#content > h1, #content > .version, #content > .version + .highlight { display: none; }Privacy PolicyScoreRep · Version 1.4 · Last updated: August 2026Summary: Issue reports contain your message, limited technical context, and only screenshots you explicitly select. Private screenshots are deleted 90 days after closure and reports after 365 days. We never attach video, frames, landmarks, keystrokes, content from other fields, or screenshots automatically.

Privacy Policy

ScoreRep · Version 1.4 · Last updated: August 2026

Summary: We collect the minimum necessary for the app to function. Your videos are deleted after analysis. We do not sell your data. You have full control over your information.

1. Data Controller

ScoreRep is the data controller and operates from Portugal. For privacy-related questions, contact: privacy@scorerep.com.

ScoreRep processes personal data under applicable legislation, including the GDPR (Regulation (EU) 2016/679).

2. Data We Collect

Account data: name, email address and password (stored with bcrypt hash).
Profile photo: optional image you voluntarily upload.
Exercise videos: videos you upload for analysis. They are processed and automatically deleted after analysis is complete.
Analysis frames: static images extracted from videos, with correction annotations. Stored while the analysis is in your history.
Analysis results: scores, feedback and data generated by the analysis.
Usage data: number of analyses performed, exercises analysed and dates.
Access data: IP address and approximate geolocation recorded at each session start, for security purposes. Retained for 90 days.

3. Biometric Data (Art. 9 GDPR)

Your exercise videos may contain images of your body in motion, which constitute biometric data under the GDPR. Processing this data requires your explicit consent, which you provide at registration.

This data is used exclusively to generate the technique analysis you requested. It is not used to train AI models, not shared with third parties for advertising purposes, and is deleted immediately after analysis.

4. How We Use Your Data and Legal Basis

Provide the sports technique analysis service — legal basis: Art. 6(1)(b) GDPR — performance of contract.
Maintain your analysis history — legal basis: Art. 6(1)(b) GDPR.
Process payments (via Stripe, if you subscribe) — legal basis: Art. 6(1)(b) GDPR.
Send transactional emails (account verification, password recovery) — legal basis: Art. 6(1)(b) GDPR.
Log IP and geolocation for security purposes — legal basis: Art. 6(1)(f) GDPR — legitimate interest in fraud prevention and service security.
Communicate with you about your account, if necessary — legal basis: Art. 6(1)(b) GDPR.

5. Cookies and Local Storage

ScoreRep uses strictly necessary cookies for the service to function:

Session cookie (HttpOnly, Secure): used to maintain your authenticated session.

When aggregate measurement is enabled, we use Google Analytics configured without advertising, without Google signals, without user identifiers and without sending videos, frames or biometric data. We do not sell data or use analytics for advertising.

In the mobile app, authentication tokens are stored in memory during the session.

6. Sub-processors

Anthropic (Claude API): AI processing for technique analysis. Frames are sent securely and are not stored by Anthropic for model training.
Stripe: payment processing. Subject to Stripe's Privacy Policy.
Resend: transactional email delivery (account verification, password recovery). Subject to Resend's Privacy Policy.
Google Analytics: optional aggregate measurement of pages and product events, without biometric data, videos, frames, emails or user identifiers.
ip-api.com: IP geolocation for security purposes. Only the IP address is sent.

7. Data Retention

Original videos: deleted immediately after frame extraction.
Frames and annotations: stored while the analysis is in your history.
Account data: kept while you have an active account.
Access logs (IP): automatically deleted after 90 days.

8. Your Rights

Under the GDPR, you have the following rights:

Access (Art. 15): request a copy of your personal data.
Rectification (Art. 16): correct inaccurate data.
Erasure (Art. 17): delete your account and all associated data (available directly in the app).
Restriction of processing (Art. 18): request a temporary suspension of processing while a matter is pending.
Portability (Art. 20): request your data in a structured, machine-readable format. Requests handled by email within 30 business days.
Objection (Art. 21): object to processing based on legitimate interest (Art. 6(1)(f)), specifically IP logging for security purposes.
Withdraw consent: withdraw consent for biometric data processing at any time, which will result in account deletion.

To exercise these rights, contact privacy@scorerep.com. We respond within 30 days. You also have the right to lodge a complaint with the CNPD (Portuguese Data Protection Authority).

9. Security and Internal Compliance

Your data is stored on secure servers. Passwords are stored with bcrypt hash. Communications are encrypted via HTTPS/TLS.

ScoreRep maintains an internal record of processing activities as required by Art. 30 GDPR.

10. International Transfers

Use of Anthropic (USA), Stripe (USA) and Resend (USA) involves transferring data outside the EEA. These transfers are made under standard contractual clauses approved by the European Commission (Art. 46(2)(c) GDPR).

11. Coach/Athlete Relationship

When an athlete accepts a coach's invitation, that athlete's analyses become visible to the coach on the platform. The athlete consents to this sharing at the time of accepting the invitation. The coach assumes responsibility for processing this data in accordance with the GDPR and solely for sports coaching purposes.

12. Changes to This Policy

For material changes, we will notify you by email at least 30 days in advance.

13. Contact

Privacy questions: privacy@scorerep.com