Privacy Policy

Last Updated: April 15, 2026

At CourtOracle, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and web services (collectively, the "Service"). By using the Service, you expressly consent to the collection, use, and disclosure of your information as described in this Privacy Policy. If you do not agree with this Privacy Policy, please do not use the Service.

1. Information We Collect

1.0 Voice Recording Upload Disclosure

When you record a voice session in the CourtOracle app, your audio file is uploaded to our secure servers (hosted on Google Cloud and Firebase) for processing. The audio is transcribed by OpenAI Whisper and analyzed by OpenAI GPT-4o through our AI coaching system, which consults six expert coaching frameworks to generate personalized insights. The recording, transcript, and AI analysis are stored in your account in Firebase Firestore. You may delete any individual session, or your entire account and all associated data, at any time from the Account page in the app. We do not upload any voice recording without your explicit in-app consent on first use, and OpenAI does not use your data to train their models.

1.1 Information You Provide

• Account Information: Name, email address, password
• Profile Data: Tennis skill level (NTRP), playing style, equipment preferences
• Session Data: Voice recordings, match scores, session notes, goals
• Payment Information: Processed securely through Stripe (we do not store credit card details)
• Shipping Information: For users claiming referral rewards, we collect shipping address (name, street address, city, state, zip code, country, phone number) to fulfill physical reward deliveries

1.2 Automatically Collected Information

• Usage Data: App interactions, features used, session frequency
• Device Information: Device type, operating system, app version
• Analytics Data: Performance metrics, crash reports (via Firebase)

2. How We Use Your Information

We use your information to:

• Provide personalized AI coaching insights and recommendations
• Analyze your voice recordings to generate session summaries
• Track your progress and performance over time
• Process subscription payments and manage your account
• Send important updates about your account or the Service
• Improve our AI models and Service features
• Detect and prevent fraud or abuse

3. How We Share Your Information

We do not sell your personal information. We may share your data with:

• Service Providers: Firebase (authentication, database, hosting), Google Cloud (AI processing, Cloud Functions, Cloud Run), Stripe (payments and subscription management)
• AI Processing: OpenAI for generating coaching insights (data is processed securely and not used to train their models)
• Legal Requirements: When required by law or to protect our rights

4. Data Security

We implement industry-standard security measures to protect your data:

• Encryption in transit (HTTPS/TLS)
• Encryption at rest for sensitive data
• Secure authentication via Firebase Auth
• Regular security audits and updates

However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

5. Your Rights and Choices

5.1 Access and Update

You can access and update your profile information through the Account page in the app.

5.2 Data Deletion

You can request deletion of your account and all associated data by:

• Using the "Delete Account" option in the app's Account page
• Contacting us via email (contact information at the end of this page)

Upon deletion, your data will be permanently removed within 30 days, except where retention is required by law.

5.3 Marketing Communications

You can opt out of promotional emails by clicking the unsubscribe link in any marketing email.

6. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. After account deletion, we may retain certain data for legal, tax, or regulatory purposes.

7. Children's Privacy and COPPA Compliance

CourtOracle welcomes tennis players of all ages, including junior players. We are committed to protecting the privacy of children and complying with the Children's Online Privacy Protection Act (COPPA).

7.1 Parental Consent Requirement

Users under 18 years of age may only use the Service with the prior consent and supervision of a parent or legal guardian. By creating an account for a user under 18, the parent or legal guardian represents that they have reviewed this Privacy Policy and our Terms of Service, consent to their child's use of the Service, and agree to be responsible for their child's activities on the Service.

For users under 13, we rely on the parental consent provided during account creation to comply with COPPA. Parents are responsible for ensuring that the information provided during account creation is accurate and for supervising their child's use of the Service.

7.2 Information We Collect from Children

With parental consent, we collect the following types of personal information from users under 18:

• Name, email address, and date of birth
• Parent or guardian's contact information (for users under 13)
• Voice recordings of tennis sessions (if the recording feature is used)
• Tennis session data (dates, opponents, scores, notes, and observations)
• Tennis skill level, playing style, and preferences
• Device identifiers and usage information necessary for app functionality

We collect only the information necessary to provide the Service's features and do not require children to provide more information than is reasonably necessary to participate in our Service.

7.3 How We Use Children's Information

We use personal information collected from users under 18 only for the following purposes:

• To provide the tennis journaling and coaching features of the Service
• To generate AI-powered coaching insights based on their tennis sessions
• To maintain, improve, and personalize the Service
• To communicate with parents about their child's account (for users under 13)
• To comply with legal obligations and protect the safety of our users

We do not use children's personal information for behavioral advertising, to build marketing profiles, or for any commercial purposes unrelated to providing the Service.

7.4 Disclosure of Children's Information

We do not sell, rent, or disclose children's personal information to third parties except in the following limited circumstances:

• Service Providers: We share information with service providers who perform services on our behalf (e.g., cloud storage providers like Firebase, AI processing services like OpenAI) and who are contractually obligated to protect the information and use it only for the purposes we specify
• Legal Compliance: We may disclose information to comply with legal obligations, enforce our Terms of Service, or protect the safety and rights of our users
• Parental Consent: We may disclose information with the explicit consent of the parent or legal guardian

Our service providers are carefully selected and required to maintain the confidentiality and security of children's personal information.

7.5 Parental Rights and Controls

Parents and legal guardians of users under 18 have the following rights:

• Review: Request to review the personal information collected from their child
• Delete: Request deletion of their child's personal information and account
• Refuse: Refuse to allow further collection or use of their child's information
• Revoke: Revoke consent at any time, which will result in deletion of the child's account and personal information
• Correct: Request correction of inaccurate information about their child

To exercise these rights, parents may contact us at kaden@court-oracle.com. We will verify the parent's identity before providing access to or making changes to any information. We will respond to all parental requests within a reasonable timeframe, typically within 10 business days.

7.6 Parental Consent Process

We obtain parental consent through the following process:

• During account creation, users provide their date of birth
• For users under 18, we require that a parent or legal guardian create the account on behalf of the child or provide consent for the child to create the account
• By creating an account for a user under 18, the parent represents that they have reviewed our Terms of Service and Privacy Policy and consent to their child's use of the Service
• For users under 13, we may require additional verification of parental consent, such as:
  • Email verification with follow-up confirmation
  • Credit card or payment method verification (in connection with subscription payment)
  • Signed consent form
  • Video conference verification

7.7 Data Retention for Children

We retain children's personal information only as long as necessary to provide the Service or as required by law. When a parent requests deletion of their child's information or revokes consent, we will delete the information from our active databases within 30 days, except where retention is required by law or necessary to resolve disputes or enforce our agreements.

7.8 Security of Children's Information

We implement reasonable administrative, technical, and physical security measures designed to protect children's personal information from unauthorized access, disclosure, alteration, or destruction. These measures include:

• Encryption of data in transit and at rest
• Access controls and authentication requirements
• Regular security audits and monitoring
• Secure cloud infrastructure (Firebase/Google Cloud Platform)
• Employee training on data privacy and security

However, no method of transmission over the internet or electronic storage is 100% secure. We cannot and do not guarantee absolute security of your information or your child's information. You acknowledge and accept the inherent security risks of providing information and data online, and you agree that we have no liability for any disclosure of information due to errors in transmission, unauthorized third-party access, or other causes beyond our reasonable control.

7.9 No Conditioning on Disclosure

We do not condition a child's participation in the Service on the child disclosing more personal information than is reasonably necessary to participate in the Service. We collect only the minimum information needed to provide the tennis journaling and coaching features.

7.10 Contact Us About Children's Privacy

If you are a parent or guardian and have questions about our children's privacy practices, wish to review your child's information, want to revoke consent, or want to request deletion of your child's account, please contact us via email (contact information at the end of this page).

We will respond to all parental inquiries within a reasonable timeframe, typically within 10 business days.

8. Data Security Disclaimer

WHILE WE IMPLEMENT REASONABLE SECURITY MEASURES, WE MAKE NO WARRANTIES, EXPRESS OR IMPLIED, REGARDING THE SECURITY OF YOUR INFORMATION. You acknowledge that:

• No data transmission over the internet or wireless network can be guaranteed to be 100% secure
• Any information you transmit through the Service is done at your own risk
• We are not responsible for circumvention of any privacy settings or security measures
• We cannot guarantee that unauthorized third parties will never be able to defeat our security measures or use your information for improper purposes
• You are responsible for maintaining the confidentiality of your account credentials

TO THE MAXIMUM EXTENT PERMITTED BY LAW, WE DISCLAIM ALL LIABILITY FOR ANY UNAUTHORIZED ACCESS TO, DISCLOSURE OF, OR LOSS OF YOUR PERSONAL INFORMATION.

9. International Data Transfers

Your data may be transferred to, stored, and processed in the United States or other countries where our service providers operate. These countries may have data protection laws that are different from the laws of your country. By using the Service, you expressly consent to such transfers and acknowledge that your information may be subject to access by law enforcement and other government entities in accordance with the laws of those jurisdictions.

10. Third-Party Links and Services

The Service may contain links to third-party websites, services, or content (including YouTube videos). We are not responsible for and do not endorse the privacy practices, content, or services of any third parties. Your interactions with third-party websites and services are governed by their own privacy policies and terms of service. We encourage you to review the privacy policies of any third-party websites or services before providing them with your information. We disclaim all liability for any damages or losses arising from your use of third-party websites or services.

11. Data Retention and Deletion

We retain your personal information for as long as necessary to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. Even after you request deletion of your account:

• We may retain certain information as required by law or for legitimate business purposes
• Backup copies may persist for a reasonable period of time
• Anonymized or aggregated data may be retained indefinitely
• Information may remain in our systems for up to 90 days during the deletion process

We make no guarantees regarding the complete or immediate deletion of all your information from all systems.

12. Limitation of Liability

TO THE MAXIMUM EXTENT PERMITTED BY LAW, COURTORACLE SHALL NOT BE LIABLE FOR ANY DAMAGES ARISING FROM:

• Any unauthorized access to or disclosure of your personal information
• Any errors or inaccuracies in the information we collect or store
• Any loss or corruption of data
• Any failure to comply with this Privacy Policy due to circumstances beyond our reasonable control
• Any actions of third-party service providers

IN NO EVENT SHALL OUR TOTAL LIABILITY FOR ALL PRIVACY-RELATED CLAIMS EXCEED THE AMOUNT YOU HAVE PAID TO US IN THE THREE (3) MONTHS PRECEDING THE EVENT GIVING RISE TO LIABILITY, OR TWENTY-FIVE DOLLARS ($25.00), WHICHEVER IS LESS.

13. Changes to This Privacy Policy

We reserve the right to modify, amend, or update this Privacy Policy at any time in our sole discretion. We will provide notice of material changes by posting the updated Privacy Policy on the Service and updating the "Last Updated" date. For significant changes, we may also notify you by email or through a prominent notice in the Service. Your continued use of the Service after any changes to this Privacy Policy constitutes your binding acceptance of the updated Privacy Policy. If you do not agree to the modified Privacy Policy, your sole remedy is to stop using the Service and request deletion of your account. We recommend that you review this Privacy Policy periodically for any changes.

14. Dispute Resolution

Any disputes arising from or relating to this Privacy Policy or our data practices shall be subject to the dispute resolution provisions set forth in our Terms of Service, including the mandatory binding arbitration clause and class action waiver. By using the Service, you agree to resolve any privacy-related disputes through individual binding arbitration rather than through court proceedings or class actions.

15. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

Email: kaden@court-oracle.com

Please note that we provide support on a best-effort basis and do not guarantee response times or resolution of privacy inquiries.