Effective 2 September 2026 · Accuracy revision 15 September 2026
On Court Pro helps you record racket and paddle sports, keep a personal history and connect with people you choose. This policy explains how NEGOTIUM BUSINESS CORPORATION handles personal data in the app and on this website.
NEGOTIUM BUSINESS CORPORATION, incorporated in Canada, is responsible for the personal data described here. For privacy requests, contact support@oncourtpro.app. You can contact us in any of the languages available on On Court Pro. This policy is currently available in English and Spanish.
Applicable privacy protections depend on the processing and your jurisdiction, including Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), applicable provincial laws, and the EU or UK GDPR where their territorial rules apply.
We receive your email address and the identity information you provide, such as your name, country, language and chosen account context. Where Apple or Google sign-in is offered, we receive a provider identifier, a verified email address (which may be an Apple relay address) and information needed to verify the sign-in. We do not receive your Apple or Google password.
For email sign-in, our database stores a protected hash of the code, its validity and use records, and security information such as attempts and IP address. The code is sent through our email provider. Expiration or use makes it invalid; it does not immediately erase the database record or the email in your inbox.
Your optional profile can include a photo, preferred sports, city, declared club, gender and equipment details where those fields are offered. A declared club or an account context does not establish a verified membership, qualification or right to other people's data.
We store sessions on your device and synchronize them with your account when signed in and synchronization is available. Records can include sport, match or practice, participants or names you enter, date, score and sets, durations, surface, indoor/outdoor setting, city or venue labels, training focus, reflections and available watch measurements. Changes, confirmations and disputes can create related records and earlier versions.
Other users may provide information about you when they name an opponent, invite you, submit a result, or write an authorized coaching observation. A name entered by someone else is not proof that you participated or confirmed a score.
We store circle details and membership, friendships, invitations, permissions, visibility choices, proposals, confirmations, notifications and abuse reports. Professional records can include coach links, organization membership and roles, notes, observations and proposed matches where those features are enabled. Some professional features are limited to a private pilot; this policy does not announce general availability.
For store purchases we process purchase identifiers or receipts, product and store, subscription status and relevant billing dates to verify access. Apple or Google handles payment; we do not receive your card details. We also process session tokens, device identifiers and notification tokens, platform, app version, language, IP addresses and technical request or error records to operate and protect the service. Support includes the messages you send and the account or technical context supplied with them.
With the relevant system permissions, compatible Apple Watch and Wear OS sessions can supply heart rate, calories, steps and distance. Depending on the device, a session may also contain a heart-rate series and calculated zones. These measurements can reveal health information and receive the same privacy protections as other sensitive data.
On Apple Watch, optional access to resting heart rate and date of birth in Apple Health helps calculate zones on the watch. The current session export includes derived zones, not the date of birth or the resting-heart-rate reading themselves. The watch can also save a workout to Apple Health. That Health record is separate from the copy in On Court Pro.
We use these data to display and calculate your sporting activity and, when you separately allow it, provide the enabled coaching view. We do not use health data for advertising, marketing profiles or data brokerage. You can refuse or withdraw system permissions; manual records remain available. Changing a permission stops the corresponding future access but does not erase measurements already saved, synchronized or shared. Manage Apple Health records in Health and contact us about data retained in your account.
Where the GDPR applies, the bases are performance of our service contract for necessary account and service functions; consent for optional processing and disclosures, including explicit consent where required for health data; legitimate interests in service security and fault resolution, balanced against your rights; and legal obligations where applicable. Consent can be withdrawn without affecting processing lawfully carried out before withdrawal. Accepting the terms is not blanket consent to health processing or sharing.
Your statistics summarize your own records; an enabled coach view summarizes authorized sessions. We are not currently operating the cross-user match research or statistical opt-out program described in an earlier version of this policy. Any new use would require a clear explanation and the appropriate legal basis before it starts. We do not make solely automated decisions with legal or similarly significant effects on you.
Circle members, participants and connected professionals may see your displayed identity, a profile photo according to the applicable visibility rules, membership information and activity shared in that context. Discovery and leaderboard settings, where offered, can make selected information visible more broadly. Your account email is not a public profile field; information you put into free text may nevertheless reveal it.
For enabled coaching, permission is specific to each player–coach link. Match and practice scope, selected sessions or categories, time period, physical metrics, reflections and permission to record observations are separate controls. Authorized session details can include the place labels and participant names you recorded. The current coach metrics view includes calories, steps, distance and average/maximum heart rate, rather than every field saved by the watch. Connecting, scanning an identity code, joining an institution or paying does not by itself grant access to your full journal.
You can change sharing permissions or end a link in Circles. This limits subsequent access through the service; it cannot retrieve information someone already saw, copied or exported. A separately shared result and records held by another participant are not erased just by withdrawing coach access. People receiving data must respect your permissions and applicable law.
We use providers for cloud hosting and storage, content delivery, email, authentication, push notifications and payment verification. They receive the information needed for those functions. Apple and Google also process information under their own terms when you use their sign-in, health, notification or store services. Authorized personnel may access information to operate the service and resolve support or privacy requests.
We may disclose information when required by a competent authority or applicable law. We will tell you about a compelled disclosure unless the law prohibits it. If you export a file, the destination and recipients you choose receive its contents, including any health information in that file.
The main account database and website launch list are hosted in the United States (AWS, Northern Virginia). Our company operates from Canada, and services such as email, sign-in, notifications and global content delivery can process data in other countries. Your data may therefore be processed outside your country and be accessible to authorities under the laws of those places. We do not claim that every copy stays in one country.
We use encrypted network connections and encryption for the main hosted database and storage, together with authentication and access controls. This is not end-to-end encryption: the service must process data to provide the features you use. Profile photos are delivered through a content network; someone holding a photo URL may be able to retrieve it, and cached copies can outlast a profile change. Avoid uploading an image you would not want a recipient to retain.
International transfers are subject to applicable transfer rules. Contact us for information about the destinations and safeguards applicable to your data.
The app keeps local session history, an active scoreboard, preferences and caches; some professional drafts are also held locally. Authentication credentials use the system's secure storage. Device backups and any files you export are separate copies. The device's biometric service can unlock the app; we do not receive your Face ID or fingerprint template.
We do not request GPS routes or precise device location. Country, city, club and venue labels you supply, and network IP addresses, are different from GPS and can indicate a location. Optional camera access scans codes. The system photo picker supplies the photo you choose; we do not request your contacts or microphone. We do not embed advertising or cross-app tracking networks in the app or website.
Signing out or uninstalling does not delete your server account, cancel a store subscription, or necessarily remove exported files, system backups or separate Health records.
Account and activity records generally remain while your account is open, to provide history and associated services. A session removed from your journal is marked as deleted for synchronization; that action does not immediately erase every server record or earlier copy.
Purchase, support, security or dispute information may need to be retained for the relevant purpose or a legal obligation. There is not a single automatic deletion deadline for all these categories. You can ask about the records we retain and request their deletion; we will assess that request under the applicable law and other people's rights.
In Account → Data privacy, you can export a JSON file of sessions currently loaded on that device. It is not a complete account export and does not include all connections or coach reports. To delete your account, open Account → Delete account, review the effects and confirm. The app submits a request to our server and shows a receipt when it is accepted. Older versions may not include this control; email remains available without reinstalling the app. Sending an email is not an automated deletion confirmation.
You may request access, correction, deletion, a portable copy, restriction of processing or objection, and withdraw consent, subject to the conditions and exceptions of applicable law. Edit the profile fields offered in Account directly; contact us for other corrections. We protect other people's information when providing copies.
We respond within the applicable statutory period: normally 30 days for a PIPEDA access request, or one month for a GDPR rights request, with only the extensions permitted by law and notice explaining them. If a request cannot be fulfilled, we explain the reason and available recourse. We accept privacy requests whether or not you have a paid subscription.
You may complain to the Office of the Privacy Commissioner of Canada, the UK Information Commissioner's Office, or your competent local authority, including an EEA supervisory authority. You do not have to complain to us first.
If you used Sign in with Apple, also remove On Court Pro from apps using your Apple Account. Our current integration does not automatically revoke that Apple authorization; this does not prevent your On Court Pro account-deletion request.
The website launch list closed on 15 September 2026, when On Court Pro became available on the App Store and Google Play, and the website no longer collects requests. For requests made before then, we store your email, chosen platform, language, request date and consent version, plus campaign labels supplied with the form. We use these to manage the notice you requested and protect the form from abuse. The form did not create an app account, start a trial, take a payment or send a message at registration. You can withdraw the request by emailing us; the retention periods are above. Signing up does not authorize unrelated marketing.
On Court Pro is not directed to children under 13 and we do not knowingly collect their data. A higher age or parental authorization may be required by local law. If you are a parent or guardian and believe we hold a child's information without appropriate authorization, contact us so we can investigate and arrange deletion where required. We do not currently offer a verified parental-consent or managed junior-account process; a coach connection is not parental consent.
We will announce material changes in the app before they take effect and seek consent where required. The date above identifies this revision. This correction describes current practices and does not authorize new uses of your information. For questions or requests, write to support@oncourtpro.app in any language available in On Court Pro.