supervisory authority, the CNIL (www.cnil.fr).