This Privacy Policy explains how Formalytics collects, uses, stores, shares, and deletes information when you use the Formalytics iOS app, website, and related services.
1. Information we collect
Account and profile information
We collect information you provide when you create or manage an account, including:
- email address;
- display name, profile name, avatar, biography, school or team, region, sports, positions, dominant leg, graduation year, height, and weight;
- authentication information returned by the sign-in method you choose — Sign in with Apple, email and password (via Supabase Auth), or Google where that sign-in method is available in your version of the app;
- account identifiers, profile identifiers, and row ownership identifiers used to keep your data attached to your account.
Purchases and subscriptions
If you buy a subscription (for example, a storage tier), Apple processes the payment — we never receive your full payment card details. We do receive and hold the subscription information needed to run your account: the product or tier you bought, transaction and entitlement identifiers, subscription status, and renewal, expiry, or grace-period information. We use this to verify purchases and administer storage quotas and entitlements, and keep it while needed for entitlement, accounting, and dispute records.
Video, audio, analysis, and sports data
When you record, import, save, upload, publish, or submit content, we may collect:
- photos, videos, thumbnails, exported clips, and audio tracks included with videos;
- project files, annotations, drawings, timers, overlays, captions, titles, comments, notes, and other content you create;
- kick, punt, workout, set, exercise, leaderboard, hang time, distance, rating, body-movement, pose, keypoint, tracking, and derived measurement data;
- health or fitness-related information you choose to enter, such as height, weight, injury-related notes, workout history, and training information.
Social, publishing, and safety information
When social or publishing features are enabled, we may collect:
- published clips, public profile details attached to those clips, and leaderboard submissions;
- likes, follows, comments, captions, shares, saves, searches, feed views, video views, and similar social activity if those features are available;
- group information when you create or join a group — the group name, membership and roster details, roles (such as member or coach), invitations, group chat messages, and the videos, clips, and sessions shared with the group; this content is visible to the other members and coaches of that group;
- reports, blocks, moderation decisions, abuse complaints, takedown requests, and records needed to investigate safety, copyright, fraud, or integrity issues.
Product interaction, analytics, and diagnostics
We may collect first-party usage and diagnostic data to understand how the app is used and to improve it. This can include:
- app launches, session start and end times, session length, screen views, tab views, feature entry points, taps, clicks, scrolling, button presses, and navigation paths;
- video play events, watch time, scrub events, import, record, export, publish, delete, save, submit, search, filter, report, block, and share actions;
- onboarding progress, settings choices, permission status, workout completion, queue status, upload progress, and error states;
- launch time, request timing, hang rate, energy use, crash data, performance data, device model, operating system version, app version, language, region, and technical request logs;
- a random per-install identifier and a per-session identifier that link analytics events from the same installation or session — these are not your name, your Apple ID, or an advertising identifier, and are not used to track you across other apps or websites.
We do not use this data to track you across other apps or websites, and we do not use third-party advertising SDKs at this time.
Information from your device and service providers
Your device, Apple services, Supabase, Cloudflare R2, and other service providers may process technical information needed to provide the service, such as IP address, request timestamps, authentication tokens, storage paths, device and app metadata, and security logs.
2. How we use information
We use information to:
- create, authenticate, protect, and maintain accounts;
- save, sync, restore, analyze, export, publish, and delete your projects and videos;
- calculate, display, and improve sports, workout, leaderboard, and coaching features;
- operate public feeds, profiles, leaderboards, social features, reporting, moderation, and safety tools;
- measure app usage, performance, reliability, conversion, retention, feature quality, and user experience;
- develop, test, train, validate, and improve Formalytics AI and machine-learning systems;
- verify purchases and administer subscriptions, storage quotas, and entitlements;
- detect abuse, spam, fraud, false submissions, security incidents, intellectual-property issues, and policy violations;
- provide support, respond to requests, enforce our Terms, and comply with legal obligations.
3. Social and public content
Some Formalytics features are public or social. If you publish a clip, submit to a leaderboard, post a comment, add a caption, or use a social feature, other users may see the content and the profile information attached to it.
Public or social information may include:
- your display name, avatar, school or team, region, sport, position, graduation year, and public profile details;
- published clips, thumbnails, captions, comments, overlays, drawings, and exported videos;
- leaderboard entries, hang time, distance, rating, dates, rankings, and associated video evidence;
- likes, follows, shares, saves, reports, blocks, and similar activity if those features are enabled.
Do not upload or publish content unless you have the rights and permissions needed to share it. Do not publish videos of another person, especially a minor, unless you have permission from that person or their parent or guardian where required.
4. AI and machine-learning development
Formalytics uses and develops video analysis, movement analysis, pose estimation, tracking, recommendation, safety, and coaching systems. To operate and improve those systems, we may use the content and data you provide or generate in the app, including videos, audio tracks, derived keypoints, measurements, annotations, feedback, reports, and usage events.
This may include using your content and data to train, test, validate, evaluate, and improve Formalytics AI and machine-learning models and features. Where practical, we use aggregation, filtering, access controls, and de-identification techniques to reduce privacy risk.
We do not sell your videos or training data. We do not give third-party AI model providers the right to use your content to train their own independent models unless we disclose that practice or obtain permission where required.
The Terms of Service contain the content license that lets Formalytics host, process, analyze, display, and use your content for these purposes. You still own your content.
6. Your choices and rights
You can:
- edit profile information in the app;
- choose whether to record, import, upload, publish, or submit content;
- remove published content where the app provides that control;
- delete your account in Settings;
- contact us to request access, correction, export, deletion, restriction, objection, or withdrawal of consent where applicable;
- contact us about future AI-training use of your private content where required by law or where we offer an opt-out.
To make a privacy request, email lovo@lovison.id.au. We may need to verify your identity before acting on a request.
7. Children and minors
Formalytics is a general-audience sports app and is not intended for children under 13. If you are under 13, do not create an account or use the app. If you are under the age of majority where you live, use Formalytics only with permission from a parent or guardian.
If we learn that we collected personal information from a child under 13 without the required permission, we will take reasonable steps to delete it. Parents or guardians can contact us at lovo@lovison.id.au.
8. Retention and deletion
We keep account information, profile information, projects, videos, and user content while your account is active or while needed to provide the service. Public content remains visible until it is removed, deleted, or restricted.
Usage analytics and diagnostic records are generally kept for up to 24 months unless we need them longer for security, fraud prevention, safety, legal, accounting, dispute, or service-integrity reasons. Server logs and backup copies may remain for a limited time after deletion before they expire through normal backup and retention cycles.
Account deletion removes your account and user-owned data from active systems where the app and backend support deletion. Deletion may not remove aggregate statistics, de-identified information, security records, moderation records, legal records, or already-trained model weights that no longer identify you.
Published and shared content: if you delete a published clip, a shared group clip, or your account, we remove that content from the public and group surfaces under our control. Copies that other users made where the app allows saving or resharing (for example, a clip saved from a group) may remain until those users delete them, and cached or backup copies may persist for a limited time as described above.
9. Security and international transfers
We use technical and organizational safeguards designed to protect information, including authentication, encrypted transport, cloud storage access controls, and database row-level security. No system can be guaranteed completely secure.
Formalytics uses service providers that may process information in countries other than where you live. Those countries may have data protection laws different from your country. Where required, we rely on appropriate contractual, legal, or consent-based transfer mechanisms.
Data breach notification
We handle data breaches in line with the Notifiable Data Breaches (NDB) scheme in Part IIIC of the Privacy Act 1988 (Cth). If a data breach involving personal information is likely to result in serious harm to affected individuals, and remedial action cannot remove that likelihood, we will promptly notify the affected individuals and the Office of the Australian Information Commissioner, describing the breach, the kinds of information involved, and the steps we recommend individuals take in response.
10. Australian privacy law
Formalytics is operated from Australia. This section explains how we handle personal information under the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). It applies in addition to the rest of this policy, and this policy serves as our APP privacy policy for the purposes of APP 1.
Kinds of personal information we collect and hold
The kinds of personal information we collect, and how we collect them, are described in Section 1. In summary: account and profile information (including name, email address, school or team, region, and physical attributes you choose to enter); videos, photos, and audio you record or upload (which may show you or other people); sports performance, movement, pose, and derived measurement data; social and publishing activity; and usage, device, and diagnostic data. We collect personal information directly from you, from your device, and from your chosen sign-in provider, and we hold it in the cloud systems operated by the service providers named in Section 5 and below.
We may also collect personal information about people other than the account holder indirectly — for example, when another user uploads a video that shows them, adds them to a group roster, mentions them in group messages or comments, or submits a report or complaint about them.
Some information you may choose to enter — such as height, weight, injury-related notes, and workout history — may be health information, which is sensitive information under the Privacy Act. We collect it only when you choose to provide it, and by entering it you consent to us collecting, holding, and using it to provide the relevant features.
Purposes of collection, holding, use, and disclosure
The purposes for which we collect, hold, use, and disclose personal information are set out in Sections 2 (how we use information), 3 (social and public content), 4 (AI and machine-learning development), and 5 (how we share information).
Access and correction (APPs 12 and 13)
You may ask for access to, or correction of, the personal information we hold about you by emailing lovo@lovison.id.au, or use the in-app profile editing and account deletion tools. We will respond within a reasonable period (usually within 30 days). We may need to verify your identity first. If we refuse access or correction, we will give you written reasons and explain how you can complain about the refusal.
Complaints
If you believe we have breached the Australian Privacy Principles or mishandled your personal information, email lovo@lovison.id.au with the details. We will acknowledge your complaint promptly, investigate, and respond, generally within 30 days. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (OAIC): online at www.oaic.gov.au, by phone on 1300 363 992, or by post to GPO Box 5288, Sydney NSW 2001.
Overseas disclosure (APP 8)
We use overseas service providers to host and process information. Account data, profiles, and app data are stored with Supabase, whose project infrastructure for Formalytics is hosted in the United States (AWS us-east-1). Video files are stored with Cloudflare R2 in Cloudflare's Oceania region. Apple (sign-in and app services) and our other providers may also process information in the United States and other countries where they operate. Before we disclose personal information to an overseas recipient, we take steps reasonable in the circumstances — including contractual and technical safeguards — to ensure the recipient does not breach the APPs in relation to that information. For our other providers, contractors, and reviewers, recipients are most likely located in the United States; where a provider's infrastructure is globally distributed, it is not practicable for us to list every country.
11. Changes to this policy
We may update this Privacy Policy as Formalytics changes. If a change is material, we will take reasonable steps to notify users through the app, the website, or another appropriate channel. The "Last updated" date shows when this policy was last changed.