GDPR Compliance Information for BallerAI

Last Updated: April 29, 2025

BallerAI ("us", "we", or "our") is committed to protecting the privacy and security of our users' data, in compliance with the General Data Protection Regulation (GDPR) and other relevant data protection laws. This page outlines our approach to GDPR compliance concerning the personal data collected and processed through the BallerAI mobile application and related services (the "Service").

1. Data Controller

BallerAI is the data controller for the personal data processed through the Service.

Contact Email: ballerai.official@gmail.com

2. Personal Data We Collect

We collect information necessary to provide and improve our Service. This may include:

Account Information: Name (optional), email address, password.
Onboarding Data: Age, height, weight, gender, current playing level, position, team schedule, goals, physical stats, injury history, training environment details (e.g., equipment access), sleep habits, nutrition information.
Usage Data: Training session logs, feedback on sessions (e.g., perceived intensity, soreness), nutrition logs (manual input and potentially data derived from image analysis), interaction with features like the AI coach "Ballzy".
Technical Data: Device information, IP address, usage statistics (collected potentially via analytics tools).
Image Data: If using the food image analysis feature, images of meals you upload.

Some of the data collected, particularly concerning injury history or health details provided for personalization, may be considered sensitive personal data (Special Category Data under GDPR). We process this data only with your explicit consent or where necessary for the provision of the Service requested by you.

3. Purpose and Legal Basis for Processing

We process your personal data for the following purposes and based on the following legal grounds:

To Provide and Personalize the Service: Creating user profiles, generating adaptive training plans, managing load, offering injury prevention advice, providing nutrition guidance and tracking. (Legal Basis: Performance of a contract with you; Legitimate interest in providing a personalized service; Explicit Consent for sensitive data).
To Improve the Service: Analyzing usage patterns, troubleshooting, developing new features. (Legal Basis: Legitimate interest in improving our service).
To Communicate with You: Sending service-related notifications or responding to inquiries. (Legal Basis: Performance of a contract; Legitimate interest).
To Ensure Security: Protecting against fraud and ensuring the security of our Service. (Legal Basis: Legitimate interest).
To Comply with Legal Obligations: Meeting legal and regulatory requirements. (Legal Basis: Legal obligation).

Where we rely on consent, you have the right to withdraw it at any time.

4. Your Rights Under GDPR

As a data subject under GDPR, you have the following rights regarding your personal data:

Right to Access: You can request a copy of the personal data we hold about you.
Right to Rectification: You can request correction of inaccurate or incomplete data.
Right to Erasure ('Right to be Forgotten'): You can request deletion of your personal data under certain conditions.
Right to Restriction of Processing: You can request that we limit the processing of your data under certain conditions.
Right to Data Portability: You can request to receive your data in a structured, commonly used, machine-readable format and transmit it to another controller.
Right to Object: You can object to the processing of your data based on legitimate interests or for direct marketing purposes.
Rights related to Automated Decision-Making: You have rights concerning decisions made solely based on automated processing, including profiling.

To exercise these rights, please contact us at ballerai.official@gmail.com. We will respond to your request in accordanceance with applicable data protection laws.

5. Data Security

We implement appropriate technical and organizational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. However, no method of transmission over the Internet or electronic storage is 100% secure.

6. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. Generally, data is retained for the duration of your account activity and for a reasonable period thereafter, or as required by law.

7. International Data Transfers

We use Firebase, a service provided by Google, for backend infrastructure and data storage. As Google operates globally, your data may be processed on servers located outside of the European Economic Area (EEA). Google implements standard contractual clauses (SCCs) approved by the European Commission and other appropriate safeguards to ensure that your data is protected when transferred outside the EEA. You can find more information about Google's data processing terms and locations here and here.

8. Contact and Complaints

If you have questions about this GDPR information or our data practices, please contact us at ballerai.official@gmail.com.

You also have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the GDPR.

Back to Home