Privacy policy

TENNIS IQ® PRIVACY POLICY

Last updated: September 29, 2026

Tennis IQ® is a registered trademark of 40 Love Mind Set LLC in the United States (U.S. Reg. No. 8267188). Unauthorized use of the Tennis IQ name, logo, or brand assets is prohibited.

This privacy notice for 40 Love Mind Set LLC, operator of the Tennis IQ® application ("we," "us," or "our"), describes how and why we collect, store, use, and/or share ("process") your information when you use our services ("Services"), such as when you:

• Visit our website at https://40lovemindset.com, https://www.tennisiq.app, or any website of ours that links to this privacy notice
• Download and use our mobile application Tennis IQ®
• Engage with us in other related ways, including support, sales, marketing, or events

Questions or concerns? Reading this privacy notice will help you understand your privacy rights and choices. We encourage you to read this notice carefully before using our Services. If you have questions or concerns, contact us at hello@tennisiq.app.

Parents and guardians: Section 7 (Children's Privacy and Parental Consent) explains how we handle personal information of children under 13 and how you can review, delete, or stop the collection of your child's information.

SUMMARY OF KEY POINTS

What personal information do we process? We process the information you provide when you create an account and use the Services, including your name, contact details, date of birth,

tennis profile, and the content you create in the app such as journal entries, progress check-ins, match records, and messages to our AI coaching assistant.

Do we process sensitive personal information? Yes. We process wellbeing-related information (such as mood and reflection entries), which may constitute health-related information under certain state laws; precise location associated with logged matches; and account credentials, with your consent or as otherwise permitted by applicable law.

Do we collect information from children? Yes, with verifiable parental consent. Children under 13 may use the Services only through an account created or approved by a parent or legal guardian who has provided verifiable parental consent. See Section 7.

Do we store your payment card information? No. Payments are processed by Apple, Google, Stripe, and PayPal. We never receive or store your full card number.

Do we use artificial intelligence? Yes. Certain features use third-party AI services to generate coaching responses and audio content. Our contracts with these providers prohibit them from using your inputs to train their models. See Section 2 and Section 5.

Do we sell your information? No. We do not sell personal information, we do not share it for cross-context behavioral advertising, and we do not use children's information for behavioral advertising.

How long do we keep it? We keep personal information while your account is active and delete it from our active systems within 30 days after you delete your account (residual encrypted backups are purged on a regular rotation cycle), except where longer retention is required by law. See Section 8.

What are your rights? Depending on where you live, you may have rights to access, correct, delete, and obtain a copy of your personal information, and parents have specific rights regarding children's data. See Sections 7, 10, and 12.

TABLE OF CONTENTS

1. SUMMARY OF KEY POINTS

2. TABLE OF CONTENTS

3. WHAT INFORMATION DO WE COLLECT?

Personal information you disclose to us

Application and device information

Information collected automatically

4. HOW DO WE PROCESS YOUR INFORMATION?

5. WHAT LEGAL BASES DO WE RELY ON?

6. INTERNATIONAL USERS AND DATA TRANSFERS

7. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?

8. COOKIES AND TRACKING TECHNOLOGIES

9. CHILDREN'S PRIVACY AND PARENTAL CONSENT (COPPA)

Information we collect from children and how we use it

What we do not do with children's information

Parental rights

Retention of children's information

Children between 13 and 18

If we learn a child is using the Services without consent

10. HOW LONG DO WE KEEP YOUR INFORMATION?

11. HOW DO WE KEEP YOUR INFORMATION SAFE?

12. WHAT ARE YOUR PRIVACY RIGHTS?

13. CONTROLS FOR DO-NOT-TRACK FEATURES

14. UNITED STATES STATE PRIVACY RIGHTS

California residents

15. DO WE MAKE UPDATES TO THIS NOTICE?

16. HOW CAN YOU CONTACT US?

17. HOW CAN YOU REVIEW, UPDATE, OR DELETE YOUR DATA?

WHAT INFORMATION DO WE COLLECT?

Personal information you disclose to us

In short: We collect personal information that you provide to us.

We collect personal information that you voluntarily provide when you register for the Services, use features of the Services, or contact us. The personal information we collect may include:

• Identity and contact information: first and last name, email address, phone number, username, password (stored only in hashed form), date of birth, gender, profile picture, and contact preferences
• Tennis and training profile: hand preference, playing position, self-rating, goals, and self-identified strengths and weaknesses
• Content you create in the app: journal entries, progress and wellbeing check-ins (including how you report feeling), match records and statistics, notes about matches and opponents (which, for accounts of children under 13, do not include information that personally identifies another child), and the prompts and messages you send to our AI coaching assistant, together with the AI responses
• Location of logged matches: when you record a match, we may store the location you associate with that match, which may include a venue name you select and its geographic coordinates. We capture this information only in connection with a match you choose to log; we do not continuously track your device or access your device’s location in the background
• Support communications: the content of messages you send us

Sensitive information. With your consent or as otherwise permitted by applicable law, we process the following categories of sensitive information for the purposes described in this notice: wellbeing and mental-performance information (such as mood and reflection entries), which may constitute health-related information under certain state laws; precise geolocation associated with logged matches; and account login credentials.

Payment data. We do not collect or store your payment card number, expiration date, or security code. Purchases made in the Tennis IQ® app are processed by Apple (App Store) or Google (Google Play). Purchases made through our website are processed by Stripe. These processors handle your payment credentials under their own privacy notices: https://www.apple.com/legal/privacy/en-ww/, https://policies.google.com/privacy, https://stripe.com/privacy. We receive and store only a processor-assigned customer or transaction identifier and your subscription status and history.

Social sign-in data. We offer the option to register or sign in using a third-party account (currently Apple and/or Google), and if you choose to do so, we receive basic profile information from that provider, which typically includes your name and email address. We use that information only as described in this notice. We do not control, and are not responsible for, other uses of your personal information by that provider. Where a child under 13 uses a third-party sign-in, we collect only the profile information described above and remain subject to our obligations under Section 7.

Application and device information

If you use our mobile application, we may collect the following where you grant permission:

• Microphone. We may request access to your device's microphone for voice-enabled features and guided audio sessions. Audio captured through these features may be transmitted to our AI service providers to generate a response and is not retained after the response is delivered. You can change this permission at any time in your device settings.
• Push notifications. We may request permission to send push notifications regarding your account, reminders, and features. You can turn these off in your device settings.
• Camera and photo library. We may request access to your device’s camera or photo library if you choose to add or update a profile picture or otherwise upload an image. We access these only at your direction, and you can change this permission at any time in your device settings.

We do not request access to your contacts, calendar, or SMS messages.

Information collected automatically

In short: Some information — such as your IP address and device characteristics — is collected automatically when you use our Services.

• Log and usage data: service-related, diagnostic, usage, and performance information our servers automatically record, which may include IP address, device information, browser type and settings, date/time stamps, features used, actions taken, error reports, and crash data.
• Device data: information about the device you use to access the Services, which may include device and application identifiers, hardware model, operating system and version, language preferences, mobile carrier or internet service provider, and system configuration.

This information is used to maintain the security and operation of the Services, for troubleshooting, and for internal analytics and reporting.

Information from third parties. We do not purchase personal information from data brokers. We receive information from our service providers (for example, our payment processors and app stores) as necessary to operate the Services, and from third-party sign-in providers where you choose to use them.

HOW DO WE PROCESS YOUR INFORMATION?

In short: We process your information to provide, improve, secure, and administer our Services, to communicate with you, and to comply with law.

We process your personal information for the following purposes:

• • To create and manage your account and authenticate you.
  • To deliver the Services, including match logging, statistics, journaling, progress tracking, guided audio sessions, and AI coaching features.
  • To provide artificial-intelligence features. We process the inputs you provide to generate coaching responses, guidance, and audio content. This processing involves third-party AI service providers as described in Section 5. The inputs sent to these providers consist of the prompts and messages you send to the AI coaching assistant. Our contracts with these providers prohibit them from using your inputs to train or improve their models or for any purpose other than providing the Services on our behalf.

To respond to your inquiries and provide support.

• • To send administrative information, such as changes to our terms, policies, and Services.
  • To process your subscription, including billing, renewals, and cancellations.
  • To send marketing and promotional communications, where permitted and in accordance with your preferences. You can opt out at any time. We do not send marketing communications to children under 13. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes, and text-messaging opt-in data and consent will not be shared with any third party.
  • To protect the Services, including security monitoring, fraud prevention, and abuse detection.
  • To evaluate and improve the Services using aggregate and product-analytics data.
  • To comply with legal obligations, respond to lawful requests, and establish, exercise, or defend legal claims.

Safety and crisis situations involving children. If, through a child's use of the Services (including interactions with the AI coaching assistant), we become aware of a risk of death, serious harm, abuse, or self-harm to the child or another person, we may, as appropriate in the circumstances, contact the child's parent or legal guardian, emergency services, or a crisis-service provider, and disclose the information reasonably necessary to address the situation, consistent with the exceptions under COPPA that permit disclosure to protect a child's safety. We do not commit to notifying a parent or legal guardian in every case; we determine what response is appropriate in the circumstances. Where we reasonably believe the risk may originate in the child's home, we may contact appropriate authorities instead of, or in addition to, the parent or legal guardian.

We do not use your personal information for automated decision-making that produces legal or similarly significant effects about you. The AI coaching features described in this notice generate suggestions and informational content only; they do not make binding decisions about you. We do not use your personal information for cross-context behavioral advertising.

AI safety and crisis escalation The AI coaching features are not an emergency service and are not a substitute for 911, the emergency number in your jurisdiction, or professional medical or mental-health care. The AI coaching assistant maintains a crisis-escalation protocol designed to detect indications of suicidal ideation, self-harm, or a risk of death, serious harm, or abuse to the user or another person, and to respond by surfacing crisis resources, including, in the United States, the 988 Suicide and Crisis Lifeline (call or text 988), and, for users outside the United States, the applicable local emergency number or a recognized crisis directory. A summary of this protocol, maintained in accordance with California Senate Bill 243, is published at https://tennisiq.app/safety.

Where our systems flag such content, the interaction may be escalated for review by trained personnel, and we may retain records of the interaction and of the steps we took, notwithstanding the deletion timelines described in Section 8. Consistent with the safety and emergency disclosures in this notice, we may disclose the information reasonably necessary to address the situation to emergency responders, law enforcement, crisis-service providers, and, where appropriate, a parent or legal guardian, and we may make any report required by applicable law, including reports to the National Center for Missing & Exploited Children (NCMEC). We do not commit to notifying a parent or legal guardian in every case; we determine what response is appropriate in the circumstances, and where we reasonably believe the risk may originate in the child’s home, we may contact appropriate authorities instead of, or in addition to, the parent or legal guardian.

For users we identify as under 18, the AI coaching assistant provides a periodic reminder, at least every three hours during a continuous session, that the user is interacting with artificial intelligence and, where appropriate, encourages the user to take a break.

No general obligation to monitor. We do not undertake, and are not obligated, to monitor, review, or screen all user content or interactions with the Services. We do, however, maintain and act in accordance with the safety and crisis-escalation protocol described in this section and in our Terms of Service, and nothing in this notice limits our ability to do so.

WHAT LEGAL BASES DO WE RELY ON?

In short: We process personal information only where we have a valid legal reason to do so.

Where required by applicable law, we rely on the following bases: performance of our contract with you (to provide the Services you request); your consent (which you may withdraw at any time, including verifiable parental consent for children under 13); compliance with legal obligations; and our legitimate interests (specifically, security monitoring, fraud prevention, and aggregate product analytics) in operating, securing, and improving the Services, where those interests are not overridden by your rights. For children under 13, we process personal information only with verifiable parental consent as described in Section 7, except for persistent identifiers used solely to support internal operations.

If you are located in Canada, we may process your information where you have given express consent, or where consent can be implied (except with respect to sensitive personal information or children’s data, for which we obtain express consent), and you may withdraw your consent at any time. In limited circumstances permitted by applicable Canadian law, we may process information without consent — for example, for fraud detection and prevention, for investigations, where collection is clearly in your interests and consent cannot be obtained in a timely way, or where disclosure is required to comply with a subpoena, warrant, or court order.

INTERNATIONAL USERS AND DATA TRANSFERS

The Services are controlled and operated by us from the United States and are directed to users located in the United States. Our servers and data storage are located in the United States.

If you access the Services from outside the United States, you acknowledge and agree that your information will be transferred to, stored, and processed in the United States, where

data-protection laws may differ from those of your jurisdiction. By using the Services from outside the United States, you acknowledge that your information will be transferred to, stored, and processed in the United States. Those who choose to access the Services from outside the United States do so on their own initiative and are responsible for compliance with local law.

European Economic Area, United Kingdom, and Switzerland. The Services are directed to users in the United States and are not intended for, or marketed to, individuals located in the European Economic Area, the United Kingdom, or Switzerland. We process any personal data of individuals in these regions under the legal bases described in Section 3 and honor the access, correction, and deletion rights described in this notice.

Regardless of where you are located, you may contact us at hello@tennisiq.app to request access to, correction of, or deletion of your personal information, and we will consider and respond to your request in accordance with applicable law.

WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?

In short: We share personal information with service providers that help us operate the Services, and in the limited situations described below (such as legal obligations and business transfers). We do not sell your personal information.

Service providers. We share personal information with third-party vendors and service providers that perform services for us and require access to that information to do so. We have contracts in place requiring them to safeguard your personal information, to use it only on our instructions, not to share it with any other organization, to retain it only as we direct, to delete or return it when no longer needed, and to notify us of any security incident affecting your personal information. The categories of service providers we use are:

• • Cloud hosting and database services (our application data is hosted on managed infrastructure located in the United States)
  • Artificial-intelligence service providers, which process the inputs used to generate coaching responses and audio content (currently OpenAI, Anthropic, Google, and/or other model providers accessed via OpenRouter with Zero Data Retention enforced).
  • Payment processors and app stores, which process purchases and subscriptions
  • Subscription management and analytics services, which help us administer subscriptions and understand product usage
  • Email and SMS communication providers, which deliver account, support, and marketing messages

Push-notification services

• • Error monitoring and performance-tracking tools

Legal and safety disclosures. We may disclose personal information where required to comply with applicable law, regulation, legal process, or enforceable governmental request; to enforce our Terms of Service; or where we believe in good faith that disclosure is necessary to investigate, prevent, or respond to suspected fraud, security issues, or a risk of harm to any person, including a risk of death, serious harm, abuse, or self-harm. Emergency and vital-interest disclosures. On our own initiative, and without any requirement of a subpoena, warrant, or other legal process, we may voluntarily disclose personal information to emergency responders, law enforcement, crisis-service providers, and, where appropriate, a parent or legal guardian, when we reasonably believe disclosure is necessary to prevent or address a risk of death, serious harm, abuse, or self-harm to any person. Such safety disclosures may include contacting emergency services (such as 911), a crisis-service provider, or, in the case of a minor, the minor’s parent or legal guardian, and disclosing the information reasonably necessary to address the situation. For users located in the European Economic Area, the United Kingdom, or Switzerland, we rely on the protection of vital interests (GDPR Article 6(1)(d)) and, for any special-category data, Article 9(2)(c) as an applicable legal basis for such emergency disclosures. We may also make any report required under applicable law, including reports to the National Center for Missing & Exploited Children (NCMEC).

Business transfers. We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business. In that event, we will require the acquiring party to honor the commitments made in this privacy notice or will notify you before your personal information becomes subject to a different privacy policy. If personal information of children under 13 would be transferred, we will comply with applicable COPPA requirements, including any required notice to parents.

What we do not do. We do not sell personal information. We do not share personal information for cross-context behavioral advertising or targeted advertising. We do not use personal information of users under 18 for behavioral advertising or disclose children’s personal information to third parties for those third parties' own purposes. We do not disclose your information to advertisers or affiliate-marketing programs.

COOKIES AND TRACKING TECHNOLOGIES

In short: We use a limited set of cookies and similar technologies for authentication, security, and product analytics.

We and our service providers use cookies and similar technologies (such as local storage and software development kits) to keep you signed in, remember your preferences, maintain the security of the Services, and understand how the Services are used so we can improve them. For children under 13, these technologies are used only to support internal operations as described in Section 7.

We use product analytics to measure feature usage and performance. We do not use advertising, remarketing, or cross-site tracking technologies, and we do not permit third parties to collect information through the Services for their own advertising purposes.

Most web browsers accept cookies by default. You can usually set your browser to remove or reject cookies, though doing so may affect certain features of the Services.

CHILDREN'S PRIVACY AND PARENTAL CONSENT (COPPA)

In short: Children under 13 may use the Services only with verifiable parental consent, through an account created or approved by a parent or legal guardian. Parents can review, delete, and stop the collection of their child's information at any time.

We are committed to complying with the U.S. Children's Online Privacy Protection Act ("COPPA") and its implementing regulations with respect to children under the age of 13.

Verifiable parental consent

A child under 13 may use the Services only through an account created or approved by the child's parent or legal guardian. Before we collect personal information from a child under 13, we provide direct notice to the parent or legal guardian describing the information we collect, how we use it, the identities and specific categories of any third parties to which we disclose it and the purposes for those disclosures, and we obtain the parent’s verifiable consent through our web-based parental-consent process, which matches a facial image (“selfie”) to verified authentication photos, such as government-issued ID. The direct notice explains that the parent may consent to our collection and internal use of the child’s personal information without consenting to disclosure of that information to third parties, except where a disclosure is integral to providing the Services; where any disclosure of a child’s personal information to a third party is not integral to the Services, we obtain separate verifiable parental consent before making that disclosure. We retain a record of the consent obtained, including the method used and the date it was provided. The parent or legal guardian is the account holder and is responsible for supervising the account and the child's use of the Services.

We do not condition a child's participation in any activity on the child disclosing more personal information than is reasonably necessary to participate in that activity.

Information we collect from children and how we use it

Where a child under 13 uses the Services with verifiable parental consent, we collect only the personal information reasonably necessary for the child to use the Services. This may include the child's first and last name, date of birth, a username and account credentials, the parent’s or guardian’s email address (used for account management and communication), the tennis and training profile information the child provides, and the content the child creates in the app such as journal entries, progress check-ins, match records, and messages to the AI coaching assistant. We do not collect precise geolocation from children under 13 unless the parent or guardian affirmatively enables this feature through the account’s parental-control settings.

We use this information solely to operate and provide the Services to the child (including the app’s progress-tracking and mental-performance features, and AI coaching responses generated from the child’s inputs, which are not used to train AI models), to communicate with the parent or guardian about the account, to maintain the security of the Services, and to comply with legal obligations.

What we do not do with children's information

We do not use children's personal information for behavioral or targeted advertising, and we do not permit third parties to do so. We do not sell children's personal information. We do not make children's personal information publicly available. We do not disclose children's personal information to third parties for those third parties' own purposes; we share it only with service providers that support the operation of the Services and are contractually required to keep it confidential and secure, or where disclosure is required by law or reasonably necessary to protect against a risk of death, serious harm, abuse, or self-harm to a child or another person.

Voice audio. Where a child uses voice-enabled features, we use any audio containing the child’s voice solely to provide the requested feature and generate the corresponding response. We do not use such audio for any other purpose, do not use it to build a voiceprint or profile, and do not disclose it to third parties for their own purposes. Where we collect audio only to respond to a child’s specific request, we delete that audio promptly after the response is delivered, and in no event retain it longer than necessary to complete the request.

Persistent identifiers. We collect persistent identifiers from children only to support the internal operations of the Services, such as authentication, security, and maintaining the operation of the app. We do not use persistent identifiers collected from children to contact a specific individual, for behavioral or targeted advertising, or for any purpose unrelated to internal operations, and we take reasonable measures to prevent their use for unauthorized purposes.

Parental rights

At any time, a parent or legal guardian may:

• Review the personal information we have collected from their child;
• Request deletion of their child's personal information;
• Refuse to permit further collection or use of their child's personal information; and
• Withdraw consent previously given.

To exercise any of these rights, contact us at hello@tennisiq.app or +1 (617) 922-3550. We may ask for information reasonably necessary to verify that you are the child's parent or legal guardian before acting on the request. We will respond to a verified parental request within 30 days. If a parent or legal guardian withdraws consent or requests deletion, we will stop collecting personal information from the child, delete the child's personal information in accordance with Section 8, and close or restrict the child's access to the Services as appropriate.

Retention of children's information

We collect and retain a child's personal information only for the purpose of providing the Services to that child, communicating with the parent or guardian about the account, maintaining the security of the Services, and complying with our legal obligations, and only for as long as reasonably necessary to fulfill those purposes. We do not retain a child’s personal information indefinitely. We delete a child's personal information within 30 days after the account is deleted, after a parent requests deletion or withdraws consent, or after the account has been inactive for 12 consecutive months, except where longer retention is required by law.

Children between 13 and 18

Users who are at least 13 but under the age of majority in their jurisdiction (generally 18) may use the Services only with the permission and supervision of a parent or legal guardian who has agreed to our Terms of Service. Where we identify a user as under 18 based on the date of birth provided at registration, we apply the restrictions described in this section. We do not send marketing communications to users we know to be under 13, and we do not use behavioral advertising with respect to any user under 18.

If we learn a child is using the Services without consent

If we become aware that a child under 13 has created an account or provided personal information without the verifiable parental consent required by this section, we will take reasonable steps to obtain the required consent or to delete the information and close the account. We collect date of birth at registration and use it to identify users who may be under 13, at which point we direct them through our parental-consent process before any additional personal information is collected.

HOW LONG DO WE KEEP YOUR INFORMATION?

In short: We keep your information while your account is active and delete it within 30 days after your account is deleted.

We keep your personal information for as long as your account is active and for as long as necessary to provide the Services.

When you delete your account, or when we delete it at your request, we delete your personal information from our active systems within 30 days. Residual copies contained in encrypted backups are purged in the ordinary course of our backup rotation, which does not exceed 90 days, and are not restored to active use in the meantime.

We may retain limited information for longer where required to comply with legal, tax, or accounting obligations, to resolve disputes, to prevent fraud and abuse, or to enforce our agreements; however, this does not override a parent’s right to request deletion of a child’s personal information under Section 7. Where we no longer have a legitimate need to process your personal information, we will delete or anonymize it, or, where that is not immediately possible, securely store it and isolate it from further processing until deletion is possible.

Children's personal information is retained as described in Section 7.

HOW DO WE KEEP YOUR INFORMATION SAFE?

In short: We use technical and organizational measures designed to protect your personal information.

Our application data is hosted on managed cloud infrastructure located in the United States. We implement administrative, technical, and physical safeguards designed to protect personal information. These safeguards include encryption of data at rest and encryption in transit (TLS), row-level access controls that restrict each user's data to that user, authentication controls on administrative access, and access limited to personnel who need it to operate the Services. We do not store payment card numbers.

However, no electronic transmission over the internet or information storage technology can be guaranteed to be 100% secure. We cannot promise or guarantee that unauthorized third parties will not defeat our security and improperly collect, access, steal, or modify your information.

WHAT ARE YOUR PRIVACY RIGHTS?

In short: You may review, change, or delete your account at any time, and you may contact us to exercise privacy rights available to you.

You may request to access and obtain a copy of your personal information, request correction of inaccurate information, and request deletion of your personal information, in each case to the extent provided by applicable law. You may exercise these rights by visiting https://tennisiq.app/account or by contacting us at hello@tennisiq.app. We will consider and act upon any request in accordance with applicable law.

Withdrawing consent. Where we rely on your consent to process personal information, you may withdraw that consent at any time by contacting us at hello@tennisiq.app. Withdrawal does not affect the lawfulness of processing before withdrawal.

Opting out of marketing. You can unsubscribe from marketing communications at any time by clicking the unsubscribe link in our emails, replying "STOP" or "UNSUBSCRIBE" to our SMS messages, or contacting us. We may still send you service-related messages necessary for the administration of your account.

Account information. You can review or change your account information, or delete your account, by logging into your account settings or by contacting us. Upon deletion, we handle your information as described in Section 8.

Parents. Parents and guardians of children under 13 have the additional rights described in Section 7. Parents and guardians of users between 13 and 18 should also review the applicable provisions in Section 7.

CONTROLS FOR DO-NOT-TRACK FEATURES

Most web browsers and some mobile operating systems include a Do-Not-Track ("DNT") feature you can activate to signal your preference not to have your online browsing activity monitored.

No uniform technology standard for recognizing and implementing DNT signals has been finalized. We do not currently respond to DNT browser signals. We honor Global Privacy Control (“GPC”) signals as valid opt-out-of-sale and opt-out-of-sharing requests where required by applicable law; because we do not sell personal information or share it for targeted advertising, no change in processing is needed. We do not track users across third-party websites or applications for advertising purposes.

UNITED STATES STATE PRIVACY RIGHTS

If you are a resident of a U.S. state that has enacted a comprehensive consumer privacy law (including, as of the date above, California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia; confirm the current list of enacted and effective laws before posting, and whether any require named disclosure, per open item (e)), you may have the rights described below. These rights are not absolute, and in certain cases we may decline a request as permitted by law.

• • The right to know whether we process your personal information and to access it
  • The right to obtain a copy of the personal information you provided to us
  • The right to correct inaccuracies in your personal information
  • The right to request deletion of your personal information
  • The right to opt out of the sale of personal information, targeted advertising, and profiling in furtherance of decisions producing legal or similarly significant effects. We do not sell personal information, do not engage in targeted advertising, and do not conduct such profiling.
  • The right to limit the use and disclosure of sensitive personal information
  • The right not to be discriminated against for exercising these rights

To exercise these rights, visit https://tennisiq.app/account or email hello@tennisiq.app. We may need to verify your identity before acting on your request, and we will use information you provide for verification only. If you use an authorized agent, we may require proof of authorization. We will respond within 45 days of receiving a verifiable request, or within such other period as applicable law requires; we may extend this period by an additional 45 days where reasonably necessary, with notice to you. If we decline to act and you wish to appeal, email hello@tennisiq.app; we will inform you in writing of the outcome of the appeal and the reasons for it within the period required by applicable law.

Categories of personal information we collect

We have collected the following categories of personal information in the twelve (12) months preceding the “Last updated” date of this notice:

We retain each of these categories for as long as the user maintains an account with us and delete them as described in Section 8. You have the right to limit the use and disclosure of your sensitive personal information; we use it only for the purposes disclosed in this notice and as permitted by applicable law.

We have not sold personal information or shared it for cross-context behavioral advertising in the preceding twelve (12) months. We disclose personal information to service providers for business purposes as described in Section 5.

California residents

California Civil Code Section 1798.83 ("Shine The Light") permits California residents to request, once a year and free of charge, information about categories of personal information (if any) we disclosed to third parties for direct marketing purposes and the names and addresses of those third parties. We do not disclose personal information to third parties for their direct marketing purposes. To make such a request, contact us using the details below.

If you are under 18 years of age, reside in California, and have a registered account with the Services, you have the right to request removal of unwanted data that you publicly post on the Services. Contact us with the email address associated with your account and a statement that you reside in California, and we will ensure the data is not publicly displayed on the Services within 45 days of receiving your verified request, though it may not be completely removed from all systems (for example, backups).

DO WE MAKE UPDATES TO THIS NOTICE?

In short: Yes, we will update this notice as necessary to stay compliant with relevant laws.

We may update this privacy notice from time to time. The updated version will be indicated by an updated "Last updated" date. If we make material changes, we will notify you by prominently posting a notice of the changes or by sending you a direct notification at least 30 days before the changes take effect, unless a shorter period is required by law or a court or regulatory order. Where a material change affects the personal information of children under 13, we will obtain new verifiable parental consent before applying the change to that information. Non-material changes will be effective as soon as the updated notice is accessible. We encourage you to review this notice periodically.

HOW CAN YOU CONTACT US?

If you have questions or comments about this notice, or wish to exercise parental rights regarding a child's personal information (see Section 7 for response timeframes), you may email us at hello@tennisiq.app, call +1 (617) 922-3550, or write to us at:

40 Love Mind Set LLC 2 Washington St Pembroke, MA 02359 United States

HOW CAN YOU REVIEW, UPDATE, OR DELETE YOUR DATA?

You may have the right to request access to the personal information we collect from you, to change that information, or to delete it. To review, update, or delete your personal information, visit https://app.40lovemindset.com/account or contact us at hello@tennisiq.app. Parents and guardians may exercise these rights on behalf of a child under 13 as described in Section 7; parents and guardians of users between 13 and 18 should also review Section 7.