Privacy Policy

1. Summary

• We collect the information you give us to run the app: your account details and the tennis data you log (sessions, focus areas, gear, references, profile, and optional gear photos).
• We do not use any analytics, tracking, advertising, or crash-reporting tools. We do not build advertising profiles, and we do not sell or “share” your personal information.
• You can explore the app in a read-only guest preview with no account — in that mode we collect nothing.
• You can delete your account and all its data from within the app at any time.

2. Who this policy applies to

This policy applies when you use the not up mobile app. It does not apply to third-party services you reach from the app (for example, a YouTube video you save as a reference), which have their own privacy policies.

3. Information we collect

a. Account and identity information

When you create an account we collect:

• Your email address and, if provided, your name.
• Identifiers from your chosen sign-in method:
  • Sign in with Apple — an Apple user identifier and the email/name you authorize. If you choose “Hide My Email,” we receive an Apple private-relay email rather than your real address.
  • Sign in with Google — a Google account identifier and your verified email and display name.
  • Email/password — your email and a password (passwords are handled by our backend and are never stored by the app in plain text).

b. Content you create in the app

Data you enter to journal your tennis, which is stored in your account:

• Sessions (matches, practices, lessons): date, type, duration, notes, rating, focus areas, and — for matches/lessons — the names of opponents, doubles partners, and coaches you enter, plus score, result, and surface. These names are personal information about other people; see Section 9.
• Focus areas (skills/cues you’re working on).
• Gear: racquets, strings, shoes, balls, and misc items, including brand, model, specs, and notes; and stringing history.
• References: web/YouTube links, titles, and notes you save.
• Profile: name, playing level, default preferences, and season goals.
• Feature requests you submit.

c. Photos

If you add a photo to a racquet or gear item, you grant the app access to your camera and/or photo library to take or choose an image. The image is cropped on your device and uploaded to our backend, which stores it in Amazon Web Services (AWS) S3 and generates a thumbnail. We access your camera/photo library only when you actively add a photo.

d. Subscription information

If you purchase not up Premium, subscription and entitlement status is processed through RevenueCat and the Apple App Store / Google Play. We associate your subscription with your account identifier so your access follows your account. We never receive or store your payment card details — payment is handled entirely by Apple/Google.

e. Technical information

To operate the service, our backend necessarily processes basic connection information (such as your IP address and request metadata) when your device talks to our API. Your authentication tokens are stored only in your device’s secure storage (iOS Keychain / Android Keystore), not on our servers as plaintext and not in ordinary app storage.

f. What we do NOT collect

We do not use analytics, usage-tracking, advertising, attribution, or crash-reporting SDKs. We do not track you across other apps or websites and do not sell your data.

4. How we use your information

We use your information to:

• create and secure your account and authenticate you;
• store, sync, and display your tennis data across your sessions and devices;
• provide and manage subscriptions (via RevenueCat / the app stores);
• respond to your feature requests and support messages;
• maintain the security, integrity, and reliability of the service; and
• comply with legal obligations.

5. Legal bases for processing (EEA / UK users)

Where the GDPR applies, we rely on:

• Performance of a contract — to provide the app and your account.
• Consent — for device camera/photo-library access (which you can decline or revoke in your device settings).
• Legitimate interests — to keep the service secure and working.
• Legal obligation — where we must retain or disclose data by law.

6. How we share information

We do not sell your personal information. We share it only with service providers who process it on our behalf to run the app:

Incidental requests may also be made to Google Fonts (to load app fonts) and to YouTube’s image servers (to show thumbnails for references you save). We may also disclose information if required by law, to protect our rights or users’ safety, or in connection with a corporate transaction, in each case consistent with this policy.

7. International data transfers

Devbrix is located in South Korea and our infrastructure is hosted in the United States (AWS, us-east-2). If you use the app from the EEA/UK or elsewhere, your information will be transferred to and processed in the United States and South Korea. Where required, such transfers are made under an appropriate safeguard (for example, Standard Contractual Clauses) or an applicable adequacy basis.

8. Data retention

We keep your personal information for as long as your account is active. When you delete your account, your data is permanently deleted from our systems (see Section 10). We may retain limited records where necessary to comply with legal obligations or resolve disputes.

9. Information about other people

Because you can record opponents’, partners’, and coaches’ names — and photos — you are responsible for the personal information about other people that you enter, and you confirm you have the right to include it. If someone believes you have included their information, they can contact us at dev@devbrix.kr.

10. Your rights and choices

Everyone — in-app account deletion. You can permanently delete your account and all associated data at any time: Settings → Danger zone → Delete account. This performs a hard delete on our servers and cannot be undone. You may also email dev@devbrix.kr.

United States (California — CCPA/CPRA). You have the right to:

• know what personal information we collect and how we use it;
• access and delete your personal information;
• correct inaccurate personal information; and
• not be discriminated against for exercising your rights.

We do not sell and do not “share” (as defined by California law) your personal information, so there is no opt-out to submit.

EEA / UK (GDPR). You have the right to access, rectify, erase, restrict, or object to processing of your personal information, to data portability, and to withdraw consent. You may also lodge a complaint with your local data protection authority.

South Korea (PIPA). You have rights to access, correct, delete, and suspend the processing of your personal information.

To exercise any right, contact dev@devbrix.kr. We will verify your request via your account email and respond within the timeframe required by applicable law.

11. Security

We use industry-standard measures to protect your information, including encrypted transport (TLS) for all API traffic, storage of authentication tokens in your device’s secure Keychain/Keystore, and short-lived pre-signed URLs for gear images. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

12. Children’s privacy

not up is not directed to children. You must be at least 16 years old to use the app (or older where a higher age of digital consent applies in your country). We do not knowingly collect personal information from children under this age; if you believe we have, contact dev@devbrix.kr and we will delete it.

13. Guest preview mode

You can use a read-only “Look around” preview without creating an account. Guest mode shows sample data held only in your device’s memory, makes no network calls, creates no account, and collects or transmits no personal information.

14. Changes to this policy

We may update this policy from time to time. We will revise the “Last updated” date above and, where required, provide additional notice. Continued use of the app after changes take effect constitutes acceptance of the updated policy.

15. Contact us

DEVBRIX Co., Ltd
A-1007, 38-1 Jong-ro 5-gil, Jongno-gu, Seoul, Republic of Korea
Business Registration No. 547-86-02710
Email: dev@devbrix.kr