1. About this policy
Kambda S.A., doing business as NextPointIQ ("NextPointIQ," "we," "us," or "our"), provides a tennis performance and coaching platform through nextpointiq.com, our mobile application, and related services (collectively, the "Services"). This Privacy Policy explains how we collect, use, disclose, and protect personal information when you use the Services or communicate with us.
Kambda S.A. is the controller of the personal information covered by this policy unless an organization, such as an academy, university, federation, or coach, provides the Services to you and determines how your information is used. In that situation, the organization may be the controller and NextPointIQ may process information on its behalf.
2. Information we collect
Information you or your organization provide
- Account and profile details, such as name, email address, phone number, password, date of birth or age, preferred language, and playing characteristics.
- Organization and relationship information, including academy, team, role, coach, player, parent or guardian, and membership records.
- Tennis and performance information, including training plans, session records, journals, reflections, match details, scores, statistics, coaching notes, goals, reports, and assessments.
- Content and media, including photographs, videos, audio, documents, messages, and files you upload or share.
- Billing and transaction information, such as subscription, purchase, invoice, and payment status. Payment card details are collected and processed by Stripe, not stored by NextPointIQ.
- Communications, support requests, survey responses, and other information you choose to provide.
When you use the Services, we may collect device and browser type, operating system, IP address, identifiers, language, general location derived from IP, access times, pages and features used, referring URLs, application events, notification status, logs, crash data, and diagnostic information. We use cookies, local storage, and similar technologies to keep you signed in, remember preferences, provide core functionality, protect the Services, and understand performance.
Information collected automatically
With your permission, the mobile or web application may access your camera, microphone, photos, files, or notification settings so you can record or upload player media and receive alerts. You can change these permissions in your device or browser settings, although some features may then be unavailable.
Device permissions
3. Sources of information
We receive information directly from you; from a parent, guardian, coach, administrator, or organization authorized to manage a player; automatically from your device and use of the Services; and from service providers that support authentication, payments, communications, analytics, security, and infrastructure.
4. How we use information
Depending on where you live, we rely on performance of a contract, consent, compliance with legal obligations, and our legitimate interests in operating and securing the Services. You may withdraw consent at any time, but withdrawal does not affect processing already performed.
- Provide, operate, personalize, maintain, and improve the Services.
- Create and secure accounts, verify access, manage organizations, and synchronize devices.
- Record training and matches, generate reports, deliver coaching tools, and process optional AI Coach and video-analysis requests.
- Process subscriptions and purchases, maintain entitlements, and prevent billing fraud.
- Send account, security, service, invitation, and notification messages.
- Respond to support requests and communicate about the Services.
- Monitor reliability, troubleshoot errors, prevent abuse, and protect users, NextPointIQ, and others.
- Comply with law, enforce our Terms and Conditions, and establish or defend legal claims.
5. AI Coach and video analysis
AI and video-analysis features are optional. When you choose to use them, we process the prompts, player context, performance data, and media needed to provide the requested output. AI Coach may send relevant text and context to OpenAI. Video analysis may use NextPointIQ's processing pipeline, including MMPose/RTMPose and TrackNetV3, running on Amazon Web Services, to estimate body pose, movement, and ball trajectory and to produce reports or annotated media.
Automated outputs may be incomplete or inaccurate and are informational only. We do not use them to make legal or similarly significant decisions about you. You can avoid this processing by not initiating the optional feature and may contact us with questions about an output.
6. How we disclose information
We may disclose personal information in the following circumstances:
We do not sell personal information, and we do not share it for cross-context behavioral advertising or display third-party advertising in the Services.
- Within your account or organization. Information is visible according to your role, relationships, sharing choices, and the organization's settings—for example, to a player, parent, coach, or authorized administrator.
- Service providers. Vendors process information for hosting and storage (Amazon Web Services), payments (Stripe), transactional email (SendGrid), notifications and crash reporting (Google Firebase and Apple Push Notification service), AI Coach (OpenAI), and other technical or professional support.
- Legal and safety purposes. We may disclose information when reasonably necessary to comply with law, respond to valid legal process, enforce agreements, investigate fraud or abuse, or protect rights, safety, and property.
- Business transactions. Information may be transferred as part of a merger, financing, acquisition, reorganization, bankruptcy, or sale of assets, subject to appropriate safeguards.
- With your direction or consent. We disclose information when you ask us to, such as when generating a shared report.
7. International transfers
NextPointIQ is based in Costa Rica and the Services and our providers may process information in the United States and other countries. Those countries may have different data-protection laws. Where required, we use appropriate safeguards for international transfers, such as contractual protections, and take steps designed to protect information in accordance with this policy.
8. Data retention
We retain personal information for as long as needed to provide the Services, maintain your account or organizational records, meet legal and accounting obligations, resolve disputes, and protect the Services. Retention periods vary by data type and account settings. Deleted video-analysis results and derived artifacts may remain recoverable for a limited retention period before permanent removal. Source media associated with a journal or other record may remain until that source record or account is deleted. Backups may persist for a limited period before being overwritten.
9. Security
We use administrative, technical, and organizational safeguards designed to protect personal information, including access controls, private storage, encrypted transmission, short-lived media links, logging, and account authentication. No system is completely secure, so we cannot guarantee absolute security. Keep your credentials confidential and contact us if you believe your account has been compromised.
10. Minors and player information
Users under the age of legal majority may use the Services only with authorization and supervision from a parent, legal guardian, or authorized organization representative, as applicable. An adult who creates or manages a minor's profile represents that they have the authority to provide the minor's information and media and to authorize the processing described in this policy. Before uploading media, the uploader must also have permission from other identifiable people depicted or heard. Contact us if you believe a minor's information was provided without appropriate authorization.
11. Your privacy choices and rights
Depending on your location and subject to applicable exceptions, you may have the right to access, correct, delete, restrict, or object to processing of personal information; receive a portable copy; withdraw consent; or appeal a decision about a privacy request. You may update profile information and notification choices in the Services and may delete an eligible account from account settings. Organizational data may need to be handled by the organization that controls it.
To exercise a right, email hello@nextpointiq.com. We may need to verify your identity and authority before completing a request. You may also have the right to complain to your local data-protection authority. We will not discriminate against you for exercising a privacy right.
12. Cookies and browser signals
You can control cookies through your browser, but disabling essential storage may prevent the Services from working properly. Because there is no uniform standard for "Do Not Track" signals, we do not currently respond to them. Since NextPointIQ does not sell personal information or use it for cross-context behavioral advertising, Global Privacy Control signals do not change those practices.
13. Third-party services
The Services may link to third-party sites or services that operate under their own privacy policies. This policy does not govern their independent practices. Review their policies before providing information to them.
14. Changes to this policy
We may update this policy to reflect changes to the Services, our practices, or legal requirements. We will post the revised version with a new "Last updated" date and provide additional notice when required by law.
15. Contact us
Kambda S.A. DBA NextPointIQ VMG Building, 1st Floor Guachipelin, San Jose 00506 Costa Rica
Email: hello@nextpointiq.com Phone: +506-2505-5438