AceSlice ("we", "us", or "our") is a mobile application for iOS and Android that connects tennis players, coaches, and clubs. This Privacy Policy explains how we collect, use, share, and protect personal information when you use AceSlice.
By creating an account or using AceSlice, you agree to the practices described in this policy. If you do not agree, please do not use the app.
This policy applies to the AceSlice mobile applications (iOS and Android) and the website at aceslice.org.
When you create an account we collect your email address, display name, and a password (stored as a cryptographic hash managed by Firebase Authentication). If you sign in with a third-party provider, we receive only the profile information that provider permits you to share.
Your email address and phone number (if provided) are stored separately from the rest of your profile, in an access-restricted record that only you and authorised administrators can read — see Section 11 for how this is enforced.
Players, coaches, and clubs may optionally provide additional profile information, including:
With your explicit permission, AceSlice accesses your device's precise (GPS) location to show nearby courts, players, and coaches sorted by distance. We use foreground location only — we do not track your location in the background or when the app is closed, and we never request "Always Allow" location access. Court address lookups and nearby-venue search are resolved via OpenStreetMap's Nominatim and Overpass services (see Section 5); this app does not use the Google Maps SDK.
If you decline precise location, or on devices where it's unavailable, AceSlice falls back to coarse location derived from your device's regional settings for basic localisation (e.g. currency display) — this does not involve a network request or third-party lookup.
With your permission:
On Android 13 and later, we request permission before sending push notifications. We use push notifications to alert you to match requests, lesson confirmations, booking updates, and messages. On iOS, the system prompts you for notification permission on first use.
AceSlice collects content you create, including match records, booking details, lesson requests, court reviews, and in-app messages (chat). This content is stored in our database and is visible to other users according to the privacy settings within the app. User reports of content violations are stored and reviewed by our team.
We collect information about how you use AceSlice — screen visits, feature interactions, and session duration — through our analytics partner PostHog. This data is pseudonymised and is only collected after you acknowledge the in-app privacy notice on first launch.
On our website (aceslice.org), we additionally use Google Analytics to understand site traffic and how visitors use our pages. Google Analytics only runs after you accept analytics cookies in the cookie-consent banner — see Section 5.
When the app encounters an error, we send a crash report to Sentry. These reports may include device model, operating system version, app version, and a scrubbed stack trace with emails and phone numbers redacted before transmission.
We collect standard device identifiers needed for push notifications (device token), along with device type and operating system version for compatibility purposes.
| Purpose | Data Used |
|---|---|
| Provide and operate the app | Account info, profile data, bookings, messages |
| Match you with nearby players | Location, skill level, availability |
| Enable court bookings and lesson scheduling | Profile, booking details |
| Send push notifications | Device token, notification preferences |
| AI-powered recommendations | Skill level, match history — processed server-side only, never sent to a third-party model directly from your device |
| Moderate content and enforce community guidelines | User-generated content, reports, automated image scanning |
| Detect account takeover and unauthorized access | IP-derived country code, device/browser identifiers, sign-in timestamps |
| Improve the product | Anonymised usage analytics (PostHog) |
| Diagnose and fix bugs | Error reports (Sentry) |
| Verify coach credentials | Verification documents (coaches only) |
| Process subscription purchases | Tokenized purchase receipt (RevenueCat) — see Section 6 |
| Communicate with you | Email address |
We do not sell your personal information. We share data only in the following circumstances:
Your public profile (display name, profile photo, skill level, bio) is visible to other AceSlice users. Messages you send are visible to the recipient(s). Match records and ratings may be visible to other players.
We share data with trusted third-party providers who help us operate AceSlice (see Section 5). These providers process data on our behalf under contractual obligations to protect it.
We may disclose your information if required by law, court order, or to protect the rights and safety of AceSlice, our users, or the public.
If AceSlice is acquired or merges with another company, your information may be transferred as part of that transaction. We will notify you before your data is transferred and becomes subject to a different privacy policy.
| Service | Provider | Purpose |
|---|---|---|
| Firebase Authentication, Firestore, Storage, Cloud Functions | Google LLC | Account sign-in, database, file storage, server-side logic |
| Google Gemini AI | Google LLC | AI-powered summaries and recommendations, processed server-side only |
| Google Cloud Vision | Google LLC | Automated content-safety scanning of chat photos before delivery |
| OpenStreetMap (Nominatim & Overpass) | OpenStreetMap Foundation | Address geocoding and nearby-court search |
| RevenueCat | RevenueCat, Inc. | Subscription entitlement management (see Section 6) |
| Sentry | Functional Software, Inc. | Error and crash monitoring |
| PostHog | PostHog, Inc. | Product analytics (EU-hosted) — app and website |
| Google Analytics | Google LLC | Website traffic analytics — only after cookie consent (see Section 2) |
| Resend | Resend, Inc. | Transactional email delivery (welcome, security alerts, support) |
| Firebase Cloud Messaging / Apple Push Notification service | Google LLC / Apple Inc. | Push notification delivery |
Our analytics data is routed through PostHog's EU data centre (eu.posthog.com). Firebase infrastructure is hosted on Google Cloud. By using AceSlice you acknowledge that your data may be processed in these jurisdictions.
Premium subscriptions are purchased through the Apple App Store or Google Play Store and managed via RevenueCat, a subscription-management platform. When you subscribe:
Court and lesson bookings made through AceSlice are scheduling records only. Any payment for court time or lessons is handled directly between you and the club or coach, outside the app.
We retain your personal information for as long as your account is active. When you delete your account (see Section 9), deletion happens in two stages so nothing is left behind:
Certain data may be retained for a limited period after account deletion for legal compliance, fraud prevention, or dispute resolution. Anonymised or aggregated analytics data (PostHog, Google Analytics) and error logs (Sentry) may be retained in accordance with those services' own retention policies.
Depending on your location, you may have the following rights regarding your personal data:
If you are located in the European Economic Area, the UK, or Switzerland, you have rights under the General Data Protection Regulation (GDPR). Our lawful basis for processing is primarily the performance of a contract (providing the service you signed up for) and, for analytics, your explicit consent given via the in-app privacy notice. You may contact your local data protection authority if you believe your rights have been violated.
If you are located in Turkey, you have rights under the Personal Data Protection Law No. 6698 (Kişisel Verilerin Korunması Kanunu, "KVKK"), including the right to learn whether your personal data is processed, to request correction or erasure, and to object to processing carried out solely by automated means. To exercise these rights, contact us using the details in Section 13; we will respond within the timeframe required by KVKK.
California residents have the right to know what personal information we collect, to request deletion, and to opt out of the sale of personal information. We do not sell personal information. To exercise your rights, contact us at privacy@aceslice.org.
To exercise any of these rights, contact us using the details in Section 13. We will respond within 30 days.
In the app:
From the web: visit aceslice.org/delete-account and submit a deletion request from the email address on your account.
Either path permanently deletes your Firebase Authentication account, your profile and all related records (chat history, bookings, matches, reviews, friend requests), your uploaded photos, and locally cached data on your device. This action cannot be undone.
If you are unable to access your account, email us at privacy@aceslice.org and we will process the deletion within 30 days.
AceSlice is intended for general audiences, including juniors. However, children under 13 (or under 16 in the EEA) must have verifiable parental consent before creating an account.
We do not knowingly collect personal information from children under 13 without parental consent. If you believe a child has provided us with personal information without appropriate consent, please contact us at privacy@aceslice.org and we will delete it promptly.
We use industry-standard safeguards to protect your information, including:
No method of transmission or storage is 100% secure. While we work hard to protect your data, we cannot guarantee absolute security. If you become aware of a security issue, please report it to privacy@aceslice.org.
We may update this Privacy Policy from time to time. When we make material changes, we will notify you by updating the "Effective Date" at the top of this page and, where appropriate, by sending an in-app notification or email.
Your continued use of AceSlice after any changes constitutes your acceptance of the updated policy.
If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us:
We aim to respond to all privacy inquiries within 30 days.