CourtIQ Privacy Policy
Last updated: May 2026
CourtIQ (“we”, “us”) is a tennis IQ and training app published by Can Ayan, established in the Republic of Ireland. This policy explains what data we collect, why, and how you can control it. We are the data controller of your personal data under the EU General Data Protection Regulation (GDPR) and the Irish Data Protection Act 2018.
We do not sell personal data, and we use only the data needed to run the app.
If you have questions, contact us at privacy@courtiq.app.
1. Data we collect
- Account info when you sign in with Apple: your Apple-provided user identifier, an optional email (you can hide it), and an optional display name.
- Profile preferences you set in onboarding: skill level, training frequency, focus area, language.
- Community content you post: tip comments, training discussion replies, and reports you file on other users’ content.
- Support and feedback content you send via in-app feedback or email.
- Usage data: which quizzes you complete, your streak, training sessions you mark done, mobility flows you start, weekly check-ins you submit. Stored locally on your device and (if signed in) synced to your CourtIQ account.
- Device diagnostics (TestFlight and production): aggregated crash reports, hangs, and CPU/disk metrics provided by Apple’s MetricKit framework. Used to fix bugs and improve performance. Not linked to your identity.
- App version, iOS version, device model, locale: included automatically in any feedback email you choose to send.
- Apple App Store / StoreKit: subscription status (active / lapsed / refunded). Apple does not share your payment details with us.
d. What we do NOT collect
- Your contacts, photos, location, microphone, camera, health data, or facial data.
- Your Apple ID password or payment instruments.
2. How we use data
| Purpose |
Data used |
| Run the app’s core features (quizzes, training, profile) |
Profile preferences, usage data |
| Sync your progress across devices |
Account info, usage data |
| Process and verify subscriptions |
StoreKit subscription status |
| Moderate community comments |
Community content, reports |
| Diagnose crashes and improve performance |
Device diagnostics, app version |
| Respond to your support requests |
Information you give us |
We do not use your data for advertising, profiling, or sale to third parties.
3. Where data is stored
- On your device: SwiftData local database — your progress, preferences, cached content.
- Our backend (Firebase / Supabase): only the data needed to sync your account across devices and to support community features.
- Apple’s infrastructure: subscription receipts and Sign in with Apple identifiers, governed by Apple’s privacy policy.
We retain account data while your account is active. When you delete your account (Profile → Delete account), we delete server-side records within 30 days. Local data is wiped immediately.
4. Your rights
You can:
- See your data — most of it is shown in the app (Profile, Progress, History tabs).
- Export your data (right to access / data portability) — email privacy@courtiq.app and we’ll send a copy within 30 days.
- Correct inaccurate data (right to rectification) — email us.
- Delete your data (right to erasure / “right to be forgotten”) — Profile → Delete account, or email us.
- Restrict or object to processing — email us with the specifics.
- Reset local data without deleting your account — Profile → Reset local data.
- Withdraw consent at any time — sign out, switch to guest mode, or delete the app. Withdrawing consent does not affect the lawfulness of prior processing.
Lodging a complaint
If you believe we have processed your personal data unlawfully, you have the right to lodge a complaint with a data protection authority.
- Our lead supervisory authority is the Irish Data Protection Commission (DPC), 21 Fitzwilliam Square South, Dublin 2, D02 RD28, Ireland. Web: https://www.dataprotection.ie. Phone: +353 (0)761 104 800.
- If you live in the EU/EEA, you may also contact your national data protection authority.
- If you live in the UK, you may contact the Information Commissioner’s Office (ICO): https://ico.org.uk.
- If you live in California, the California Consumer Privacy Act (CCPA) gives you additional rights — write to us and we will honor them.
Legal bases for processing (GDPR Art. 6)
We rely on the following legal bases:
- Contract performance (Art. 6(1)(b)) — to run your account, deliver subscription content, sync progress, and process purchases.
- Legitimate interests (Art. 6(1)(f)) — to keep the app secure, prevent fraud and abuse, improve performance via aggregated crash/diagnostic data, and moderate community content. You can object at any time.
- Consent (Art. 6(1)(a)) — for anything that requires it explicitly (currently nothing beyond the health & safety acknowledgment).
- Legal obligation (Art. 6(1)(c)) — to comply with tax, financial, and regulatory requirements.
5. Children
CourtIQ requires users to be at least 16 years old — the strictest GDPR consent threshold. We do not knowingly collect data from anyone under 16. If you believe a child has signed up, contact privacy@courtiq.app and we will delete the account.
6. Third parties we use
| Service |
Purpose |
Their privacy policy |
| Apple Sign In |
Authentication |
https://www.apple.com/legal/privacy/ |
| Apple StoreKit |
Subscription billing |
https://www.apple.com/legal/privacy/ |
| Apple MetricKit |
Aggregated crash/performance reports |
https://www.apple.com/legal/privacy/ |
| Firebase / Supabase |
Account sync, content delivery |
(link to provider’s policy) |
We do not use third-party advertising SDKs.
7. Security
We use TLS in transit and encryption at rest where supported. No system is perfectly secure; if we discover a breach affecting your data, we will notify you and the relevant authorities as required by law.
8. Changes to this policy
We may update this policy as the app evolves. Material changes will be announced in-app before they take effect. The “Last updated” date at the top reflects the most recent revision.
9. International data transfers
Some of our service providers (e.g. Apple, Firebase / Supabase if used) may process your personal data outside the European Economic Area. Where this happens, we rely on the safeguards published by those providers — typically the European Commission’s Standard Contractual Clauses or an applicable adequacy decision. You may request details of these safeguards by emailing privacy@courtiq.app.
privacy@courtiq.app
Can Ayan
Dublin 4, Ireland
Republic of Ireland
(We are not yet required to appoint a Data Protection Officer under GDPR Art. 37. If that changes, we will update this policy with the DPO’s contact.)