Controller
Deep Platforms GmbH
Eschenriederstr. 24, 82194 Gröbenzell, Germany
Email: bo@deep-platforms.com
Core principles
- On‑device processing: Swing analysis runs locally on your device.
- Community optional: The Community requires an account; core features remain usable without one.
- Transparency: Community posts and interactions are visible to other users.
- No in‑app tracking SDKs: No advertising IDs or fingerprinting inside the app.
- Data minimization: We process only what is necessary to deliver features.
Categories of data
| Category | Description | Legal basis | Storage | Retention |
|---|---|---|---|---|
| Account & profile | Name, handle, email, avatar URL, auth provider (Apple/Google/Email), provider_sub, password hash (email login), age confirmation timestamp | Art. 6(1)(b) GDPR | Server (EU) | Until account deletion |
| Community content | Videos, captions, overlay flag | Art. 6(1)(b) | Server (EU) | Auto‑deleted after 14 days |
| Community interactions | Comments, replies, likes | Art. 6(1)(b) | Server (EU) | Until post or account deletion |
| Notifications | Inbox entries for likes, comments, replies | Art. 6(1)(b) | Server (EU) | Until post or account deletion |
| Support chat | Messages, category (question/feedback/bug), optional contact email, device ID, app version, timestamps | Art. 6(1)(b) | Server (EU) | As long as needed for support |
| Reports & moderation | Reported items, reason, reporter ID, IP, user agent | Art. 6(1)(f) / (c) | Server / email | As long as required |
| Server logs | IP address, timestamp, request path, user agent | Art. 6(1)(f) | Server (EU) | Short‑term for security |
| Local video/audio | Recorded or imported swing videos (optional audio) | Art. 6(1)(b) + device permissions | Only on device / user iCloud backup | Until deleted by user |
| Local analysis data | Pose points, angles, phase scores | Art. 6(1)(b) | On device | Until deletion |
| Subscription status | Receipt validation / access flag | Art. 6(1)(b) / (c) | Local flag; Apple holds transaction data | Ongoing verification |
| Diagnostics (optional) | Anonymous crash logs if iOS sharing enabled | Art. 6(1)(f) | Apple infrastructure | Apple rotation cycles |
Note: In the Community, name/handle, avatar, videos, captions, comments and likes are visible to other users. Uploads occur only when you actively share.
Purposes & legal bases
- Core features: recording, analysis, visualization (Art. 6(1)(b)).
- Community features: account, uploads, feed, comments, likes, inbox (Art. 6(1)(b)).
- Support & troubleshooting: support chat, replies, follow‑ups (Art. 6(1)(b)).
- Moderation & security: abuse prevention, reports, logs (Art. 6(1)(f)/(c)).
- Subscriptions: in‑app purchase verification (Art. 6(1)(b)/(c)).
- Consent: device permissions (camera, microphone, photo library) (Art. 6(1)(a)).
AI notice (EU AI Act): The app uses AI models for on‑device swing analysis. This analysis is informational and does not replace professional advice. In the support chat, replies may be generated by AI when enabled. No automated decisions with legal or similarly significant effects are made. You can request human support at any time (see Contact).
Community visibility
When you publish content in the Community, it is visible to other users. Please upload only content you are entitled to share and avoid sensitive personal data. You can report content or request early deletion.
Recipients / processors
- Hosting/servers: Hetzner Online GmbH (Germany) – hosting of API, database and video storage.
- Email (reports): Lima‑City (Germany) – delivery to info@deepswing.io.
- Support AI (optional): If AI‑assisted replies are enabled, support messages are sent to the configured AI provider (e.g., OpenAI or Google Gemini) to generate a response.
- Apple/Google: Social sign‑in providers are independent controllers.
Community content is shared with other Community users. We do not sell data or share it with advertisers.
International transfers
Apple/Google sign‑in and Google Analytics on the website may involve transfers outside the EU. These providers use their own safeguards (e.g., standard contractual clauses). If Support AI is enabled, processing by the respective AI provider may involve transfers outside the EU. We host Community data in the EU.
Retention
- Community posts: auto‑deleted after 14 days with related comments, likes and notifications.
- Account data: until account deletion.
- Support conversations: as long as needed for support and follow‑up.
- Logs: short‑term for security.
- Local data: until deleted by the user.
Delete account
You can delete your Community account in the app (Settings > Community Account > Delete account). We will remove your account, posts, comments, likes and notifications. Technical backups may persist for a limited time. You may also request deletion by email.
Your rights
You have the right to access, rectification, erasure, restriction, objection, and data portability. Contact: bo@deep-platforms.com.
Objection (Art. 21 GDPR)
Where processing relies on legitimate interest (security/moderation), you can object and we will review whether compelling grounds exist.
Security
- On‑device processing where possible.
- TLS‑encrypted transport for uploads and API access.
- Passwords are stored as hash + salt (never plain text).
- Access controls for production systems.
Website & analytics
The app does not use tracking SDKs. The marketing website (https://deepswing.io/) uses Google Analytics with IP anonymization for aggregated stats. You can opt out via the on‑site controls. See Google privacy information: policies.google.com/privacy.
Minors
The Community is intended for users aged 16 and above. If we learn of prohibited use, we may suspend the account and remove content.
Changes
We may update this policy; the latest version is available on this page.
Contact & complaints
Contact: info@deep-platforms.com. You can lodge complaints with your local supervisory authority.
Scope note
This policy reflects our current feature set. If additional cloud features are introduced, we will inform you before activation.