Yulant Global Privacy Policy
1Introduction
Yulant ("we", "us", "our", or the "Company") is committed to protecting your personal data and privacy. This Privacy Policy outlines how we collect, use, process, store, and safeguard your personal information when you use the Yulant mobile application, website, and associated cloud analytics platform (collectively, the "Service").
2Information We Collect
A. Information You Provide Directly
- Account Information: Email address, username, display name, and authentication tokens provided when signing in via Email, Sign in with Apple, or Google Sign-In.
- Athletic Profile: Optional dominant hand (left/right), preferred play style, racket and string specifications, and training goals.
B. Sports Analytics, Camera & Motion Sensors
- On-Device Computer Vision: Video feeds captured by your camera during match tracking are processed in-memory on your mobile hardware to estimate 3D shuttlecock trajectories and body pose joint coordinates.
- Device Sensors: Accelerometer and gyroscope telemetry used to correlate swing cadence and down-smash acceleration.
- Computed Match Telemetry: Smash speed, rally duration, court positioning heatmaps, shot quality indices, and score progression are synchronized to your account.
- No Default Raw Video Upload: Raw video recordings remain on your local device and are only uploaded to our secure cloud servers if you explicitly choose to upload or share a highlight reel.
C. Technical & Diagnostic Logs
IP address, device model, operating system version (iOS / Android), crash logs, and network connection status used for debugging and service stability.
3Safe Harbor: Non-Biometric Identification
Our computer vision models extract structural pose landmarks (such as shoulder, elbow, wrist, hip, knee, and ankle 3D spatial points) strictly to compute athletic biomechanics. We do not collect, process, or store facial recognition vectors, iris patterns, voiceprints, or any biometric identifiers capable of identifying any specific natural person.
4Legal Bases for Processing (GDPR Articles 6 & 9)
If you reside within the European Economic Area (EEA), the United Kingdom, or Switzerland, we process your personal data under the following legal bases:
- Contractual Necessity (Art. 6(1)(b)): To create your account, compute athletic performance stats, and deliver core features.
- Explicit Consent (Art. 6(1)(a)): For optional camera access, audio recording, and voluntary video cloud backups.
- Legitimate Interests (Art. 6(1)(f)): For security monitoring, crash diagnosis, anti-abuse prevention, and anonymous algorithm enhancement.
- Legal Obligations (Art. 6(1)(c)): To comply with tax, corporate accounting, or enforceable law enforcement requests.
5Data Storage, Security & International Transfers
- Global Cloud Infrastructure: Overseas account records and telemetry are securely stored in high-availability cloud data centers located in Singapore, protected by TLS 1.3 encryption in transit and AES-256 encryption at rest.
- Cross-Border Safeguards: Where data is transferred internationally, we utilize Standard Contractual Clauses (SCCs) approved by the European Commission.
6Your Rights Under GDPR & CCPA/CPRA
A. GDPR Rights (EEA & UK Users)
- Right of Access (Art. 15): Request a copy of your personal data.
- Right to Rectification (Art. 16): Update or correct inaccurate data.
- Right to Erasure / "Right to be Forgotten" (Art. 17): Request permanent deletion of your account and match telemetry.
- Right to Data Portability (Art. 20): Export your athletic performance logs in structured JSON format.
- Right to Withdraw Consent: Revoke permissions at any time via App Settings.
B. California Privacy Rights (CCPA / CPRA)
- No Sale of Personal Data: We do not sell, rent, or trade your personal data or match footage to third parties for monetary or other valuable consideration.
- No Cross-Context Behavioral Advertising: We do not share your information for targeted third-party advertising.
- Right to Delete: Request full deletion of your personal information collected over the preceding 12 months.
7Third-Party Subprocessors & Apple Refund Audits
- Subprocessors: We share data only with trusted infrastructure providers (cloud hosting, Apple StoreKit, Google Play Billing, Stripe) under binding Data Processing Agreements.
- Apple App Store Refund Audits: If you request a refund through Apple, we may provide Apple with encrypted transaction status information to verify whether subscription benefits were delivered.
8Permanent Account Deletion
You can permanently delete your account at any time in Profile > Settings > Account Operations > Delete Account. Upon confirmation, all personal credentials, match history, and stored cloud videos are permanently, irreversibly, and physically purged from our active databases.
9Contact Us
For any privacy inquiries, data subject requests, or third-party video takedown requests, contact our Data Protection Officer at:
Appendix: Authorized Global Subprocessors & Data Transfer Directory
Effective Date: August 29, 2026