Privacy

Privacy notice

Last updated: 24 August 2026

This notice describes the processing of personal data in the RacketFit alpha service under the General Data Protection Regulation (GDPR).

Controller

The controller is Federico Rivi, who operates the RacketFit project from Lagos, Portugal. Privacy contact: info@racketfit.ai.

Data processed

• Identity and contact data: name, email and language.
• Sport and equipment data: sport, playing frequency, video availability, level, goal, racket, paddle, strings, tension and balls.
• Video clips, images and any audio they contain, including frames selected for analysis.
• Optional pain or discomfort information, which may reveal health data.
• Technical and anti-abuse data: IP address, Turnstile result, referral source, submission identifier and security logs.
• Report feedback and product link interactions.

Purposes and legal bases

• Preparing, delivering and managing the requested report: performance of pre-contractual steps or the requested service, GDPR article 6(1)(b).
• Sending upload instructions and up to two reminders strictly related to the reserved report: performance of the requested service, GDPR article 6(1)(b).
• Protecting the service against spam, abuse and incidents, keeping essential technical logs and measuring reliability: legitimate interests, GDPR article 6(1)(f).
• Processing optional pain or discomfort information: explicit consent, GDPR article 9(2)(a). The field can be left blank and consent can be withdrawn.
• Collecting voluntary feedback to improve the service: consent or legitimate interest in product improvement, depending on the submitted content.

Providers and recipients

• Cloudflare: DNS, protection, Turnstile, Worker, R2 storage and email routing.
• Hetzner: hosting for the website, n8n and the RacketFit processor.
• Anthropic: processing selected frames and technical inputs to generate profiles and reports.
• Google: operational sheets used to record submissions and feedback.
• Telegram: operational notifications to the service operator.
• Resend: transactional emails containing instructions, reminders and the report link.

International transfers

Some providers may process data outside the European Economic Area. Where required, transfers rely on an adequacy decision or GDPR standard contractual clauses under the provider’s terms.

Retention

• Clips and reports in R2: automatic deletion within 30 days of upload.
• Processor temporary files: deletion when the job ends, including handled errors.
• Form data, submission state and feedback: until the alpha ends and no longer than 12 months, unless deletion is requested or documented security needs require retention.
• Provider technical and transactional logs: for the periods stated in their policies and data processing terms.

AI use and report limits

RacketFit uses AI systems to analyse frames and generate the report. The result is informational, may contain errors and is not a medical diagnosis. It does not produce decisions with legal or similarly significant effects. Consult a doctor or physiotherapist for pain or injury and a qualified technician before changing equipment.

Rights

You may request access, correction, deletion, restriction, objection and portability, and withdraw consent without affecting earlier processing. Contact info@racketfit.ai. You may also complain to the Portuguese Comissão Nacional de Proteção de Dados (CNPD) or your local supervisory authority.

Minors and other people shown

During the alpha, the service is intended for people aged 18 or over. Anyone submitting a clip must have the consent of other identifiable people or avoid recording them.

Cookies and local storage

RacketFit does not use analytics or profiling cookies. Language, sport and referral source may be stored in browser localStorage. Turnstile may use data or cookies strictly necessary for security. Details are in the dedicated policy.