BallSpeed is privacy-first: your video never leaves your phone. By default, analysis runs entirely on your device, and only the measurement result is sent to our servers — and only with your explicit consent.
Data controller
BallSpeed (ballspeed.app). Contact: support@ballspeed.app. Abuse reports: abuse@ballspeed.app.
Data we process
- Account: email (if any), display name, avatar emoji, language and unit preferences, birth year and region (for the age policy), role. Guest accounts store only a device identifier.
- Measurement result: speed, confidence score, trajectory (JSON), frame rate (fps), sport and a single first-frame image. The raw video is never uploaded and is never stored in any table.
- Technical: IP address for the session (transient), anonymized logs for debugging.
What happens to your video
In the default flow, your video never leaves your device. Only on low-performance devices, and only with your explicit consent, is server analysis offered; in that case the video is written to a temporary file, all metadata (including GPS and device info) is stripped, it is permanently deleted the moment analysis finishes, and it is never written to persistent storage.
Cookies and analytics
We use only strictly necessary cookies (session/auth). For visitor analytics we use Plausible, which is cookie-free and collects no personal data.
Legal basis
We process your data under GDPR and Türkiye’s KVKK, on the basis of performance of a contract (providing the service) and legitimate interest (security, abuse prevention). We do not process data for marketing.
Retention
Your measurements and badges are kept until you delete your account. When you delete your account, all your data — measurements, first frames, cards — is permanently deleted.
Exercising your rights
- Export your data: from your profile you can export all your data as JSON (GDPR art. 20).
- Deletion: from your profile you can permanently delete your account; a confirmation email follows within 24 hours.
- For access, rectification or objection, write to support@ballspeed.app.
Children
We ask for birth year at sign-up. Accounts below the regional age threshold (16 in the EU, 18 in Türkiye, 13 elsewhere) require parental email consent. Until approved, the account is restricted: it can measure, but public sharing and leaderboards are off. Child accounts only appear in private teams.
Third-party services
- Resend — transactional email (verification, password reset, parental consent).
- S3-compatible storage — first frames and share cards only (never video).
- Cloudflare Turnstile — bot protection (cookie-free).
- Sentry — error monitoring (no personal data is sent).
Changes
When we update this policy we change the date above. We announce material changes in the app.