Privacy Policy
Last Updated: July 22, 2026
BallBrain ("BallBrain," "we," "our," or "us") provides a basketball training, nutrition guidance, and performance-tracking application (the "App"). This Privacy Policy explains what information we collect, how we use and share it, and the choices available to you.
1. Information We Collect
1.1 Account and profile information
When you create or maintain an athlete account, we collect information such as:
- Email address, password credentials managed by Firebase Authentication, and username
- Date of birth and derived age
- Country of residence, basketball position, and profile picture (optional)
- Biological sex, which is used to personalize training and nutrition guidance
- Unit preference and account creation/update information
For a team account, we collect the account email, team name, team location, league, and login credentials. A team administrator may also add an athlete to a team using the athlete's email address.
1.2 Fitness, health-related, and preference information
To personalize the App, we collect:
- Height, weight, fitness goals, and basketball activity frequency
- Current pain areas, injuries, limitations, and recovery goals
- Gym availability and available equipment
- Workout-day choices and training-plan preferences
- Nutrition targets calculated from profile information
This information may reveal health-related details. BallBrain is not a healthcare provider, and the App is not intended to create medical records or provide medical diagnosis or treatment.
1.3 Activity, performance, and App data
We collect information generated through your use of the App, including:
- Generated training plans and plan changes
- Completed workouts, exercises, sets, dates, streaks, points, levels, quests, badges, and achievements
- Progress history, estimated workout duration or calories, and program-cycle information
- Vertical-jump results and history, including jump height, test method, confidence score, height and weight at the time of a test, recording duration, frames analyzed, app version, and device platform
- Notification inbox, delivery, and reminder information
- Information needed to diagnose errors, secure the service, and support users
Some App state and preferences are also stored locally on your device.
1.4 Camera, photos, and sharing
With your permission, the App may access:
- The camera to perform a vertical-jump test
- Your photo library to select a profile picture
- Your photo library to save an achievement or workout sharing image
Vertical-jump camera frames are analyzed on your device using an on-device pose-estimation model. The App saves the resulting measurement and related test metadata to your account; it does not upload the jump recording or analysis frames to Firebase as part of this feature.
When you choose to share, the App creates an image on your device and sends it to the destination you select, such as Instagram or your device's system share sheet. The destination's own privacy terms apply. BallBrain does not control what a third-party destination does with content after you share it.
1.5 Device and notification information
We may process device platform, operating system, App version, and technical identifiers needed to operate and secure the App. If you allow push notifications, we collect an Expo push token associated with your account. We do not request precise location or microphone access for the vertical-jump feature.
1.6 Product analytics
If you opt in, we collect privacy-safe product events such as signup completion, onboarding steps, workout starts/completions, plan generation outcomes, notification opens, vertical-jump funnel steps, and product-feedback survey funnel events (for example, survey shown, submitted, or dismissed). We may associate these events with an opaque Firebase user ID. Analytics does not include your email, username, exact birth date, exact height or weight, injuries, free-text survey answers, or plan contents. You can disable analytics in Settings.
1.7 Optional product-feedback survey
From time to time we may invite eligible athletes to answer an optional in-app product-market-fit survey. If you choose to respond, we may collect:
- Your rating of how disappointed you would be if you could no longer use BallBrain
- Optional free-text answers about the main benefit you get and what we could improve
- Related context such as workouts completed, approximate account age, app version, and submission time
Survey answers are stored with your account in Firebase and may be reviewed by authorized BallBrain staff through an internal admin console to improve the product. The survey is optional; you can dismiss it. Free-text answers are not included in privacy-safe analytics events.
1.8 Website (ballbrain.app)
When you visit ballbrain.app, we and our providers may collect standard website and device information such as pages viewed, approximate location derived from IP address, browser and device type, and referral information. We use Hotjar to understand how visitors use the marketing website (for example, aggregated heatmaps and session behavior). Hotjar may set cookies or similar technologies. See Hotjar's privacy documentation for details. This website analytics is separate from in-App product analytics and from optional in-App survey answers.
2. How We Use Information
We use information to:
- Create, authenticate, secure, and manage athlete and team accounts
- Check username and email availability and send account-related email
- Personalize training plans, nutrition targets, workout schedules, and recovery guidance
- Track progress and calculate points, streaks, achievements, and leaderboard positions
- Analyze and save vertical-jump results
- Enable team roster and coaching features
- Send requested push notifications, reminders, and service messages
- Measure product performance, feature adoption, and retention through privacy-safe analytics when you opt in
- Review optional product-feedback survey responses to improve BallBrain
- Understand marketing-website usage (including via Hotjar) to improve ballbrain.app
- Provide exercise demonstration videos and user-selected sharing features
- Maintain, troubleshoot, protect, and improve the App
- Respond to support, legal, and safety requests
Where applicable law requires a legal basis, we process information as necessary to provide the service you request, based on your consent (including device permissions), for our legitimate interests in operating and securing the App, and to comply with legal obligations.
3. How We Share Information
3.1 Other users and team administrators
Your username, profile picture, country, position, points, rank, and achievement or vertical-jump leaderboard information may be visible to other App users, depending on the feature.
If you join a team, the team's authorized coach or administrator may access athlete profile, training-plan, progress, and performance information needed for team and coaching features and may update an athlete's plan. Do not join a team you do not recognize or trust.
3.2 Service providers
We use providers to operate specific parts of the App:
- Google Firebase / Google Cloud: authentication, database, cloud functions, profile-image storage, analytics export, and BigQuery reporting for opted-in product analytics
- DeepSeek: AI generation of basketball training plans and exercise substitutions. We send relevant profile and training information, which may include age, sex, country, height, weight, position, goals, injuries or pain areas, activity frequency, availability, equipment, and previous-program progress. We do not intentionally include your email or password in these prompts.
- Expo: push-notification token issuance and delivery
- Resend: transactional email delivery, such as welcome messages
- YouTube / Google APIs: exercise-video search and playback. YouTube may receive technical information when its content is loaded.
- Instagram and device sharing services: only when you direct the App to share content
- Hotjar: marketing-website analytics on ballbrain.app (heatmaps and similar usage tools). Hotjar does not receive in-App training plans, jump recordings, or App account passwords through this integration.
- Netlify: hosting for ballbrain.app and related static sites
These providers process information under their own terms and privacy policies and may process it in countries outside your own.
3.3 Staff operations
Authorized BallBrain staff may access identifiable player records through an internal admin console for support, product quality, operational reporting, and review of optional product-feedback survey responses. Sensitive fields such as email, birth date, weight, and injuries require an explicit audited reveal action.
3.4 Legal, safety, and business reasons
We may disclose information when reasonably necessary to comply with law or valid legal process; protect users, BallBrain, or others; investigate fraud, abuse, or security incidents; enforce our Terms; or support a merger, financing, acquisition, or transfer of all or part of the service, subject to appropriate safeguards.
We do not sell personal information or use it for third-party targeted advertising.
4. Data Storage, Retention, and Security
Cloud account data is primarily stored through Firebase and Google Cloud. Local App data is stored on your device. We use reasonable administrative, technical, and organizational safeguards, including encrypted network transport and Firebase Authentication. Passwords are handled by Firebase Authentication and are not stored by BallBrain in plain text. No method of storage or transmission is completely secure.
We retain account information while your account is active and as needed to provide the App. We may retain limited information after deletion where reasonably necessary for legal obligations, dispute resolution, fraud prevention, security, or enforcing agreements. Analytics event exports may remain in BigQuery for a limited period according to our reporting retention policy even after account deletion requests are processed.
5. Your Choices and Rights
Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or receive a portable copy of personal information, and to withdraw consent. These rights may be subject to legal exceptions.
- Access and correction: Review or update available profile information in the App.
- Account deletion: Delete an athlete account from Settings → Delete Account. The App removes the Firebase Authentication account, main user record, profile images, nutrition record, vertical-jump history, notification records, product-feedback survey responses, username/email reservations, and team-roster link. If deletion cannot be completed in the App, contact us.
- Individual records: You may delete individual vertical-jump history entries in the App.
- Notifications: Disable App notifications in Settings or your device settings. Disabling notifications does not stop essential account or service email.
- Camera and photos: Manage permissions in your device settings. Some related features will not work without permission.
- Analytics: Disable privacy-safe product analytics in Settings → Privacy. This does not control Hotjar on ballbrain.app; manage website cookies through your browser settings where available.
- Product-feedback survey: Optional. Dismiss or skip it; submitted answers remain until you delete your account or request deletion.
- Local data: Signing out or deleting an account clears user-specific local App data, but shared images you saved to your photo library or another service must be deleted there separately.
To make another privacy request, email hello@ballbrain.app. We may need to verify your identity before completing a request.
6. Children and Teen Users
The App is not intended for children under 13, and athlete signup is designed to reject users under 13 based on the birth date entered. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided information, contact us so we can investigate and delete it.
Users between 13 and the age of legal majority should use the App with permission and supervision from a parent or legal guardian where required by local law. Team administrators must have appropriate authority and any required consent before adding or managing a minor athlete.
7. International Transfers
BallBrain is based in Kenya, and our providers may process information in Kenya, the United States, and other countries. Those countries may have different data-protection laws. Where required, we use appropriate safeguards for international transfers.
8. Changes to This Policy
We may update this Privacy Policy to reflect changes to the App or law. We will post the updated policy in the App, update the date above, and provide additional notice when required.
9. Contact Us
For privacy questions or requests, contact:
Email: hello@ballbrain.app Company: BallBrain Address: George Padmore Road, Nairobi, Kenya