aiRef privacy policy

There is no analytics package in this app and no crash reporting — not disabled, not opt-out, absent. The camera is used to find the court, and nothing it sees is uploaded anywhere. What is stored is your account, your matches, and the questions you ask the rules companion.

You start signed in anonymously and can link a Google, Apple or email account later. We hold the account identifier, the email address if you linked one, and an optional display name, photo and two-letter country code. The country is used to make the rules companion's answers sensible and is not a location — the app never asks for location permission, and the web app blocks the browser from offering it.

Each install also gets a random identifier of its own so device capability records can be grouped. It is not an advertising identifier and it is not tied to your handset's hardware.

The camera is used to find the four corners of the court and solve the mapping between the picture and the real court. That work happens on your device.

Nothing it sees is uploaded. That is not a policy we are asking you to trust: the app has no storage dependency compiled into it, every client path to storage is denied by rule, and the AI surfaces are configured to accept no inline media at all. Replay clips are held in memory while you watch them back and discarded afterwards.

We describe that as how it works today rather than as a promise about the future, because a future version may offer to upload a clip. If that ever ships it will be something you choose, and this page will change in the same release.

Matches, their score events and any labels you type — a court name, the names of the two sides — are stored under your account. Score events are append-only: they cannot be edited or deleted after the fact, including by us, because a score you can quietly rewrite is not a record of anything. A correction is stored as another event rather than as a change to the original.

When you ask a rules question, the text of your question and the relevant sections of the rule packs are sent to Google's Gemini model through Vertex AI on its EU endpoint. No image, video or audio is ever included.

The request carries a label saying which app and which surface it came from. It does not carry your name, your email or your match history.

The database is Cloud Firestore in the EU multi-region, and the server functions run in Google's London region. The model runs on Vertex AI's EU endpoint — deliberately, and at a higher price than the global one, so that the text of your questions stays in the EU. Transactional email goes through Mailgun's EU region.

Email addresses are never stored in readable form: they are kept as a keyed hash so that unsubscribes and bounces can be matched without holding the address itself.

Subscriptions on Android are handled by Google Play Billing, and card details never reach us — we receive only whether a purchase is active. Web checkout runs through Stripe, which receives your account identifier so the purchase can be attached to it. Pricing shown in the app during this pre-release period is a placeholder; what the store shows you at the moment of purchase is what you pay.

Today this is a written request, not a button, and we would rather say so than imply otherwise. Email the address at the foot of this page from the account you want removed and we will delete it and everything attached to it within one month.

Self-service deletion and export are specified and not yet built. When they ship, they will appear in the app's own settings and this section will change with them.

You have the right to ask what we hold about you, to have it corrected or deleted, to object to how it is used, and to receive it in a portable form. Email us and we will respond within one month. If you are unhappy with how we have handled your data, you can complain to the Information Commissioner's Office at ico.org.uk.

The date at the top changes whenever the substance does, and this page is always the current version. The app is still in development, so expect this to be revised — in particular when clip upload or self-service deletion arrive, both of which change what this page has to say.