Privacy Policy

Effective: April 2, 2026 · Last updated: July 22, 2026

1. Information We Collect

1a. Account Information

When you create an account, we collect your email address, used for magic-link sign-in. During setup you may provide a display name and indicate which player you are in your game data, so we can show you the right stats; a display name can be a nickname or initials and is shown to other users on social features. You may also upload an optional profile photo (avatar). If you enable push notifications, we store a device push token so we can deliver them. To apply the correct age-based protections, we establish your age band at signup — on supported Apple devices from an Apple-provided age range (an age range, not a date of birth), and otherwise from a date of birth you enter (see Section 10). We do not require your phone number or physical address. Payment information is handled entirely by Stripe; we do not store or process credit card numbers or banking information.

1b. Game Data

When you log a match manually, the score and game data are sent to our secure API and stored in your personal cloud account. When you submit a recorded match for analysis, the video (including its audio track) is sent to PB Vision (a third party that processes it under its own terms, see Section 6) for computer-vision analysis; we store the returned analysis (ratings, statistics, coaching insights, shot data) and, for Broadcast, the video, delivered through our video-streaming provider, Mux, so you can replay, analyze, and share it across devices.

1c. Imported Games (Bring Your History)

PointIQ lets you import games you have already recorded or had analyzed elsewhere — including games processed by PB Vision — by sharing or pasting a game link, emailing it to your personal import address, or uploading a file. We retrieve the analysis and metadata for that game from the original source (e.g. PB Vision) and store it in your personal library, the same way as your other game data.

Imported games may include information about other players who appear in the game (for example, names you or the original source tagged, and performance data). By importing a game, you confirm that you have the rights and any consents needed to bring that content into PointIQ (see our Terms of Service, Section 8a). If a depicted individual asks to be removed, or you no longer have the right to keep imported content, you can delete the game from your library at any time, or contact us at support@vibral.org and we will remove it. Imported games are covered by the same access, export, and deletion rights described in Section 7.

1d. Technical & Usage Data

We use privacy-preserving, first-party product analytics (PostHog) and error and crash monitoring (Sentry) to understand how the Service is used and to find and fix bugs. We do not use advertising trackers, tracking pixels, advertising cookies, cross-app or cross-site ad tracking, or device fingerprinting. These tools receive only a hashed account identifier (never your email, name, or plaintext address), the in-app events you trigger, and scrubbed error diagnostics. Before anything is sent, we remove names, email, opponents, venue names, location coordinates, access tokens, and any video, images, avatars, or biometric or computer-vision data. Session replay (screen recording) is disabled, and internal and complimentary accounts are excluded. Our public website also uses Cloudflare Web Analytics, a cookieless service that measures aggregate page views and site performance (page views, load times, referrer, and country-level location) without cookies, and it does not fingerprint devices or track you across sites (see Section 6). Our video player also collects playback-quality diagnostics (see Section 8).

We also collect minimal server-side data for security and operational purposes: IP addresses in request logs (retained for up to 30 days), request timestamps, and error logs. This data is used solely for abuse prevention, rate limiting, and debugging.

2. How We Use Your Information

• Authentication: Your email is used to send magic link sign-in emails. We do not send marketing, promotional, or newsletter emails unless you explicitly opt in to such communications in the future.
• Service delivery: Your game data is stored and processed to provide dashboard analytics, coaching priorities, matchup scouting, performance tracking, and drill recommendations.
• Security: We use rate limiting, session management, and server logs to protect your account and the Service from unauthorized access and abuse.
• Product improvement: We use anonymized, aggregated data (see Section 5) to improve the Service, develop new features, and train machine learning models. We also use scrubbed analytics and error data (Section 1d) to understand how features are used and to fix problems.
• AI features: If you use AI chat or AI coaching, the relevant game statistics and your question are sent to a third-party AI provider to generate a response.
• Game import: If you use the email import feature, we process the content of emails sent to your personal PointIQ inbox address (games+{token}@inbound.vibral.org) solely to extract PBVision game links and import them to your library. Email content is not stored beyond the import transaction.

3. Data Storage & Security

Your data is stored in Cloudflare R2 object storage, distributed across Cloudflare's global edge network. Your email address is hashed using SHA-256 to create your storage namespace — your plaintext email is not visible in storage keys or file paths.

Sessions are managed via HttpOnly, Secure cookies that expire after 30 days. Magic link tokens are single-use and expire after 15 minutes. All data is transmitted over HTTPS/TLS.

While we implement reasonable security measures, no system is perfectly secure. We encourage you to use a secure email account for authentication, as your email inbox is the primary access vector to your PointIQ account.

If you use the email import feature, you are assigned a personal inbox address (games+{token}@inbound.vibral.org) where {token} is a unique opaque identifier. This address is not tied to your personal email address in storage and can be rotated by contacting us.

If a security incident affects your personal information, we will notify you and the relevant authorities as required by applicable law.

4. Data Processing

Logged-match analytics (trends from your manually-entered games) are computed by our secure API. Recorded-match analysis (coaching insights, shot accuracy, ratings, matchup scouting, heatmaps, drill recommendations) is produced by PB Vision's computer-vision processing of the match video (including its audio); PB Vision is an independent provider operating under its own terms (see Section 6). We store and display the results, and — for Broadcast — the video. Earlier versions of this policy described all analysis as client-side and never uploaded; that no longer applies to recorded video, which is uploaded to PB Vision for analysis.

Structured output (processed statistics, computed ratings, shot records) is synced to your personal cloud storage so it is available across your devices.

5. Anonymized & Aggregated Data

We may create anonymized, aggregated, de-identified datasets derived from usage of the Service. This process involves:

• Removing all personally identifiable information (email, account IDs, player names)
• Hashing or discarding any identifiers that could be used to re-identify individuals
• Aggregating data across many users so individual patterns cannot be isolated

We use this anonymized data to improve the Service, develop features (such as benchmarks, percentile rankings, and skill-level analytics), train machine learning models, and conduct internal research. We do not currently share these insights outside PointIQ. If we do so in the future, any sharing will be limited to aggregated, de-identified insights (for example, equipment and gear trends across many players), which may have commercial value; it will never include biometric identifiers or anything reasonably capable of identifying you; we will apply a minimum population threshold so no individual can be singled out; and any partner receiving such insights must commit not to attempt to re-identify them.

PointIQ does not sell or license personal data for money or use personal data for targeted or cross-context behavioral advertising. We disclose identifiable data only as described in Section 6. Anonymized data is maintained in a de-identified form that is not reasonably capable of being associated with any user. We commit not to attempt to re-identify de-identified data. This right is described in our Terms of Service (Section 3c).

6. Data Sharing

We do not sell personal data for money or disclose personal data for targeted or cross-context behavioral advertising. We disclose information only as needed to operate the Service, with providers in two categories. Service providers act on our instructions (Cloudflare, Resend, Mailgun, Stripe, Mux, PostHog, Sentry, our AI provider, and push-notification services). Independent services operate under their own terms and make their own decisions about the data they receive (PB Vision, and the Apple and Google app stores). The current providers are:

• Cloudflare: Our infrastructure provider that hosts data storage, the API, and the website. Subject to Cloudflare's Privacy Policy.
• Cloudflare Web Analytics: Cookieless, aggregate measurement of page views and site performance on our website (page views, load times, referrer, and country-level location). It sets no cookies and does not fingerprint devices or track you across sites. Subject to Cloudflare's Privacy Policy.
• Resend: Our email delivery provider, used solely to send authentication emails (magic links). Subject to Resend's Privacy Policy.
• Stripe: Payment processing for paid subscriptions. We pass only the information Stripe requires to complete the transaction. Subject to Stripe's Privacy Policy.
• Mailgun: Email delivery infrastructure for the game import feature. Processes inbound emails sent to your personal PointIQ inbox address. Subject to Mailgun's Privacy Policy.
• PB Vision (Pickleball Vision AI, Inc.): Computer-vision analysis of pickleball game video. When you record a match through PointIQ, we transfer the video (including its audio) to PB Vision for analysis; when you import a PB Vision game, we retrieve the analysis and metadata for that game from PB Vision so it can appear in your library. PB Vision is an independent service: it processes video under its own terms, which permit it to use uploaded content to improve its machine-learning models and to retain videos under its policies after deletion. Its handling of video is governed by PB Vision's terms of service and privacy policy at pb.vision.
• PostHog: First-party product analytics that records which features are used and how the Service performs, so we can improve it. It receives only scrubbed, hashed event data (no names, email, location, video, or biometric data). Subject to PostHog's Privacy Policy.
• Sentry: Application error and crash monitoring, so we can detect and fix problems. It receives only scrubbed diagnostic data with personal and biometric information removed. Subject to Sentry's Privacy Policy.
• Third-party AI provider: Powers the optional AI chat and AI coaching features. When you use them, only the relevant game statistics and the question you ask are sent; no email, name, video, or images. Our AI provider processes this data only to generate the response and is contractually prohibited from using it to train its models.
• Mux: Video hosting and streaming used to play back recorded match video. Subject to Mux's Privacy Policy.
• Apple Push Notification service / web push: If you enable notifications, your device push token is used to deliver them. Subject to the applicable platform's privacy policy.
• Apple App Store / Google Play: Distribution of the iOS and Android apps and, if you enable notifications, push delivery (device push token). Your use of apps downloaded through these stores is also subject to Apple's and Google's respective terms.
• Server-side directory data: We use Google Places and OpenStreetMap to build our venue directory (no user personal data is sent) and Google Fonts to serve web fonts, which exposes your IP address to Google as any web request does.

We may also disclose information if required by law, legal process, or government request, or to protect the rights, safety, or property of Vibral or others.

7. Your Rights

You have the right to:

• Access: Your full game data and analytics are accessible through the app at any time.
• Export: You can export your game library and data from the app.
• Correction: Contact us to correct any inaccurate account information.
• Deletion: Contact us at support@vibral.org to request deletion of your PointIQ account and the personal data controlled by PointIQ. We will process verified deletion requests within 30 days. We will delete the applicable data from our systems and instruct service providers acting on our behalf — including our video-streaming and analytics providers — to delete the corresponding data from their systems. If a video has already been submitted to PB Vision, we will also send PB Vision a request identifying the video for deletion. PB Vision is an independent service that controls its own retention practices and may retain previously processed video under its own terms, including for model improvement; we cannot guarantee deletion from PB Vision's systems unless PB Vision confirms that it has completed the request (see Sections 6, 9a, and 12).
• Portability: You may request a copy of your data in a standard machine-readable format.

We honor the rights above for all users, regardless of where you live. Depending on your location, local law may give you additional rights; contact us at support@vibral.org and we will apply the law that protects you.

8. Cookies & Similar Technologies

We use a small number of cookies and similar technologies, none of them for advertising:

Sentry, our error-monitoring tool, sets no cookies. We do not use advertising cookies, cross-site tracking cookies, tracking pixels, or ad networks, and we do not engage in cross-app or cross-site advertising tracking. You can clear or block cookies in your browser settings; blocking the essential cookie will prevent sign-in.

Do Not Track and Global Privacy Control. Some browsers send “Do Not Track” or Global Privacy Control signals. Because we do not use personal data for targeted or cross-context behavioral advertising and set no advertising or cross-site tracking cookies, there is no advertising-related processing for these signals to disable. We nevertheless recognize and honor legally effective opt-out preference signals where required by applicable law.

9. Recorded Video, Broadcast, Geo-Privacy, Sharing & Provisional Accounts

9a. Recorded Video & PB Vision

When you submit a match video for analysis, it (including its audio track) is transferred to PB Vision (a third-party provider operating under its own terms) for computer-vision analysis. By submitting a recorded match, you confirm you have the consents described in our Terms of Service (Section 8a) from everyone shown in the video. Recorded-match analysis is not available to account holders under 18; manual match logging, social features, and The Run remain fully available. We store the returned analysis (shot data, ratings, statistics) and, for Broadcast, the video itself — delivered via Mux, our video-streaming provider — so you can replay and share it. PB Vision's handling of the video is governed by its own privacy policy at pb.vision, which permits PB Vision to retain uploaded video under its terms, including to improve its models, even after you delete the game or your account. We retain our copies of recorded video and its analysis while your account is active; you can delete a recorded game at any time, or request deletion at support@vibral.org.

9b. Broadcast — Display & Sharing of Derived Data

The Broadcast feature overlays AI-derived data (score, shot type, ball speed, court position) on a tracked match's video and lets you share it to your feed or externally. This means data derived from computer vision of identifiable players is displayed and, when you choose to share, distributed. These outputs are AI-assisted estimates (labeled “AI-assisted · player-confirmed”) and may contain errors. Before a Broadcast is shared publicly, our consent step asks you to confirm permission for each named player, lets you flag anyone else visible, and requires you to confirm whether anyone shown is under 18. Anyone not confirmed appears as “Player N” with their name, profile link, and attributed stats removed; anyone under 18 is always anonymized. Faces in the video are visible, we do not blur them, and the shared video includes the match audio. When you share a Broadcast that shows other players, you are responsible for any consent required for their likeness (see our Terms of Service); any depicted player may request removal at support@vibral.org, and we will act on verified requests within 7 business days.

9c. Geo-Privacy & Venue Boards

We use approximate location to tag the venue/court you play at and to enable opt-in venue features. A venue's location is the public location of a business or court and may appear on venue posts and on feed posts tied to that venue. Your personal, device-level GPS coordinates are never shown to other users — only the venue name. We distinguish a venue's public location (which may be displayed) from your device's precise location (which is not). Your name appears on a public venue board only if you enable “Show your name on public venue boards” (off by default), and public rosters are suppressed until enough players at a venue opt in. You always see your own row.

9d. Sharing & Visibility Defaults

Posts carry the visibility you set (private / Crew / public). A new user's first post defaults to a safe setting (Crew or private, never public), and that first choice sets your go-forward default. Venue-authored posts are public by design (the venue broadcasting to its page) and do not read your personal privacy settings.

9e. Provisional Accounts (The Run)

When you scan into a venue event (“The Run”) without an account, we create a provisional profile — the display name you enter and the skill stack you tap, plus (only if you choose) a contact for your result — so you can play. You can claim it into a full account; if a provisional profile is never claimed, we delete it within 90 days. You can request deletion of an unclaimed profile at support@vibral.org.

9f. Other Players' Data (Tagging, Guests, The Run & Broadcast)

Some activity on PointIQ involves other people — partners and opponents you tag in a logged match, a guest player added at a venue event, or people shown in a Broadcast. To protect people who may not be PointIQ users:

• When you log a match and tag non-users, the match specifics (scores, who won or lost) are part of your private record, visible only to you and, if you choose, your followers — not published broadly as a win/loss record attributed to a named non-user.
• The Run leaderboard shows each participant's relative performance contribution (which can move in either direction), not a public win/loss record tied to a named non-participant.
• When a Broadcast is shared publicly, the sharer confirms permission for each named player; anyone not confirmed appears only as “Player N” with their name, profile link, and attributed stats removed (faces in the video are not blurred). A PointIQ user can also set their account so they are never named in other users' public Broadcasts.
• A person who is named or depicted but is not a PointIQ user may request removal of that information by emailing support@vibral.org. Copies already re-shared outside PointIQ (for example on other social platforms) are beyond our systems, but we will remove our copy and disable our link.

10. Children's Privacy

PointIQ is intended for users 13 and older (or the higher minimum age that applies where you live). At signup we establish your age band and lock it; accounts below the applicable minimum age are blocked from the Service, and accounts whose age band has not yet been established remain non-discoverable until it is (see “How We Determine Your Age” below). We do not knowingly collect personal information from children under 13 (COPPA). Users aged 13–17 are handled with additional restrictions (not discoverable, no public venue boards) and we do not build behavioral profiles of minors. For users we know to be under 18, we limit our processing to what is needed to provide the Service and keep it safe: they are excluded from our product-analytics identifiers (see Section 1d), we do not build behavioral profiles of them, and we never sell their data. A parent or guardian may contact support@vibral.org with questions about their child's account or to request deletion of their child's information. California residents under 18 may request removal of content they posted; you can also delete your own posts directly in the app. If you believe a child under 13 has created an account or provided us with personal information, please contact us immediately at support@vibral.org and we will delete the account and data.

How We Determine Your Age (Apple Declared Age Range)

On supported Apple devices (iOS 26 and later), PointIQ may use Apple's Declared Age Range API to determine the age range applicable to your account. In that case, Apple provides PointIQ with an age range — not your date of birth — and, where available, an indication of whether that age range was declared by you or by a parent or guardian (for example, through Family Sharing). PointIQ uses this information solely to determine your age band and apply the corresponding eligibility, privacy, and safety controls — for example, preventing account creation by children under 13 and applying age-appropriate restrictions for minors. It is not used for advertising or tracking, is not shown to other users, and is not shared with advertising or analytics providers. Where an Apple age range is unavailable (on the web, on earlier iOS versions, or when you are not signed in to an Apple Account), PointIQ instead presents a neutral date-of-birth screen for the same purpose. We do not request both an Apple age range and a date of birth from the same person to determine the same age band; where more than one age signal exists, we apply the more protective (younger) result.

11. International Data Transfers

PointIQ is operated from the United States and is directed to users in the United States. Your data is processed and stored in the United States. Content delivery uses Cloudflare's global network, which may cache data at edge locations closer to you. If you use the Service from outside the United States, your data will be transferred to and processed in the United States.

12. Data Retention

We retain account and game data while your account is active. Following an ordinary account-closure request, we may retain a restricted recovery copy for up to 30 days in case the closure was accidental, after which it is permanently deleted from our systems; residual backup copies are isolated from ordinary use and purged on our normal backup cycle unless retention is required by law. If you submit a verified request to exercise a statutory deletion right, we will process that request within the period required by applicable law and will not retain an active recovery copy after confirming completion. Deleting your account also triggers deletion of your analytics profile with our analytics provider and your video assets with our streaming provider. Content already processed by PB Vision may be retained by PB Vision under its own terms (see Sections 6 and 9a). Server logs are retained for up to 30 days. Analytics cookies persist for up to 365 days (see Section 8). Anonymized, aggregated data is retained indefinitely.

13. Changes to This Policy

We may update this policy from time to time. When we make material changes, we will notify you via email or through the app at least 14 days before the changes take effect. The "Last updated" date at the top of this page reflects the most recent revision.

14. Contact

Questions or concerns about this Privacy Policy or your data? Contact us at support@vibral.org.

PointIQ is operated by Vibral.