Privacy Policy

Effective date: 2026-08-06 · Operator: Latuvo (operated from Romania) · Contact: [email protected]

This privacy policy explains what data Latuvo handles, why, and what you can do about it. It's written to be read — no legal scaffolding for its own sake. If a section is unclear, write to the email above and we'll fix it.

The short version

Latuvo is local-first. There is no account, no login, and no Latuvo server. Everything you do in the app — your matches, the opponents you log, your optional display name, and any Apple Health data — is stored on your device and synced across your own Apple devices through your private iCloud. It never reaches us, and neither do crash diagnostics (captured on-device via Apple's MetricKit). The one thing that does leave the device is anonymous, aggregate usage analytics (via TelemetryDeck) — it carries no personal data and cannot identify you; see “Usage analytics” below.

Because we don't run a server and don't have accounts, most of a traditional privacy policy simply doesn't apply: we hold no email, no password, no profile, and no copy of your match history.

Who Latuvo is for

Latuvo is a general-audience tennis-tracking app. It does not ask for your age and imposes no age restriction; we never ask you to enter your date of birth. (If you grant Apple Health access, the app may read your date of birth from HealthKit to estimate heart-rate zones — that read happens on your device only and is never sent to us; see "What stays on your device" below.) Because we operate no server and collect no personal data centrally, Latuvo does not knowingly process data about children (or anyone) on its own systems — your data stays in your own Apple account.

What stays on your device (and your private iCloud) — not collected by us

The following never leaves your control. It lives in the app's on-device store and is mirrored to your own private iCloud (Apple's CloudKit) so it's available on your other Apple devices. Latuvo, the operator, does not receive, store, or have access to any of it: your match results (score, sets, opponent, court, surface, format, date); per-match stats (aces, winners, hold %, and similar, from watch-tracked matches); your form and trends (win-loss, streaks, and stat trends derived from your own matches on your device); an optional display name you can set for yourself or skip; the names you type for the people you log matches against, together with any private note you choose to add about them; and Apple Health data (heart rate, active calories, distance, and stride length read during a watch-tracked match, used for your post-match recap). Your date of birth is also read from Apple Health (read-only, never stored) to estimate your heart-rate zones for that recap; only the resulting zone figures are saved with each match.

iCloud sync uses your own Apple account; Apple processes it under Apple's privacy policy, the same way it stores your other app data. We cannot see it. Apple's HealthKit permission controls Health access; revoke it any time in the Health app under Sharing → Apps → Latuvo.

Crash diagnostics (on your device)

Latuvo captures crash and hang diagnostics on your device using Apple's MetricKit, purely to help us spot bugs — and it does not transmit them anywhere. There is no third-party crash SDK and no Latuvo server to receive them. If you have turned on Apple's "Share With App Developers" setting (Settings → Privacy & Security → Analytics & Improvements), iOS itself may send anonymized crash reports to us through Apple's standard developer channel under Apple's terms — that is an Apple, OS-level, opt-in mechanism, not something Latuvo collects or controls.

We do not collect: your email, password, or gender (there is no sign-up); your IP address as a stored identifier; your contacts; your photo library — your avatar is your initials, never a picture, and the shot clips you choose to save stay on your device only (see "Shot clips" below); your location; cross-app or cross-website tracking profiles; or advertising identifiers (IDFA). (We do use privacy-first, anonymous usage analytics — see “Usage analytics” below.) We do not show ads, do behavioural profiling, build advertising audiences, sell your data, or operate any rating/leaderboard that compares you to other users.

Shot clips (camera, on-device only)

The optional Shot clips feature uses your device camera to record short slow-motion clips of your swing. While you record, frames are analyzed on your device using Apple Vision (anonymous stick-figure pose detection) — solely to find the swing and suggest where to cut. That analysis stays in memory and is discarded. The temporary full recording is kept only while you review the take and decide where the clip should be cut: it is deleted the moment you save, retake, or leave the screen. If the app is interrupted before that (a crash, or the phone reclaiming it), the recording is removed the next time you open the camera, and "Delete all data" removes it too. Nothing is kept unless you tap Save.

If you save a clip, the trimmed video and a small thumbnail are stored on your device only: they are never uploaded anywhere (there is no server), are not synced to iCloud, and are excluded from device and iCloud backups. Latuvo keeps at most your 50 most recent clips — saving past that limit automatically deletes the oldest. You can delete any clip in the app at any time, and "Delete all data" erases them all. Your data export (Profile → Export My Data) lists your saved clips (shot type, date, duration); the video files themselves stay on your device, and you can share a clip yourself whenever you choose. Camera access is used only while you record — revoke it any time in Settings → Privacy & Security → Camera.

Opponents you log who aren't Latuvo users

Latuvo lets you log a match against anyone, including someone who doesn't use Latuvo. You type their name, and you can optionally add a private note about them; all of it is stored as part of your match history. That name — and any note you add — is personal data about another person that you provided (GDPR Art. 14, "data not obtained from the data subject"). The crucial point under our local-first design: that name is stored only on your device and in your own private iCloud — it is never transmitted to Latuvo, never reaches any Latuvo server (there is none), is visible only to you, and is never searchable, shared, enriched, or used to build a profile or rating. We do not look the person up or contact them. Lawful basis: Art. 6(1)(f) — legitimate interest in keeping an accurate personal record of matches you actually played, weighed against the logged person's interests: the data is minimal, private to your own device/iCloud, and never used to contact them or make any decision about them. If you'd rather not store a real name, use a nickname or initials. Because the name lives only on your device/iCloud and not on our systems, you remove it: delete the match in the app (open the match → Delete). A paired Apple Watch keeps no copy of a finished match — once the watch has handed the result to your iPhone it discards its own copy — so there is nothing left to remove there. If you also saved that person to your Players roster — or added a private note about them — that saved entry is separate from the match and is not removed by deleting the match: once no matches against them remain, open Players → their profile → Remove from roster to erase their saved name and note too (or use Profile → Delete all data to wipe everything at once). If a match is still in progress on the watch, finish or discard it there too so its opponent name is removed from the watch's own session. One exception: if you opted into a calendar reminder when scheduling, that reminder is saved as an event in your own Calendar (under Apple's terms) — Latuvo has write-only Calendar access and can't reach it again, so deleting the match in the app doesn't remove it; delete that event in the Calendar app too. We cannot remove it for you — we never had a copy. If a logged person contacts us at [email protected], we will explain this and, where helpful, how the person who logged them can delete the entry.

How long data is kept

Your matches, names, and Health data (on device + your iCloud) are kept as long as you keep them: delete a match in the app, or delete the app and its iCloud data, to remove it — we hold no copy to retain or purge. Saved shot clips stay on your device until you delete them; only your 50 most recent clips are kept (older ones are deleted automatically), and "Delete all data" removes them all. Crash diagnostics are captured on your device only (MetricKit) and cleared by the system over time; any reports Apple forwards (if you opted into "Share With App Developers") follow Apple's own retention. One thing deliberately survives "Delete all data": the running count of how many watch-tracked matches you have used against the free allowance. It lives in your iCloud keychain and holds no name, score, or match content — only that number — so the free allowance cannot be reset by deleting your data or reinstalling the app.

Who we share data with (sub-processors)

Because we collect almost nothing, the list is short. Apple (App Store, iCloud/CloudKit, HealthKit, and — only if you opted into "Share With App Developers" — OS-level crash reporting) provides app distribution, stores your app data in your own private iCloud, and provides on-device HealthKit access; that match, Health, and name data is held in your own iCloud account under Apple's terms and is not accessible to Latuvo, and HealthKit data stays on-device. TelemetryDeck (TelemetryDeck GmbH, Germany) provides privacy-first, anonymous usage analytics for the app and this website — see “Usage analytics” below; it receives anonymous, aggregate usage data only and processes it in the EU. Beyond Apple and TelemetryDeck, we do not use, and share nothing with: advertising networks; ad-tech or profiling analytics, or crash-reporting providers (Mixpanel, Amplitude, Segment, Google Analytics, Firebase Crashlytics, and the like — none); insurance or health providers; tennis federations, ranking systems, or coaching services. We do not run a hosting/database backend at all. We will disclose data only when required by a valid court order from a Romanian court, or in good faith to prevent imminent harm. In practice we hold essentially nothing to disclose.

Your rights

You have the following rights under GDPR (and equivalent provisions in your jurisdiction). Because your data lives on your own device/iCloud, most are exercised directly in the app. Access / portability: Profile → Export My Data (in-app, a JSON download from your device). Rectification: edit your own profile in-app; rename an opponent from Players → their profile → Edit — the corrected name applies across their whole history; to fix a match score, delete and re-enter it. Erasure: delete a match in-app (a paired Apple Watch keeps no copy of a finished match once it has handed the result to your iPhone; a match still in progress on the watch should be finished or discarded there); a person you saved to your Players roster (with any note about them) is erased separately — once no matches against them remain, open Players → their profile → Remove from roster — or use Profile → Delete all data to wipe everything at once. Or delete the app and its iCloud data — a match still in progress on the watch should be finished or discarded there, and any calendar reminder you opted into is removed in the Calendar app, as Latuvo can't reach it under write-only access; we hold no server copy. Any other privacy question or objection: email [email protected] — we'll respond within 30 days. Complaint to a supervisory authority: the Romanian DPA (ANSPDCP, dataprotection.ro) or your local EU data protection authority.

International transfers

Your match/Health data stays in your own iCloud under Apple's infrastructure and terms. The only vendor we send data to is TelemetryDeck (anonymous usage analytics), which processes it in the EU (Germany) — there is no transfer to a third country. (Any OS-level crash report you opt into sharing is handled by Apple under Apple's terms.)

Usage analytics

To understand how Latuvo is used in aggregate — which features people use, where they get stuck — the app and this website use TelemetryDeck (operated by TelemetryDeck GmbH, Germany). TelemetryDeck receives anonymous usage signals (e.g. “a match was logged”, a page view, the referrer, coarse locale/country) and a non-reversible device or visitor identifier. It never receives your name, email, matches, opponent names, or Health data; it uses no advertising identifier (IDFA), and on the web it is cookieless and cannot recognise you across other websites or across days. It cannot identify you. Legal basis: our legitimate interest (GDPR Art. 6(1)(f)) in improving Latuvo, given the data is anonymous and aggregate. TelemetryDeck is a sub-processor and processes this data in the EU. Your personal data — matches, names, Health — still never leaves your device and your private iCloud.

Tracking, cookies, and advertising

We do not use Apple's IDFA, show the App Tracking Transparency prompt (we track no one across apps or sites, so there is nothing to ask permission for), use tracking cookies, do behavioural profiling, build advertising audiences, or sell/share your data with data brokers. Crash diagnostics are captured on-device via Apple's MetricKit only. Our only analytics is the privacy-first, anonymous usage measurement described above.

Changes to this policy

We'll update this page if we add a feature that changes what we handle, and we'll update the effective date at the top. For significant changes we'll also surface a notice in the app. The current version is always the one published at latuvo.com/privacy.

Contact