Legal

Privacy Policy

Match Up is a training app, not an advertising business. This policy explains exactly what the app collects, why it needs it, where it lives, and how to get it back or delete it.

Last updated · October 24, 2026

The short version

Match Up collects the account you sign up with, the tennis profile you fill in, the training you log, and — only if you create one — a shared People profile. Nothing else about you.
There are no ads, no advertising identifiers, and no third-party marketing or analytics trackers.
Your data is never sold, rented or shared for marketing.
Data is stored in a Supabase (PostgreSQL) database in the United States, protected by row-level security so your account can only ever read and write its own rows.
You can ask for a copy of your data, or have it permanently deleted, by emailing jonathanmahrtguyou@gmail.com.

Who this policy covers

This policy applies to the Match Up iOS app (distributed through the Apple App Store) and this website. The app is built and operated by Jonathan Mahrt Guyou, the sole developer and the data controller for the information described here.

You can reach the developer at any time at jonathanmahrtguyou@gmail.com.

What the app collects

Everything below is information you enter yourself in the app, with the single exception of crash diagnostics. Match Up does not read your location, contacts, calendar, microphone, or photo library (beyond a profile photo you choose to add), HealthKit data, or any wearable or fitness tracker.

Account information

Your email address and a password, handled by Supabase Auth. The password is stored only as a salted cryptographic hash — it is never visible to the developer and cannot be recovered, only reset. An account is required to use the app, so that your training history is private to you and backed up.

Your tennis profile

The details you choose to enter on your profile: name (whatever you type — it does not have to be your legal name), height, weight, playing level, playing style, dominant hand, and your current training phase (for example pre-season or in-season). All of these are optional and can be edited or cleared at any time in the app.

Logged workout data

The training you record: which workout and program week, sets, reps and load — weight in pounds or kilograms, height or distance in inches, time in seconds, resistance-band colour, or bodyweight — plus the exercises performed and the start and completion timestamps of each session. This is the core of the app: it is what produces your personal records, training volume and Workout History. Your training history stays private to your account and is never shown to other users.

Shared People profile (optional)

If you create a People profile to find and follow coaches and teammates, Match Up stores your display name, username, an optional full name or nickname, your bio and an optional profile photo (resized on your device to 256×256 before upload). These are visible to other Match Up users according to your privacy setting — accounts are private by default and you approve followers. Who you follow, who follows you, and who you have blocked are also stored. Workouts you choose to share are visible to your followers. Your training history is not part of your profile and stays private.

Reports

If you report another user from their profile, the report is sent by email to the developer for review, identifying the reported account and the account that reported it.

Crash and error diagnostics

If the app crashes or hits an error, a diagnostic report is sent to Sentry so the bug can be fixed. These reports contain technical information — the error and its stack trace, device model, operating system version and app version — together with a small sample of performance traces. Match Up does not attach your account identity, email or training data to these reports.

What the app does not collect

No advertising, no advertising identifiers (IDFA), and no ad networks.
No third-party marketing, attribution or behavioural analytics trackers.
No location data, contacts, calendars or microphone access, and no photo-library access beyond a profile photo you pick.
No HealthKit, Apple Watch, WHOOP or other wearable or health platform data.
No payment or financial information.
Your data is never sold, rented, or shared with data brokers, and it is not used to train machine-learning models.

Why each piece of data is collected

Account information — to authenticate you, keep your training history attached to you and no one else, and let you sign in on a new device.
Tennis profile — to personalise the app and give context to your training. It is not used for any purpose outside the app.
Workout logs — to run the program, show your progress, personal records, training volume and consistency, and to advance you through the four-week block.
People profile, follows and blocks — to let you find and follow coaches and teammates, share workouts with followers, and keep people you have blocked away from you.
Reports — to review and act on reported behaviour and keep the community safe.
Crash diagnostics — solely to find and fix bugs and keep the app stable.

The legal basis for processing this data is the performance of a contract — you asked the app to deliver and track your training, and it cannot do that without this information — and, for crash diagnostics, a legitimate interest in keeping the app working.

Where your data is stored

Your account and training data are stored in a Supabase project — a managed PostgreSQL database — hosted in the United States. Match Up's data lives in its own dedicated database schema.

Row-level security is enforced at the database level. Every row is bound to the account that created it, so one account can never read or modify another account's training data. Shared People profiles and shared workouts are readable by other users only as your privacy setting and follows allow.
Data is encrypted in transit over HTTPS/TLS and encrypted at rest by Supabase.
Passwords are stored only as salted hashes by Supabase Auth and are never accessible to the developer.
A copy of your current training data is also cached on your own device so the app works offline. That local copy is erased when you sign out.

If you are in the European Economic Area or the United Kingdom, be aware that using the app means your data is transferred to and processed in the United States.

Service providers

Match Up uses a small number of third parties to operate. They process data only to provide their service, and none of them are permitted to use it for their own marketing.

Supabase — database and authentication. Stores your account, profile, workout logs, saved and shared workouts, People profile and photo, follows and blocks. United States.
Sentry — crash and error diagnostics. Receives technical error reports only. United States.
Apple — distributes the app through the App Store. Apple handles downloads and standard install and crash information under Apple's own privacy policy.
Vercel — hosts this website. Standard server request logs only; the website sets no tracking cookies and has no analytics.

One note on external links: the “watch demo” button next to an exercise opens a YouTube search for that exercise name in your browser. Nothing about your account or your training is sent with it, but once you leave the app you are on YouTube's service and Google's privacy policy applies.

How long data is kept

Your account, profile and training history are kept for as long as your account exists — training history is only useful if it is long-running.
When you request deletion, your account and all associated data are permanently deleted within 30 days.
Crash diagnostics in Sentry are retained on Sentry's standard retention schedule (approximately 90 days) and then discarded automatically.
The offline cache on your device is deleted as soon as you sign out, and when you delete the app.

Your rights and how to use them

Whatever jurisdiction you are in, the following are available to you on request. Depending on where you live — for example under the GDPR in Europe or the CCPA in California — some of these may also be legal rights.

Access — ask for a copy of everything stored about you.
Portability — receive that copy in a machine-readable format.
Correction — most of your data (profile, People profile, logged sets) can be edited directly in the app; for anything else, email and it will be corrected.
Deletion — have your account and all associated data permanently erased.
Objection and restriction — ask that processing be limited, or object to it.

To exercise any of these, email jonathanmahrtguyou@gmail.com from the address on your account. Requests are answered within 30 days, free of charge. There is no requirement to give a reason, and using these rights will never degrade your access to the app.

Request account & data deletion

Security

Access to your data is protected by authenticated sessions and database row-level security, all traffic runs over TLS, and passwords are salted and hashed by Supabase Auth. Access to the production database is limited to the developer.

No system is perfectly secure, and no honest policy will claim otherwise. If you believe your account has been compromised, or you have found a security issue in the app, please email jonathanmahrtguyou@gmail.com and it will be treated as a priority.

Children

Match Up is not directed at children under 13, and information is not knowingly collected from them. If you are under the age of digital consent where you live, please use the app only with a parent or guardian's permission. If you believe a child has provided information through the app, email jonathanmahrtguyou@gmail.com and the account will be deleted.

Changes to this policy

If this policy changes in a way that materially affects how your data is handled, the updated policy will be posted on this page with a new “last updated” date, and users will be notified before the change takes effect. This version was last updated on October 24, 2026.

Contact

Questions, requests or complaints about privacy go to the same place as everything else: jonathanmahrtguyou@gmail.com. It is a one-person project, so the reply will come from the person who wrote the code.

For help using the app, see the support page.