Privacy Policy

1. Who We Are

Ballista Tracking provides an iPhone-based baseball player-development and tee-hitting analysis service.

Privacy and general contact: [email protected]. If this address is unavailable, privacy requests may be sent to [email protected].

Support page: ballistatracking.com/support

Mailing address:
Ballista Tracking
2482 Yonge Street #1154
Toronto, Ontario M4P 2H5
Canada

2. Information We Collect

The information we collect depends on how you use Ballista.

A. Website and waitlist information

When you visit the website, join the waitlist, submit a form, or contact us, we may collect:

• Your email address
• Your name and any organization, team, role, or other details you choose to provide
• The contents of your message and follow-up communications
• The date and time of your submission
• The page, form, or campaign through which you joined
• Your consent, unsubscribe, and communication-preference status
• Limited technical information used to deliver and secure the website or prevent abuse

Our hosting, security, and infrastructure providers may process standard technical information such as Internet Protocol address, browser and device type, operating system, referring page, requested pages or resources, date and time of access, approximate location inferred from an Internet Protocol address, and error or security logs.

B. Account and authentication information

When you create or use a Ballista account, we and our authentication provider, Supabase, may process:

• Your email address
• The password you submit for account authentication
• Email-verification status and verification requests
• Password-reset requests and recovery status
• Supabase user identifiers, session identifiers, and authentication tokens
• Account creation, sign-in, sign-out, and security-related timestamps and records

Supabase processes passwords and authentication credentials to create and secure your account. Ballista does not place your password in its account-profile, player, or hit-history database tables.

C. Account-holder and player profile information

Ballista may collect and store:

• First name
• Optional last name
• Optional birth year; Ballista does not request an exact birth date
• Account type, such as athlete, parent, coach, or facility
• Player display name
• Batting side
• Ballista account, owner, and player identifiers

The current app creates a player profile associated with the signed-in account. The data model can support a parent-managed player profile.

D. Hit, session, and analysis information

When you record and analyze a tee-hitting session, Ballista may create or store information including:

• Hit and session identifiers
• Capture date and time
• Capture trigger source, such as Mark Hit or Audio Trigger
• Estimated exit velocity, launch angle, and projected distance
• Analysis status, version, and model information
• Calibration method and calibration values
• Device model and measured capture frame rate
• Frame dimensions, frame counts, capture duration, and related capture metadata
• Quality status, warnings, detector information, and compact analysis or calibration diagnostics
• Record creation, update, synchronization, and deletion status

Ballista’s baseball metrics are estimates produced from iPhone video analysis. They are not certified radar, scouting, recruiting, medical, or professional evaluation results.

E. Camera images, analysis files, and local app data

Ballista uses the iPhone camera to capture tee-hitting video for analysis. Depending on the capture and analysis workflow, the app may store selected hit images, thumbnails, post-trigger analysis frames, frame manifests, analysis results, annotated frames, playback files, and user-generated diagnostic video locally in the app’s storage on the iPhone.

The app also stores local preferences and operational data, such as camera and trigger settings, calibration settings, analysis settings, capture timing, password-recovery state, cached player information, cloud synchronization state, and deletion records needed to complete a requested cloud deletion.

Under the current cloud-sync implementation, raw video, JPEGs, saved frame images, frame manifests, annotated frames, generated debug video, and local file paths are not uploaded to Supabase. Cloud-restored hits may contain metrics and metadata without the original local images or playback files.

F. Camera and microphone permissions

Camera access is used to display the camera preview, capture tee-hitting video, save selected hit frames, and analyze a recorded hit. Ballista cannot provide its core capture and analysis functions without camera access.

Microphone access is requested only if you choose to enable audio-triggered capture. When Audio Trigger is enabled, Ballista processes microphone samples in a short in-memory buffer to detect a possible bat-ball impact sound. Raw microphone audio is not saved to files, included in hit history, uploaded to Supabase, or retained after the in-memory trigger processing is complete.

You can use Mark Hit without enabling microphone access.

G. Support and privacy-request information

When you contact Ballista for support or make a privacy request, we may collect your contact details, the contents of your request, device or app details you choose to provide, and our response and resolution records. Do not send your password, authentication token, or password-reset link to support.

3. How We Collect Information

We collect information:

• Directly from you when you create an account, complete a profile, join the waitlist, contact us, or change app settings
• Through the iOS app when you capture, analyze, save, review, synchronize, or delete hits
• From the iPhone camera and, only when you enable Audio Trigger, the microphone
• Automatically from the app, website, and the providers that operate, secure, and deliver them
• From a parent, guardian, coach, facility, or other person acting with appropriate authority when they manage a player profile

4. How We Use Information

We may use personal information to:

• Create, authenticate, verify, secure, and support Ballista accounts
• Send account-verification and password-reset communications
• Create and maintain account-holder and player profiles
• Capture, analyze, save, display, and synchronize tee-hitting sessions
• Estimate exit velocity, launch angle, projected distance, and related results
• Maintain local and cloud hit history
• Restore cloud-synchronized hit metrics on a signed-in device
• Process account, hit, and local-data deletion requests
• Operate, maintain, secure, troubleshoot, and improve the app and website
• Manage the waitlist and send requested launch or product communications
• Respond to support messages, privacy requests, and complaints
• Detect and prevent spam, fraud, misuse, and security incidents
• Maintain records needed for consent, unsubscribe, security, privacy, and legal compliance
• Comply with legal obligations and establish, exercise, or defend legal claims
• Carry out a business transaction, such as financing, restructuring, acquisition, or sale, subject to applicable safeguards

We will not use personal information for a materially different purpose without providing notice and obtaining consent where required.

5. Local Device Storage And Supabase Cloud Storage

A. Local device storage

Some Ballista data is stored locally in the app’s container on the iPhone. This can include hit records, selected images and analysis frames, manifests, analysis results, playback and diagnostic files, settings, cached player information, and cloud-sync state.

Local storage lets Ballista capture and analyze hits, display locally available history, and continue certain operations when a network connection is unavailable. Local files remain subject to the security of the iPhone, the user’s device settings, and any device backups the user has enabled with Apple or another device-backup provider.

B. Supabase authentication and cloud storage

Ballista uses Supabase for account authentication and cloud database services. When you are signed in, some account, profile, player, and hit information may synchronize to Supabase, including:

• Account email, verification state, authentication identifiers, and session information
• Account-holder name, optional birth year, account type, and related profile information
• Player name, optional birth year, batting side, and owner/player identifiers
• Hit identifiers, capture timestamps, trigger source, metrics, analysis status and versions, calibration information, device model, capture frame rate, compact diagnostics, and record timestamps

The current Supabase cloud-sync path does not upload raw camera video, saved JPEGs, analysis-frame images, generated debug video, or local file paths.

Supabase uses row-level security and authenticated user identifiers to restrict app database records to the associated account. No security measure is perfect, and we cannot guarantee absolute security.

6. Camera And Microphone Choices

You control camera and microphone permissions through iOS Settings.

• If Camera access is disabled, Ballista cannot capture or analyze new hits.
• If Microphone access is disabled, Audio Trigger will not be available, but you can continue to use Mark Hit for capture.
• Disabling a permission stops future access through that permission but does not automatically delete information already saved locally or synchronized to the cloud.

7. How We Disclose Information

We do not sell or rent personal information.

We may disclose personal information in the following circumstances.

A. Service providers

We use service providers to operate Ballista and process information on our behalf. Depending on the feature used, these providers may include:

• Supabase, for account authentication, email verification, password recovery, database services, and cloud hit-history synchronization
• Google Workspace and Google email services, for receiving and sending communications
• Cloudflare, for domain, network, security, performance, and traffic-related services
• Our website hosting and deployment providers
• Vendors that support essential security, infrastructure, and operations

Service providers may process information only as needed to provide services to Ballista, subject to their agreements and applicable law.

B. Professional advisers

We may disclose information to lawyers, accountants, insurers, auditors, and other professional advisers where reasonably necessary.

C. Legal, safety, and security purposes

We may disclose information where required or permitted by law, including to respond to lawful requests, court orders, regulatory requirements, safety concerns, suspected fraud, or security incidents, or to protect the rights, property, and safety of Ballista, our users, or others.

D. Business transactions

Information may be disclosed or transferred as part of a proposed or completed financing, merger, acquisition, reorganization, sale of assets, or similar transaction. We will use reasonable safeguards and provide notice where required.

8. No Tracking Or Behavioural Advertising

The current Ballista iOS app does not perform cross-app or cross-site tracking. Ballista does not currently use app or website information for third-party behavioural advertising.

If Ballista introduces advertising, profiling, or non-essential analytics that require notice or consent, we will update this policy and provide appropriate choices before using them where required by law.

9. International And Cross-Border Processing

Some service providers may store or process information outside Canada, including in the United States or other jurisdictions. Information processed outside your province or country may be subject to the laws of the jurisdiction where it is processed and may be accessible to courts, law-enforcement agencies, or government authorities in accordance with those laws.

Ballista remains responsible for personal information under its control and takes reasonable steps to require service providers to protect it appropriately.

10. Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this policy and to satisfy legal, security, accounting, dispute-resolution, and compliance requirements.

Generally:

• Account, profile, player, and cloud hit data is retained while the account is active and until it is deleted or no longer reasonably required.
• Local hit and analysis data remains on the iPhone until it is deleted through the app, removed through the account-deletion local-data option, or removed by deleting the app or its device data.
• Waitlist information is retained while you remain subscribed or while it is reasonably necessary to manage the waitlist and launch communications.
• If you unsubscribe, we may retain a limited suppression record to honour and document your request.
• Support messages and privacy requests may be retained for as long as reasonably necessary to respond, resolve the matter, and demonstrate compliance.
• Technical and security records may be retained as needed to operate and secure the service, investigate incidents, and meet legal obligations.
• Information in service-provider or device backups may remain until it is overwritten or deleted through the applicable provider’s normal backup cycle.

We may retain information longer where required by law or reasonably necessary for security, fraud prevention, dispute resolution, or legal claims. We may retain de-identified or aggregated information where it can no longer reasonably identify an individual.

11. Account And Data Deletion

A. Delete a Ballista account

Account deletion is available in the iOS app through:

Profile → Account Settings → Delete Account

The app requires confirmation before sending an authenticated deletion request. A successful request deletes the Ballista authentication user and the active cloud account-profile, player, and hit records associated with that user from Ballista’s Supabase application tables.

Deletion from active systems does not necessarily remove every copy immediately. Limited information may remain temporarily in provider backups until the normal backup cycle completes, or longer where retention is required or permitted for legal, security, fraud-prevention, or dispute-resolution purposes. We do not promise immediate deletion from every backup.

B. Delete local data from the iPhone

Deleting the cloud account does not automatically delete all data stored locally on the iPhone. During account deletion, the app offers an optional “Also delete local hit data” selection. If selected, Ballista attempts to remove that account’s locally saved hits, images, analysis files, offline data, cached player information, and cloud-sync records from that iPhone.

The local-data option is separate from cloud account deletion. If you do not select it, local files may remain on the iPhone after the cloud account is deleted. You may remove remaining Ballista local data by deleting it through available app controls or by deleting the Ballista app and its data from the iPhone. Device or iCloud backups are controlled through your Apple and device-backup settings and may follow separate retention cycles.

Signing out does not delete the account, cloud records, or local hit data.

C. Deletion assistance

If you cannot access the in-app deletion flow, contact us through ballistatracking.com/support or email [email protected]. We may need to verify your identity before acting on a request.

12. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information against loss, theft, unauthorized access, disclosure, alteration, and misuse. Depending on the system, safeguards may include encryption in transit, encryption at rest where supported, authenticated access, row-level database security, access controls, secure hosting, data minimization, logging, monitoring, vendor review, and incident-response procedures.

No app, website, transmission method, or storage system is completely secure. We cannot guarantee absolute security.

13. Privacy Incidents

If we become aware of a privacy or security incident involving personal information, we will investigate it, take reasonable steps to contain and remediate it, and make any notifications or reports required by applicable law.

14. Your Rights And Choices

Subject to applicable law, you may ask us to:

• Confirm whether we hold personal information about you
• Provide access to personal information we hold about you
• Correct inaccurate or incomplete personal information
• Delete personal information
• Withdraw consent to certain uses of personal information
• Explain how personal information has been used or disclosed
• Stop sending marketing communications
• Address a privacy concern or complaint

You can also:

• Change camera and microphone permissions in iOS Settings
• Unsubscribe from marketing using the method provided in a message
• Delete your Ballista account in the app
• Choose the local-data deletion option during account deletion
• Delete the app and its device data from the iPhone

To make another privacy request, use the contact information in Section 1. We may need to verify your identity. Applicable law may permit or require us to refuse part of a request; if so, we will explain the reason where legally permitted.

Withdrawing consent or disabling a permission may prevent us from providing a feature that depends on that information or permission.

15. Children And Youth

Ballista is used in a sport played by athletes of many ages. The account system supports parent account types and player profiles, and it may collect an optional birth year. It does not request an exact birth date.

Where a player cannot legally consent to the collection and use of their information, a parent, legal guardian, or other authorized adult should create or manage the account and player profile and provide any consent required by applicable law. Coaches, facilities, and other account holders are responsible for having appropriate authority before entering information about another person.

If you believe Ballista has collected a child’s personal information without appropriate authorization, contact us. We will review the matter and take appropriate action.

16. Marketing Communications

When you join the waitlist or otherwise request product updates, the form will explain what communications you are agreeing to receive. Where required by law, Ballista will obtain consent before sending commercial electronic messages.

You may unsubscribe at any time by using the unsubscribe method in a message or by contacting us. We may retain limited information needed to honour and document your request. Unsubscribing from marketing does not stop account-verification, password-reset, security, support, or other service messages needed to provide a feature you requested or comply with law.

17. Cookies, Device Storage, And Third-Party Services

The website may use cookies, local storage, or similar technologies necessary to operate features, maintain security, prevent abuse, remember basic preferences, and diagnose errors. You can control many website storage technologies through your browser settings, although disabling essential functions may affect the website.

The iOS app uses app-local storage and device preferences as described in this policy. Supabase and other providers may apply their own essential security and session technologies when delivering their services.

The website or app may link to third-party websites or services. Their privacy practices are governed by their own policies, not this policy.

18. Changes To This Policy

We may update this Privacy Policy as Ballista, its features, service providers, and legal obligations evolve. When we make changes, we will post the revised policy and update the “Last updated” date. If a change materially affects how we collect, use, or disclose personal information, we will provide additional notice and obtain consent where required by law.

19. Questions And Complaints

Questions, support requests, privacy requests, or complaints may be submitted through:

Support page: ballistatracking.com/support

Email: [email protected]. If this address is unavailable, privacy requests may be sent to [email protected].

Mailing address:
Ballista Tracking
2482 Yonge Street #1154
Toronto, Ontario M4P 2H5
Canada

We will review and respond to privacy complaints within a reasonable period.

If you are not satisfied with our response, you may have the right to contact the Office of the Privacy Commissioner of Canada or another privacy regulator with jurisdiction over the matter.