Privacy Policy

Effective date: 2026-05-14 · Last updated: 2026-05-25

LiveShot ("we," "us," or the "app") is built by Fernando Guimaraes ("Fernando Development") and provides real-time tennis scores, AI-generated match context, and Live Activities to iOS users. This policy describes what data we collect, why, how long we keep it, and how you can delete it.

We have written this in plain English. If anything here is unclear, email support@liveshotapp.com.

1. Data we collect

1.1 Sign in with Apple

When you sign in, Apple sends us:

A stable user identifier (Apple sub claim) — used as your account key.
Your email address (which may be Apple's private relay address that forwards to your real address — you choose).
On the very first sign-in only, your first name and last name (if you choose to share them).
An OAuth refresh token, which we store so we can break the Sign-in-with-Apple relationship on Apple's side when you delete your account.

1.2 Device data

Your APNs device token — used to send push notifications and to deliver Live Activity score updates to your lock screen and Dynamic Island.

1.3 In-app preferences

Which players you follow, and your per-player notification preferences (match start, set result, match result, with-or-without scores).
Which tournaments you follow.
Global preferences: Spoiler Mode toggle, sport preference (tennis / pickleball), appearance (light / dark / system), and your custom order for the Match Detail widgets.

1.4 Purchases (LiveShot Pro)

If you subscribe to LiveShot Pro, we receive your subscription status (active / expired / refunded) from RevenueCat, the platform that processes the purchase. We do not receive your payment-method details — Apple handles payment.

1.5 Diagnostics

Anonymized crash data and basic performance metrics. These do not include any identifier that links back to you.

1.6 What we do not collect

We do not collect your real name unless you choose to share it via Sign in with Apple.
We do not collect location data.
We do not collect contacts, photos, microphone, camera, health, or any other system-level data.
We do not collect your IDFA (advertising identifier).
We do not track you across other apps or websites.

2. Why we collect it

Data	Purpose
Sign in with Apple identifier, email	Account creation, sign-in, customer support
APNs device token	Push notifications, Live Activities
Follows, notification prefs	Deliver the experience you configure (only your followed players notify you)
Spoiler-mode toggles	Hide scores in the UI and rewrite notifications when you ask us to
Subscription status	Gate Pro features (in-match AI chat, advanced stats)
Diagnostics	Find and fix crashes and slow paths

3. Third parties we share data with

We share the minimum data needed to operate the service. Each processor below has its own privacy practices.

Processor	What they receive	Why
Apple	Sign-in identifier, push device token, purchase events	Sign in with Apple, APNs delivery, App Store payment
DigitalOcean	All app data (we host the backend on DO App Platform + Managed Postgres)	Server hosting
RevenueCat	A pseudonymous subscriber ID + your subscription state	Manage your LiveShot Pro subscription
Anthropic	Tournament + player names and recent results (no user data)	Generate "What's at Stake" + "Behind this Match" briefings
Goalserve	No user data (we send no user identifiers)	Real-time tennis scores
Sentry	Crash data with no user identifier	Crash reporting
TelemetryDeck	Anonymized event names	Product analytics

We do not sell your data. We do not allow these processors to use your data for their own advertising or model training.

4. How long we keep your data

We keep your account data for as long as your account exists. Diagnostic data is retained for up to 90 days. Goalserve and Anthropic do not retain user-linked data from us (we send none).

5. How you can delete your data

In the app, open My LiveShot → Delete account. This:

Calls Apple's revoke endpoint to break the Sign-in-with-Apple relationship.
Hard-deletes your account row on our server.
Cascade-deletes your follows, notification preferences, and APNs device token.

The action is irreversible. You can re-sign-in afterward with the same Apple ID, but you'll start fresh.

You can also email support@liveshotapp.com and we will manually delete on your behalf within 7 days.

6. Children's privacy

LiveShot is rated 4+ and does not knowingly collect data from children under 13. If you believe a child has signed in, email support@liveshotapp.com and we will delete the account.

7. Your rights

Depending on where you live, you may have additional rights under GDPR (EU/UK), CCPA (California), or other regulations:

Access: ask us for a copy of the data we hold about you.
Correction: ask us to fix data that's wrong.
Deletion: in-app delete (Section 5) handles this immediately; you can also email us.
Portability: we'll export your follows + preferences as JSON on request.
Opt-out of "sale" / "sharing": not applicable — we do not sell or share your data for cross-context behavioral advertising.

Send any of these requests to support@liveshotapp.com.

8. Security

All data in transit is encrypted (HTTPS + WSS).
Database is hosted on DigitalOcean Managed Postgres with encryption at rest.
Apple OAuth refresh tokens are stored on our servers in plaintext today — we have an open ticket to move them behind column-level encryption.
JWT auth tokens you receive from us are short-lived (15 minutes for access, 30 days for refresh) and stored on-device in the iOS Keychain.

9. International transfers

Our infrastructure is hosted in New York (NYC1 / NYC3) on DigitalOcean. If you sign in from outside the United States, your data is transferred to and processed in the United States.

10. Changes to this policy

We'll update the "Last updated" date at the top whenever this policy changes. Material changes will be announced via an in-app notice on next launch.

11. Contact

Email support@liveshotapp.com with any privacy question, deletion request, or data-rights request. We respond within 7 days.