Privacy Policy - Tekkers

Tekkers Inc. ("Tekkers," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and related services (collectively, the "Service").

1. Information We Collect

1.1 Account Information

When you create an account, we collect:

Email address - for account authentication and communications
Date of birth - to determine age tier and applicable consent requirements
Display name - for personalization within the app
Password - stored securely using industry-standard hashing

1.2 Player Profile Information

For each player profile, we collect:

Display name and date of birth
Playing position preference
Dominant foot
Consent records and preferences

1.3 Video and Biometric Data

When you use Strike Lab to record and analyze your soccer techniques, we process:

Video recordings - uploaded to our servers for AI analysis
Pose estimation data - body position landmarks extracted from video
Ball tracking data - trajectory, velocity, spin, and position
Technique analysis - computed metrics about your form and execution

Important: We do NOT use facial recognition. Our computer vision focuses on body mechanics and ball physics, not identifying individuals.

1.4 Usage Data

We automatically collect:

App usage patterns and feature interactions
Device information (model, OS version)
IP address and general location (country/region level)
Crash reports and performance data

1.5 Payment Information

Payment processing is handled by Stripe. We do not store your credit card numbers. We receive only: subscription status, billing cycle, and transaction IDs.

2. How We Use Your Information

We use your information to:

Provide the Service - process videos, generate analyses, deliver coaching feedback
Personalize your experience - adapt Maestro's coaching to your age and skill level
Track your progress - maintain history of analyses, milestones, and improvements
Process payments - manage subscriptions via Stripe
Communicate with you - send analysis notifications, account updates, and (with consent) marketing
Improve our Service - analyze usage patterns, train and improve our AI models
Ensure safety and compliance - prevent abuse, enforce terms, comply with legal obligations

3. Legal Bases for Processing (GDPR)

For users in the European Economic Area, we process data based on:

Contract - to provide the Service you've signed up for
Consent - for biometric processing and marketing communications
Legitimate interests - for analytics, security, and Service improvements
Legal obligation - for compliance with applicable laws

4. Data Sharing and Disclosure

We do not sell your personal data. We may share information with:

Service providers - cloud hosting (AWS), payment processing (Stripe), analytics, push notifications (Firebase)
AI processing partners - for model inference and analysis generation
Legal authorities - when required by law or to protect rights
Business transfers - in connection with a merger, acquisition, or sale of assets

5. Data Retention

Account data - retained while account is active, deleted within 30 days of account deletion
Video files - deleted within 90 days after processing (analysis results retained)
Analysis results - retained while account is active
Consent records - retained for 7 years for compliance documentation
Anonymized analytics - may be retained indefinitely

6. Children's Privacy (COPPA Compliance)

Tekkers is committed to protecting children's privacy. Our approach:

Users under 13 are currently blocked from creating accounts pending implementation of verified parental consent
Users 13-17 may create accounts with self-consent for non-biometric features; biometric consent requires parental verification
We do not knowingly collect personal information from children under 13 without verified parental consent
Parents can contact us at privacy@tekkers.io to review, delete, or restrict processing of their child's data

7. Colorado Privacy Act Compliance

For Colorado residents, you have the right to:

Access - obtain a copy of your personal data
Correct - request correction of inaccurate data
Delete - request deletion of your personal data
Data portability - receive your data in a portable format
Opt out - of targeted advertising, sale of data (we don't sell data), or profiling

Biometric consent: We obtain explicit opt-in consent before processing biometric data. You may revoke consent at any time in Settings > Consent Management.

8. Your Rights and Choices

8.1 Account Controls

View and edit your profile in Settings
Manage consent preferences in Settings > Consent Management
Download your data by contacting privacy@tekkers.io
Delete your account in Settings > Account > Delete Account

8.2 Communications

Manage push notifications in Settings > Notifications
Unsubscribe from marketing emails via link in each email

8.3 Consent Revocation

You may revoke biometric processing consent at any time. Note that this will disable Strike Lab functionality, as video analysis requires this consent.

9. Data Security

We implement industry-standard security measures including:

Encryption in transit (TLS 1.3) and at rest (AES-256)
Secure authentication with hashed passwords and JWT tokens
Regular security audits and penetration testing
Access controls and audit logging
SOC 2 compliant infrastructure (AWS)

10. International Data Transfers

Your data may be transferred to and processed in the United States. For EU users, we rely on Standard Contractual Clauses for lawful transfers.

11. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes via email or in-app notification. Continued use after changes constitutes acceptance.

12. Contact Us

For privacy-related questions or to exercise your rights:

Email: privacy@tekkers.io
Mail: Tekkers Inc., Attn: Privacy, [Address]

For complaints, EU users may also contact their local data protection authority.