Privacy Policy

1. Introduction

Welcome to xAssist. We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we look after your personal data when you visit our website or use our mobile application, tells you about your privacy rights, and how the law protects you.

2. Data We Collect

xAssist is built to be offline-first: your match data, player profiles, tagging events, ratings, and shot maps are created and stored locally on your device and are never uploaded to our servers unless you explicitly use a sharing or export feature. We only collect the following categories of data:

• Account Data — if you choose to create an account, we collect your email address and, if you sign in with Google or Apple, the name associated with that account (Apple lets you hide your real email using a private relay address). Account creation is entirely optional — see Section 4.
• Authentication Data — if you sign up with email and password, your password is transmitted securely and stored in hashed form by our authentication provider; we never see or store it in plain text.
• Subscription Data — if you purchase a Pro subscription, we (via our subscription management provider) receive your subscription status, plan, and renewal/expiration dates so we can unlock Pro features. We do not receive or store your card number or other payment details — those are handled entirely by Apple, Google, or Stripe.
• Technical & Security Data — IP address, device and browser type, and operating system, collected automatically for security and fraud prevention (for example, our bot-protection check when you sign up or sign in).
• Support Communications — if you email us for support, we retain that correspondence to resolve your request.

We do not use third-party analytics, advertising, or attribution SDKs, and we do not track you across other companies' apps or websites.

3. How We Use Your Data

We will only use your personal data when the law allows us to. Most commonly, we use it to:

• Create and manage your account, and let you sign in on additional devices.
• Verify and maintain your Pro subscription entitlement.
• Protect the Service against fraud, abuse, and unauthorized access.
• Respond to support requests you send us.
• Comply with a legal or regulatory obligation.

4. Account Creation Is Optional

You do not need to create an account to use xAssist's core features or to purchase a Pro subscription — subscriptions can be bought and restored anonymously on a single device. Creating a free account is only needed if you want to access your Pro subscription on more than one device. You can register at any time from the Settings screen, even after subscribing.

5. In-App Purchases & Subscriptions

Purchases made in the mobile app are processed by the Apple App Store or Google Play, and purchases made on our website are processed by Stripe. We use RevenueCat to manage and validate subscription entitlements across platforms. None of these transactions give us access to your full payment card details — we only receive confirmation of your subscription status.

6. Third-Party Service Providers

We share the limited data described above with the following service providers, solely to operate the Service:

• Supabase — hosts our authentication system and database (account email, subscription records).
• RevenueCat — manages and validates in-app subscription entitlements across the App Store, Google Play, and Stripe.
• Google Sign-In / Apple Sign In — optional social sign-in, used only if you choose that sign-in method.
• Cloudflare (Turnstile) — a privacy-friendly bot-protection check used when you create an account or sign in with email and password.
• Stripe — processes website subscription payments.
• Apple App Store / Google Play — process in-app purchases made from the mobile app.

Each of these providers processes data under their own privacy policy and is contractually restricted from using your data for any purpose other than providing their service to us.

7. Data Security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way, altered, or disclosed. Data is transmitted over encrypted (HTTPS/TLS) connections, and access to your data is limited to service providers who have a business need to know.

8. Data Retention & Deletion

We retain your account and subscription data for as long as your account is active. You can permanently delete your account at any time from Settings within the app — this immediately and permanently removes your account, profile, and subscription records from our servers. Match, player, and tagging data stored locally on your device is deleted whenever you remove it in the app or uninstall the app.

9. Your Rights

Depending on where you live, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Request deletion of your data (see Section 8 for in-app account deletion).
• Object to or restrict certain processing.
• Request a portable copy of your data.
• Withdraw consent at any time, where processing is based on consent.
• Lodge a complaint with your local data protection authority.

To exercise any of these rights, contact us using the details in Section 12.

10. International Data Transfers

Our service providers may process data in countries outside your own, including the United States. Where this happens, we rely on providers that maintain appropriate safeguards, such as Standard Contractual Clauses, to protect your data.

11. Children's Privacy

xAssist is not directed at children under 16, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

12. Contact Us

If you have any questions about this privacy policy or our privacy practices, please contact us at: privacy@xassist.app.

13. Changes to This Policy

We may update this privacy policy from time to time. We will post any changes on this page and update the "Last updated" date below.