Privacy Policy

Effective date: 2026-07-03 · Operator: Latuvo (operated from Romania) · Contact: privacy@latuvo.com

This privacy policy explains what data Latuvo handles, why, and what you can do about it. It's written to be read — no legal scaffolding for its own sake. If a section is unclear, write to the email above and we'll fix it.

The short version

Latuvo is local-first. There is no account, no login, and no Latuvo server. Everything you do in the app — your matches, the opponents you log, your optional display name, and any Apple Health data — is stored on your device and synced across your own Apple devices through your private iCloud. It never reaches us. Nothing leaves your device through Latuvo — including crash diagnostics, which are captured on your device only (via Apple's MetricKit) and not transmitted anywhere.

Because we don't run a server and don't have accounts, most of a traditional privacy policy simply doesn't apply: we hold no email, no password, no profile, and no copy of your match history.

Who Latuvo is for

Latuvo is a general-audience tennis-tracking app. It does not ask for your age and imposes no age restriction; we never ask you to enter your date of birth. (If you grant Apple Health access, the app may read your date of birth from HealthKit to estimate heart-rate zones — that read happens on your device only and is never sent to us; see "What stays on your device" below.) Because we operate no server and collect no personal data centrally, Latuvo does not knowingly process data about children (or anyone) on its own systems — your data stays in your own Apple account.

What stays on your device (and your private iCloud) — not collected by us

The following never leaves your control. It lives in the app's on-device store and is mirrored to your own private iCloud (Apple's CloudKit) so it's available on your other Apple devices. Latuvo, the operator, does not receive, store, or have access to any of it: your match results (score, sets, opponent, court, surface, format, date); per-match stats (aces, winners, hold %, and similar, from watch-tracked matches); your form and trends (win-loss, streaks, and stat trends derived from your own matches on your device); an optional display name you can set for yourself or skip; the names or nicknames you type for the people you log matches against, together with any private note or difficulty rating you choose to add about them; and Apple Health data (heart rate, active calories, distance, and stride length read during a watch-tracked match, used for your post-match recap). Your date of birth is also read from Apple Health (read-only, never stored) to estimate your heart-rate zones for that recap.

iCloud sync uses your own Apple account; Apple processes it under Apple's privacy policy, the same way it stores your other app data. We cannot see it. Apple's HealthKit permission controls Health access; revoke it any time in the Health app under Sharing → Apps → Latuvo.

Crash diagnostics (on your device)

Latuvo captures crash and hang diagnostics on your device using Apple's MetricKit, purely to help us spot bugs — and it does not transmit them anywhere. There is no third-party crash SDK and no Latuvo server to receive them. If you have turned on Apple's "Share With App Developers" setting (Settings → Privacy & Security → Analytics & Improvements), iOS itself may send anonymized crash reports to us through Apple's standard developer channel under Apple's terms — that is an Apple, OS-level, opt-in mechanism, not something Latuvo collects or controls.

We do not collect: your email, password, or gender (there is no sign-up); your IP address as a stored identifier; your contacts; your photo library — your avatar is your initials, never a picture, and the shot clips you choose to save stay on your device only (see "Shot clips" below); your location; browsing or app-usage analytics; or advertising identifiers (IDFA). We do not show ads, do behavioural profiling, build advertising audiences, sell your data, or operate any rating/leaderboard that compares you to other users.

Shot clips (camera, on-device only)

The optional Shot clips feature uses your device camera to record short slow-motion clips of your swing. While you record, frames are analyzed on your device using Apple Vision (anonymous stick-figure pose detection) — solely to find the swing and trim the clip. That analysis stays in memory and is discarded, and the temporary full recording is deleted as soon as the trimmed preview is ready (or immediately, if no clear swing is detected). Nothing is kept unless you tap Save.

If you save a clip, the trimmed video and a small thumbnail are stored on your device only: they are never uploaded anywhere (there is no server), are not synced to iCloud, and are excluded from device and iCloud backups. Latuvo keeps at most your 50 most recent clips — saving past that limit automatically deletes the oldest. You can delete any clip in the app at any time, and "Delete all data" erases them all. Your data export (Profile → Export My Data) lists your saved clips (shot type, date, duration); the video files themselves stay on your device, and you can share a clip yourself whenever you choose. Camera access is used only while you record — revoke it any time in Settings → Privacy & Security → Camera. The capture screen asks you to keep other people out of frame; please record only yourself.

Opponents you log who aren't Latuvo users

Latuvo lets you log a match against anyone, including someone who doesn't use Latuvo. You type their name (or a nickname), and you can optionally add a private note or a difficulty rating about them; all of it is stored as part of your match history. That name — and any note or difficulty rating you add — is personal data about another person that you provided (GDPR Art. 14, "data not obtained from the data subject"). The crucial point under our local-first design: that name is stored only on your device and in your own private iCloud — it is never transmitted to Latuvo, never reaches any Latuvo server (there is none), is visible only to you, and is never searchable, shared, enriched, or used to build a profile or rating. We do not look the person up or contact them. Lawful basis: Art. 6(1)(f) — legitimate interest in keeping an accurate personal record of matches you actually played, weighed against the logged person's interests: the data is minimal, private to your own device/iCloud, and never used to contact them or make any decision about them. If you'd rather not store a real name, use a nickname or initials. Because the name lives only on your device/iCloud and not on our systems, you remove it: delete the match in the app (open the match → Delete), which also clears it from your paired Apple Watch. If you also saved that person to your Players roster — or added a private note or difficulty rating about them — that saved entry is separate from the match and is not removed by deleting the match: once no matches against them remain, open Players → their profile → Remove from roster to erase their saved name, note, and difficulty too (or use Profile → Delete all data to wipe everything at once). If a match is still in progress on the watch, finish or discard it there too so its opponent name is removed from the watch's own session. One exception: if you opted into a calendar reminder when scheduling, that reminder is saved as an event in your own Calendar (under Apple's terms) — Latuvo has write-only Calendar access and can't reach it again, so deleting the match in the app doesn't remove it; delete that event in the Calendar app too. We cannot remove it for you — we never had a copy. If a logged person contacts us at privacy@latuvo.com, we will explain this and, where helpful, how the person who logged them can delete the entry.

How long data is kept

Your matches, names, and Health data (on device + your iCloud) are kept as long as you keep them: delete a match in the app, or delete the app and its iCloud data, to remove it — we hold no copy to retain or purge. Saved shot clips stay on your device until you delete them; only your 50 most recent clips are kept (older ones are deleted automatically), and "Delete all data" removes them all. Crash diagnostics are captured on your device only (MetricKit) and cleared by the system over time; any reports Apple forwards (if you opted into "Share With App Developers") follow Apple's own retention.

Who we share data with (sub-processors)

Because we collect almost nothing, the list is short. Apple (App Store, iCloud/CloudKit, HealthKit, and — only if you opted into "Share With App Developers" — OS-level crash reporting) provides app distribution, stores your app data in your own private iCloud, and provides on-device HealthKit access; that match, Health, and name data is held in your own iCloud account under Apple's terms and is not accessible to Latuvo, and HealthKit data stays on-device. We do not use, and share nothing with: advertising networks; third-party analytics or crash-reporting providers (Mixpanel, Amplitude, Segment, Google Analytics, Firebase Crashlytics, and the like — none); insurance or health providers; tennis federations, ranking systems, or coaching services. We do not run a hosting/database backend at all. We will disclose data only when required by a valid court order from a Romanian court, or in good faith to prevent imminent harm. In practice we hold essentially nothing to disclose.

Your rights

You have the following rights under GDPR (and equivalent provisions in your jurisdiction). Because your data lives on your own device/iCloud, most are exercised directly in the app. Access / portability: Profile → Export My Data (in-app, a JSON download from your device). Rectification: edit your own profile in-app; to fix a match or an opponent name, delete and re-enter it. Erasure: delete a match in-app (this also clears it from your paired Apple Watch); a person you saved to your Players roster (with any note or difficulty about them) is erased separately — once no matches against them remain, open Players → their profile → Remove from roster — or use Profile → Delete all data to wipe everything at once. Or delete the app and its iCloud data — a match still in progress on the watch should be finished or discarded there, and any calendar reminder you opted into is removed in the Calendar app, as Latuvo can't reach it under write-only access; we hold no server copy. Any other privacy question or objection: email privacy@latuvo.com — we'll respond within 30 days. Complaint to a supervisory authority: the Romanian DPA (ANSPDCP, dataprotection.ro) or your local EU data protection authority.

International transfers

Your match/Health data stays in your own iCloud under Apple's infrastructure and terms. Latuvo initiates no data transfer of its own — there is no server and no third-party vendor. (Any OS-level crash report you opt into sharing is handled by Apple under Apple's terms.)

Tracking, cookies, and advertising

Latuvo is an iOS app. We do not use cookies (we're not a web app), use Apple's IDFA tracking, show the App Tracking Transparency prompt (we have nothing to ask permission for), run any third-party analytics or crash-reporting SDK (crash diagnostics are captured on-device via Apple's MetricKit only), or sell or share your data with data brokers.

Changes to this policy

We'll update this page if we add a feature that changes what we handle. Material changes will be notified in-app at least 14 days before they take effect. The current version is always the one published at latuvo.com/privacy.

Contact