Legal
Privacy Policy
Last updated 19 August 2026. Tennismatic is made by TeddyAppLabs.
The short version. You can score every match without an account, and if you never sign in, your matches never leave your device. Signing in with Apple is optional and exists only so your history can appear on a second device. There is no ad network in the app and we do not ask for tracking permission.
What stays on your device
Match scores, match history, player names you type, and every setting are stored locally on your iPhone and Apple Watch. Scoring, history and settings all work with no network connection. Analytics never includes player names, match identifiers, score histories, or the text you enter.
Optional product analytics
The default-on “Share analytics and masked replay” setting sends product interactions to our US-hosted PostHog project: screens opened, setup choices, scoring actions such as point or undo, purchase outcomes, app/build version, broad locale, and whether Pro or sign-in is active. It does not send player names, match IDs, score histories, feedback text, sign-in tokens, HealthKit data, raw errors, or URL query strings.
A 10% production sample may include a replay made from masked screenshots. Text and images are masked, and recording is stopped on account, feedback, paywall, StoreKit, sign-in and sharing surfaces. Logs and network contents are not recorded. You can turn analytics and replay off at any time in Settings > About Tennismatic; that choice is mirrored to Apple Watch.
The public website currently does not initialize analytics because no Tennismatic production identifiers are configured. This policy will be updated before website analytics are enabled. Local and preview copies remain analytics-free.
What we receive if you sign in
Signing in uses Sign in with Apple. It is optional. Its only purpose is to carry your match history between your own devices.
| Data | Why | How it is held |
|---|---|---|
| Apple account identifier | To recognise your account across devices | Stored as a one-way digest, not as the raw identifier |
| Name and email | Supplied by Apple at sign-in, used to identify your account to you | Encrypted at rest. Apple lets you hide your real email, and we work fine with a relay address |
| Apple refresh token | To keep your session valid and to revoke it when you delete your account | Encrypted at rest |
| Completed matches | The sync itself: scores, formats and timings of matches you finished | Stored against your account identifier, with the device that produced them |
Sync data is held in Cloudflare D1 and served by a Cloudflare Worker. Nothing in the sync payload is shared with anyone, sold, or used for advertising.
Feedback you send
If you send feedback from inside the app, we receive your message, any star ratings you gave, the app version, the iOS version and the app's language. Feedback is tied to a random installation identifier rather than to your account or your name, so we can recognise duplicate reports without knowing who sent them.
Crash reports
The iPhone app and our server use Sentry to report crashes and errors, so faults get fixed rather than silently repeating. Crash reports contain technical diagnostics — what failed, where, on which app and OS version. The Apple Watch app does not use Sentry; watch crashes reach us only through Apple's own reports, and only if you enabled sharing in iOS settings.
Purchases
Tennismatic Pro is bought through the App Store. Apple processes the payment; we never see your card details. We use RevenueCat to check whether a purchase is active, which means RevenueCat receives an anonymised purchase identifier and the receipt Apple issues. Prices are shown by the App Store in your own currency before you confirm anything.
What we do not do
- No third-party advertising SDK and no App Tracking Transparency prompt. Apple's standard AdServices attribution can report aggregate Apple Ads campaign identifiers.
- No selling or renting of personal data.
- No tracking you across other apps or websites.
- No account required to use the scoreboard.
Keeping and deleting your data
Sync data is kept while your account exists. Delete your account in Settings and the matches stored against it are deleted with it; deletion of the associated PostHog person, events and recordings is queued at the same time. The app uses your existing secure session for this request, so it does not require another Sign in with Apple prompt. To ask what is held about you or request help, write to turhan@teddyapplabs.com from the address on your account, and we will action it.
If you are not signed in, Settings offers Delete My Data. It removes all match data from the iPhone and its paired Apple Watch and deletes feedback linked to that installation from our service. It cannot delete a previously synced account without a valid session for that account. Deleting the app alone removes the on-device copy but cannot request deletion of data already sent to the service.
Children
Tennismatic is not directed at children under 13, and we do not knowingly collect data from them.
Your rights
Depending on where you live, you may have rights to access, correct, export or delete the personal data we hold, and to object to certain processing. Contact us at the address above and we will respond.
Changes
If this policy changes materially we will update the date at the top of this page, and note the change in the app's release notes.
Contact
TeddyAppLabs — turhan@teddyapplabs.com