TennisIA

    Privacy Policy

    Last updated: 27 September 2026

    1. Data Controller

    The data controller for personal data is Mocchi's S.r.l., with registered office at Via Tiziano Vecellio 17/b, 31020 San Pietro di Feletto (TV), Italy, VAT number IT05076170264, which operates the TennisIA service (hereinafter "TennisIA", "we", or "us"), reachable at the email address: develop@mocchis.com.

    This policy applies to the website tennis-ia.com and the mobile application TennisIA available on the App Store and Google Play (hereinafter collectively "the Services").

    Website

    2. Data Collected via the Website

    Through the tennis-ia.com website, we collect the following data:

    • Email address — voluntarily provided by the user via the waitlist signup form.
    • Browsing data — information automatically collected during your visit to the site (anonymized IP address, browser type, pages visited, session duration), used exclusively for aggregated statistical purposes via Google Analytics, only with prior consent.
    • Cookies — as described in section 10 of this policy.
    Mobile App

    3. Data Collected via the Mobile App

    Through the TennisIA mobile app, we collect and process the following categories of personal data:

    3.1 Account and Authentication

    Upon registration, we collect:

    • Email and name — provided directly or via sign-in with Google, Facebook, or Apple.
    • Account identifier — automatically generated by the authentication system.
    • Profile photo — voluntarily uploaded by the user.

    3.2 Video and Biomechanical Analysis

    • Shot videos — voluntarily uploaded by the user for technical analysis. Videos are stored on secure servers and processed by artificial intelligence models to generate biomechanical analysis.
    • Analysis results — scores, technical metrics, and suggestions generated by AI based on the uploaded video.

    The user can choose to make each individual analysis public within the community. Videos not shared remain private and accessible only to the user.

    3.3 Community and Social Interactions

    • Posts and comments — textual and multimedia content published in the community.
    • Likes and follows — interactions with other users and content.
    • Direct messages — private conversations between users. Messages are stored in encrypted form and accessible only to conversation participants.

    3.4 AI Coach (chatbot)

    The app offers a virtual assistant ("AI Coach") based on artificial intelligence. Conversations with the AI Coach are stored to allow for dialogue continuity and to improve the quality of responses. Conversations are not shared with third parties and are not used to train AI models.

    3.5 Push Notifications

    With user consent, we collect the device token necessary for sending push notifications (new likes, comments, messages, updates). The user can deactivate notifications at any time from the app or device settings.

    3.6 Payments and Subscriptions

    Payments for subscriptions and in-app purchases are processed through the Apple App Store and Google Play Store and their payment providers. In some countries the app may offer in-app purchases through an independent, PCI-DSS certified payment service provider: in that case card details are entered and processed exclusively by that provider. TennisIA never collects or stores card numbers or bank details. We only receive confirmation of the transaction, the amount, the currency, the billing country and the product purchased; your purchase history is kept for account management, support and fraud prevention.

    3.7 Usage Data and Analytics

    We collect app usage data (screens viewed, features used, interaction events), diagnostic data (crash reports, performance) and technical identifiers of the installation and the device, including through analytics tools of third-party providers acting on our behalf. This data may be linked to your account identifier to improve the service and the user experience and for security purposes. An approximate location (city level) may be derived from the IP address and is used only in aggregated form.

    3.8 Advertising identifier and campaign measurement

    To measure the effectiveness of our promotional campaigns we collect the device advertising identifier (IDFA on iOS, Advertising ID on Android) and certain app events (install, launch, purchase), which may be shared with third-party advertising platforms that process them as independent controllers. On iOS this only happens with your consent through the system tracking prompt (App Tracking Transparency), which you can withdraw in Settings → Privacy → Tracking. On Android you can reset or delete the advertising identifier in Settings → Privacy → Ads. We do not sell personal data.

    General Provisions

    4. Purposes and Legal Basis for Processing

    Personal data is processed for the following purposes:

    • Service provision — account creation and management, video analysis, community features, messaging, and AI Coach. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
    • Waitlist management — sending notifications related to launch and exclusive offers for subscribers. Legal basis: explicit consent of the data subject (Art. 6(1)(a) GDPR).
    • Promotional communications — product updates, news, and offers, only if the user has given consent. Legal basis: explicit consent.
    • Service improvement — aggregated analysis of app and website usage to optimize features and performance. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
    • Security and fraud prevention — protecting services from unauthorized access and misuse. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
    • Advertising campaign measurement — attributing installs and purchases to our campaigns (section 3.8), based on consent where required or on legitimate interest, with the right to object.

    5. Data Retention

    Personal data is retained for the time strictly necessary to achieve the purposes for which it was collected:

    • Account and profile data — retained for the entire duration of the account. In case of account deletion, data is removed within 30 days.
    • Uploaded videos — retained until the user deletes them or deletes their account.
    • Direct messages — retained until at least one of the conversation participants deletes them.
    • Waitlist data — retained for a maximum of 12 months from the app's launch, unless consent is revoked.
    • Analytics data — retained in anonymous and aggregated form for a maximum of 26 months.
    • Purchase history — kept for the lifetime of the account and thereafter for as long as required by tax and accounting obligations.
    • Diagnostic data and technical identifiers — kept for a maximum of 26 months.

    6. Data Disclosure and Transfer

    Personal data is not sold to third parties. It may be shared with technical service providers acting as processors under Art. 28 GDPR and, only as described in section 3.8, with advertising platforms acting as independent controllers:

    • Cloud infrastructure providers — hosting, data and video storage, authentication (servers located in Europe).
    • Artificial intelligence service providers — processing of analyses and virtual assistant functionalities.
    • Payment service providers — management of subscriptions and in-app purchases.
    • Distribution service providers — app updates and push notifications.
    • Analytics service providers — website traffic analysis (with prior consent).
    • App analytics and diagnostics providers — usage statistics, crash reports and performance.
    • Advertising platforms — campaign measurement through the advertising identifier and app events (section 3.8).

    Some of the services mentioned above may involve the transfer of data to servers located outside the European Economic Area (EEA). The transfer takes place in compliance with the safeguards provided by Articles 44-49 GDPR, based on Standard Contractual Clauses or adequacy decisions of the European Commission.

    7. Account Deletion

    The user can request the deletion of their account at any time via the dedicated function in the app settings. Deletion entails the definitive removal of:

    • Profile data (name, email, photo)
    • Uploaded videos and associated analyses
    • Posts, comments, and community interactions
    • Conversations and direct messages
    • Conversations with the AI Coach
    • Device token for push notifications

    Deletion is completed within 30 days of the request. Alternatively, the user can write to develop@mocchis.com.

    8. Data Subject Rights

    As a data subject, you have the right to:

    • Access — obtain confirmation of processing and a copy of your data (Art. 15 GDPR).
    • Rectification — request the correction of inaccurate data (Art. 16 GDPR).
    • Erasure — request the removal of your data ("right to be forgotten", Art. 17 GDPR).
    • Restriction of processing — request the suspension of data processing (Art. 18 GDPR).
    • Data portability — receive your data in a structured format (Art. 20 GDPR).
    • Object — object to processing based on legitimate interest (Art. 21 GDPR).
    • Withdrawal of consent — at any time, without affecting the lawfulness of processing carried out before the withdrawal.
    • Complaint — lodge a complaint with the Garante per la Protezione dei Dati Personali (Italian Data Protection Authority) (www.garanteprivacy.it).

    To exercise your rights, please write to develop@mocchis.com.

    9. Security

    TennisIA adopts appropriate technical and organizational measures to protect personal data from unauthorized access, loss, destruction, or accidental disclosure, in accordance with Art. 32 GDPR. These include: data encryption in transit (HTTPS/TLS), secure authentication, encrypted storage, and access control.

    10. Cookie Policy

    The website uses strictly necessary technical cookies for the page to function, and, with prior consent, third-party analytical cookies (Google Analytics) to understand how users navigate the site. We do not use profiling or tracking cookies for advertising purposes.

    Types of cookies used:

    • Technical/necessary cookies — essential for the proper functioning of the site. They do not require consent. Example: saving cookie preferences (tennisia_cookie_consent).
    • Analytical cookies (Google Analytics) — used to collect anonymous and aggregated data on how users browse the site (pages visited, session duration, approximate geographical origin). The service is provided by Google LLC. Data is processed anonymously through IP address anonymization. These cookies are activated only with the user's explicit consent via the cookie banner. For more information: Google Privacy Policy.

    You can change your cookie preferences at any time via the banner on the site or by deleting cookies from your browser.

    The mobile app does not use cookies.

    11. Changes to this Policy

    TennisIA reserves the right to update this policy at any time. Changes will be published on this page with an indication of the update date. In the event of substantial changes, registered users will be notified via the app or email.