Legal
Privacy Policy
Effective date: April 30, 2026 · Policy version: 1.0
1. Introduction
ERNElytics, Inc. (“we,” “us,” or “our”) operates ERNElytics at ernelytics.ai (the “Service”). This Privacy Policy explains what information we collect, how we use it, with whom we share it, and the rights you have over your data.
By using the Service, you agree to the collection and use of information as described in this policy. If you do not agree, please do not use the Service.
We serve users globally, including users in the European Economic Area (“EEA”) and United Kingdom. Where applicable, we comply with the General Data Protection Regulation (“GDPR”) and the UK GDPR.
2. Information We Collect
2.1 Account Information
When you register for an account, we collect:
- Email address
- Display name (optional)
- Password (stored as a one-way cryptographic hash — we never store your plaintext password)
- Pickleball skill rating and related self-assessment data you choose to provide (DUPR rating, reliability score, self-assessed level)
- Coach persona preference
- Profile avatar — either uploaded by you or AI-generated on your request
2.2 Match and Video Data
When you submit a match for analysis, we temporarily process the video file you upload. Raw video files are deleted from our systems immediately after computer vision processing is complete. We do not retain your original video.
Extracted frames and intermediate processing artifacts may be retained for up to 30 days following analysis completion, for quality assurance, dispute resolution, and to support analysis re-generation. After 30 days, these frames are permanently deleted unless you have subscribed to an extended retention add-on.
Extended retention — we may offer longer frame storage as an optional paid feature. This retention period will be disclosed clearly at the time of purchase and governed by your subscription terms.
Structured match statistics, AI-generated analyses, and coaching narratives derived from your video are retained as part of your match history for as long as your account is active.
2.3 Usage and Behavioral Data
We collect data about how you interact with the Service, including pages visited, features used, time spent, button clicks, and navigation patterns. This data is used to improve the Service, understand user behavior, and inform product decisions. We use third-party analytics tools for this purpose; see Section 6 (Third-Party Services) for details.
2.4 Device and Technical Data
When you use the Service, we automatically collect:
- IP address
- Browser type and version
- Operating system
- Referring URLs
- Device identifiers
- Log data (timestamps, error logs, request logs)
2.5 Cookie and Consent Data
We use cookies and similar tracking technologies. When you accept our cookie policy, we record your consent with a timestamp, your user ID or session identifier, your IP address, and your browser/device information. This record constitutes your clickwrap attestation and is retained as evidence of your consent for the lifetime of your account plus any legally required retention period.
See Section 9 (Cookies) for the full list of cookies we use and how to manage them.
2.6 Payment Information
We do not store credit card or payment account numbers on our servers. All payment processing is handled by Stripe, Inc. When you make a purchase, your payment details are transmitted directly to Stripe over an encrypted connection. We receive only a token reference and limited billing information (last four digits, card type, expiry) from Stripe for display purposes. Stripe’s privacy practices are governed by the Stripe Privacy Policy.
2.7 Communications
If you contact us by email or through the Service, we retain the content of those communications to respond to your inquiry and improve our support.
3. How We Use Your Information
We use the information we collect to:
- Provide, operate, and maintain the Service
- Process and deliver match analyses and AI-generated coaching content
- Manage your account, subscription, and billing
- Generate your AI avatar on request
- Send transactional emails (account verification, receipts, analysis completion notifications)
- Send marketing and promotional communications where you have opted in — you may opt out at any time
- Analyze usage patterns to improve the Service and develop new features
- Detect and prevent fraud, abuse, and security incidents
- Comply with legal obligations
- Enforce our Terms of Service
4. AI Processing and Third-Party AI Providers
The Service uses artificial intelligence to analyze match data and generate coaching narratives. Your submitted data may be processed by the following AI systems:
- Anthropic Claude API — used for generating coaching narratives, match analysis text, and conversational coaching responses. Data sent to Anthropic is governed by Anthropic’s Privacy Policy.
- Google Imagen (AI Studio) — used for generating user avatars on request. Only the text prompt describing your requested avatar is sent; no personal video or match data is transmitted. Governed by Google’s Privacy Policy.
- Self-hosted models — computer vision and sports analytics models run on private GPU infrastructure hosted on cloud-based and decentralized compute networks, including the Manifest Network. Data processed by these models does not leave our controlled infrastructure and is not shared with third-party AI providers.
We do not use your personal data to train or fine-tune third-party AI models, and we do not sell your data to AI companies.
5. Data Retention
5.1 Active Accounts
We retain your account data, match history, and AI-generated analyses for as long as your account is active. Raw video files are deleted immediately after processing. Extracted frames are deleted within 30 days unless extended retention is active.
5.2 Account Deletion
If you request deletion of your account, we will permanently purge all personal data associated with your account — including your profile, match history, analyses, avatar, and any retained frames — within 30 days of your deletion request. You may request deletion by contacting us at [email protected] or through the account settings page. Following purge, your data cannot be recovered.
We may retain anonymized, non-identifiable aggregate statistics derived from your usage after deletion, which cannot be linked back to you.
5.3 Delinquent and Downgraded Accounts
If your paid subscription lapses due to non-payment, your account will be downgraded to the free tier within 30 days. Data stored under your account will then be governed by the free tier retention policy, which applies a first-in, first-out (FIFO) model: the oldest match records will be removed first when your stored data exceeds free tier limits. You will receive advance notice before any data is removed under this policy.
6. Third-Party Services
We share data with the following third-party service providers solely to operate the Service:
| Provider | Purpose | Data Shared |
|---|---|---|
| Stripe | Payment processing | Email, billing address, payment method |
| Anthropic | AI coaching narrative generation | Match statistics, coach persona selection |
| Google (AI Studio) | Avatar image generation | Text prompt only (no personal data) |
| Analytics providers | Usage and behavior analytics | Anonymized usage events, device data |
| Cloud infrastructure | Hosting, storage, compute | All data (under data processing agreements) |
We do not sell, rent, or trade your personal information to third parties for their own marketing or commercial purposes.
7. Marketing Communications
We may send you promotional emails, product updates, and marketing campaigns only if you have explicitly opted in. Every marketing email includes an unsubscribe link that removes you from all marketing lists immediately. Opting out of marketing emails does not affect transactional communications (account verification, receipts, security alerts).
Where required by law (including GDPR and CAN-SPAM), we obtain your affirmative consent before sending marketing communications and maintain records of that consent.
8. Your Rights
Depending on your location, you may have the following rights regarding your personal data:
- Access — request a copy of the personal data we hold about you
- Correction — request correction of inaccurate or incomplete data
- Deletion — request permanent deletion of your personal data (“right to be forgotten”)
- Portability — request your data in a structured, machine-readable format
- Restriction — request that we restrict processing of your data in certain circumstances
- Objection — object to processing based on legitimate interests or for direct marketing
- Withdraw consent — where processing is based on consent, withdraw it at any time without affecting prior processing
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days (or within the timeframe required by applicable law). We may ask you to verify your identity before processing your request.
EEA and UK users: You have the right to lodge a complaint with your local data protection authority. The lead supervisory authority for ERNElytics, Inc. is the relevant authority in the jurisdiction in which we are established.
9. Cookies
9.1 What We Use
We use the following categories of cookies and similar technologies:
- Strictly necessary — authentication tokens and session identifiers required for the Service to function. These cannot be disabled.
- Functional — preferences such as your coach selection and UI settings.
- Analytics — behavioral tracking cookies that help us understand how users interact with the Service (e.g., page views, click paths, session duration).
- Marketing — cookies used to track campaign performance and serve relevant communications. Only set after consent.
9.2 Consent and Attestation
When you first visit the Service, we present a cookie consent banner. Your acceptance or rejection is recorded as a clickwrap attestation containing: your user ID (or anonymous session ID if not logged in), timestamp, IP address, browser and device fingerprint, and the policy version you consented to. This record is stored securely and constitutes legally binding evidence of your consent under GDPR Article 7(1).
You may withdraw cookie consent at any time by contacting us at [email protected] or by clearing cookies in your browser settings. Withdrawal of non-essential cookie consent does not affect the lawfulness of prior processing.
9.3 Managing Cookies
You can control cookies through your browser settings. Note that disabling strictly necessary cookies will prevent the Service from functioning. For analytics and marketing cookies, use the consent banner or contact us to update your preferences.
10. Data Security
We implement industry-standard security measures including TLS encryption in transit, encryption at rest, access controls, and regular security reviews. Payment data is handled exclusively by Stripe and never transits our servers.
No method of transmission or storage is 100% secure. In the event of a data breach affecting your personal information, we will notify you and relevant authorities as required by applicable law.
11. International Data Transfers
Your data may be transferred to and processed in countries other than your country of residence, including the United States. Where we transfer personal data from the EEA or UK to countries without an adequacy decision, we use Standard Contractual Clauses (“SCCs”) or other appropriate safeguards as required by GDPR Chapter V.
12. Children's Privacy
The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will promptly delete it. If you believe we have collected such information, contact us at [email protected].
13. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a prominent notice in the Service at least 14 days before changes take effect. The “Effective date” and “Policy version” at the top of this page reflect the most recent revision. Continued use of the Service after the effective date constitutes acceptance of the revised policy.
14. Contact and Data Controller
ERNElytics, Inc. is the data controller for personal data processed through the Service.
