FormWatch
Privacy policy
FormWatch is an iPhone app that shows your pickleball swing against a better one. It is made by Khanh Nguyen in the United States. “We” and “us” mean FormWatch. This policy covers the app and formwatchapp.com.
The short version
These are the app’s own words. Everything below explains them.
Your videos stay on this phone. In Photos. FormWatch keeps a link to each one, not a copy.
Tracking and scoring run here. On the phone, offline too. No video is uploaded.
Body points and scores back up. No pixels, so a new phone keeps your history.
The photo stays on this phone. (Your profile photo.)
No motion data. Your swing is read from the video.
Birth year: Asked once, for privacy rules.
Before and after. Never on it: your name, where you played, anyone else, unblurred. It is made on the phone and handed to the iOS share sheet; nothing is uploaded.
We don’t sell your data, we don’t show ads, and we don’t track you across other apps or websites.
Before launch
FormWatch is in testing. This policy describes the app as it will be at launch in December. Some of that isn’t in the app yet, and we’d rather say so:
- RevenueCat, PostHog and Sentry aren’t in the app yet, and it sends them nothing. They’re listed below because they arrive before launch.
- The backup of body points and results, the question before your first Film or Import, Export my data, and Before and after come in later builds. Until the backup arrives, your sessions stay only on your phone. Your account (its email address) is already with Supabase.
- Delete account comes in a later build too. Until then, please write to hello@formwatchapp.com from your account’s address and we’ll delete your account and its data.
What we collect and why
Your account
You sign in with Apple or with a code sent to your email. We keep your account’s email address (or the private relay address Apple gives us if you hide yours), your Apple user identifier if you sign in with Apple, and an account id. The account is what makes your data yours: it brings your history back on a new phone and carries Pro and your free clips.
Your profile
Your display name, paddle hand, backhand style, level, and an age bracket (13–17 or 18 and over). Your birth year stays on the phone; only the bracket is backed up. Your profile photo stays on the phone and is never uploaded.
Body points
The app turns your video into body points on the phone: where your shoulders, elbows, wrists, hips, knees and feet are in each frame. The points of your eyes and mouth are removed on the phone before anything is saved. Body points are backed up to your account. See Body points.
Your results and settings
Scores, cues, which reps you picked, your ghost, things to work on, before-and-after pairs, your streak and your settings. These are backed up so a new phone keeps them.
Clip facts
For each session: its length, frame rate, size, camera view and when it was recorded, plus your phone model, iOS version and app version. Never the video, and never where it was filmed.
Purchases
Pro is bought through Apple. Apple handles payment; we never see your card. We and RevenueCat, the service that tracks subscriptions for us, keep your plan, renewal dates, country and price.
How the app is used
Events such as “a session finished” or “the ghost was opened”, with the app version and phone model, linked to your account id, through PostHog. Never your email, name, birth year, videos or body points. We don’t collect these events for players under 18.
Crash reports
When the app crashes, Sentry receives what went wrong, your phone model, iOS version and app version. Crash reports carry no account id, no screenshots and no data from your sessions.
Support email
If you write to us, we keep your message and what you attach. Email support from the app adds your app and iOS version and a support id, never a video.
What the app asks to use
- Camera: to film your sets. Your videos stay on your phone.
- Microphone: to hear paddle contact, which helps find the moment you hit the ball. Sound stays in your video.
- Photos: to open the clips you pick, and to save the sets you film and the before-and-after videos you make.
You can turn any of these off in the iPhone’s Settings. The app tells you what stops working.
What we never collect
Your videos, your phone number, your location (precise or rough), your contacts, Health data, motion sensor data, voice recordings, face templates or face recognition data, and advertising identifiers.
Body points
Some state laws treat data about a person’s body as biometric data. We treat body points with the same care, whether or not a law requires it:
- We use body points only to give you your analysis. We never use them to identify you or anyone else.
- No face mesh, no face recognition, no face matching, ever. The eye and mouth points are removed on the phone.
- Before your first Film or Import, the app asks first: “FormWatch turns your videos into body points on this phone. The points and your scores back up to your account; your videos don’t.” Nothing is backed up until you agree.
- Body points and results are deleted when you delete a session, when you delete your account, or 24 months after your phone last backed up, whichever comes first.
- We never sell or share them, except with Supabase, which stores the backup for us.
Consumer health data (Washington, Nevada)
Washington’s My Health My Data Act and Nevada’s consumer health data law may treat body points and form scores as consumer health data. If they do: we collect them only to show you your analysis and back it up; we share them only with Supabase for that backup; we never sell them; you can see them with Export my data and delete them with Delete account; and we keep them only as long as How long we keep it says. To ask about your data, write to hello@formwatchapp.com from your account’s address.
Who we share with
Only the services that run FormWatch for us, each under a data processing agreement:
- Supabase: your account, sign-in, and the backup of body points, results and settings.
- RevenueCat (from launch): your subscription status.
- PostHog (from launch): app usage events (players 18 and over), and visits to this website if we turn visitor counts on.
- Sentry (from launch): crash reports, with no account id.
- Resend: sending email from formwatchapp.com, such as the waitlist note.
- Vercel and Cloudflare: hosting this website, and its spam check.
- Google Fonts: the website’s typefaces. Your browser fetches them from Google, which sees your IP address.
Apple handles purchases and Sign in with Apple under its own privacy policy. We share data with anyone else only if the law requires it.
Other people in your videos
Please film only people who are happy to be filmed. Your videos never leave your phone through FormWatch. When you share a before-and-after, anyone else in the picture is blurred, and the app won’t make one when someone crosses in front of you.
Children and teens
FormWatch is for players 13 and up. The app asks for your birth year before it sends anything anywhere. If you are under 13, it stops there: no account is made and nothing is collected; the phone keeps only a note that the app was blocked. For players 13 to 17 we collect no usage events. If you are a parent and think your child under 13 has given us data, please write to hello@formwatchapp.com and we’ll delete it.
How long we keep it
- Your videos: in your Photos, for as long as you keep them. We never have a copy.
- Body points, results and settings: until you delete the session or your account, or 24 months after your phone last backed up.
- Your account and profile: until you delete your account.
- Your consent: which text you agreed to and when, for the life of your account. After you delete it we keep a receipt with nothing that identifies you, for up to 3 years.
- Purchases: until you delete your account; Apple and RevenueCat keep their own records.
- Usage events: deleted with your account.
- Crash reports: about 90 days.
- Support email: 2 years after your last message.
- The waitlist: until 12 months after we write about the launch, or until you ask to come off.
Deleted data can stay in Supabase’s backups for up to 7 days before those backups roll off.
Your choices and rights
- See your data: Settings › Privacy and data › Export my data gives you a file of everything we back up.
- Delete everything: Settings › Account › Delete account deletes your account and all its data, on the phone and in the backup. Your videos stay in Photos. It doesn’t cancel a subscription; you do that in your Apple account settings.
- A new phone: sign in, and your history comes back.
- Anything else: write to hello@formwatchapp.com from your account’s address to see, correct or delete your data. Depending on where you live, the law may give you these rights; we honour them for everyone.
Security
Your videos never leave your phone through FormWatch, so they can’t leak from us. The backup is sent over encrypted connections and stored so that each account can read only its own rows. Your sign-in is kept in the iPhone’s Keychain. Only we can see the backup as a whole, and only to run FormWatch; each account can read only its own rows.
This website and the waitlist
If you join the waitlist we keep your email address, where on the site you signed up and when. We use it only to write to you about FormWatch: a welcome note now and a note when it’s on the App Store. To come off, reply to either note or write to hello@formwatchapp.com.
The form uses Cloudflare Turnstile to check that you’re a person; Cloudflare sees your IP address and browser details for that check. If we turn on visitor counts, PostHog records page visits without cookies. Vercel, which hosts the site, keeps short server logs with IP addresses. This website sets no advertising cookies.
Changes and contact
If we change this policy we’ll post the new version here with a new date. If a change matters, we’ll also tell you in the app or by email before it takes effect.
Questions about privacy: hello@formwatchapp.com.