Privacy Policy

Shot:DNA is a tap-first basketball practice-scoring app operated by Andrei Dziarkach (sole proprietor). For any privacy question, data request, or to report an account belonging to a child under 13, email dziarkach@gmail.com. We respond within 30 days.

You score your shots hands-free with Bluetooth-earbud taps (AirPods, Pixel Buds, etc.) or with on-screen buttons. The current product has no microphone access, no voice recording, no camera capture, no video upload, and no pose analysis. This policy describes everything we touch.

• Account info: email, display name, optional avatar.
• Live-scoring telemetry: shots made/missed, the spot you called (corner, wing, free throw…), distance, session start/end, and aggregate stats.
• Control preferences: sound pack, earbud-tap toggle.
• Game and progress data: runs, scores, streaks, card inventory, leaderboard entries.
• Payment metadata: subscription status, plan, billing period. We never see your card number — Stripe handles that directly.
• Device and session info: browser type, device performance signals, time zone offset (stored as tz_offset_minutes so streaks and "today" use your local midnight), error logs.

We don't take video, audio, photos, or pose data — there is nothing to upload.

The current product does not ask for microphone access, does not record audio, does not run on-device speech recognition, and does not send audio to any speech-to-text vendor. Scoring is handled entirely by Bluetooth earbud-tap events and on-screen buttons.

Earbud-tap scoring uses standard browser media-key events. No audio is captured for this input.

Works with AirPods, Pixel Buds, any Bluetooth earbuds, or any wired headphones with media keys. Same media-key event in every case — never microphone, never camera.

• To provide the service (running live scoring, syncing preferences, hosting your account) — necessary to perform our contract with you.
• To bill you (Stripe subscription handling) — necessary to perform our contract.
• To keep the service safe (rate limiting, fraud detection, security logging) — our legitimate interest.
• To answer support requests — our legitimate interest in supporting paying users.

We only share what is strictly needed, and only with vendors that contractually agree to handle your data securely:

• Supabase — hosting your account, preferences, telemetry, and leaderboard entries (managed Postgres + Object Storage). See their privacy notice.
• Cloudflare — edge compute and CDN for the app.
• Stripe — payment processing for subscriptions. Stripe receives your billing details directly; we receive only subscription status. See their privacy notice.
• Resend — sending transactional emails (sign-in, billing receipts, password reset). See their privacy notice.

We do not sell or rent your data. We do not run third-party ad tracking on the app.

Some of our sub-processors operate in the United States. Where required, transfers of personal data from the EEA, UK, or Switzerland are covered by Standard Contractual Clauses (SCCs) and equivalent safeguards in our agreements with each sub-processor.

• Account info: kept until you delete your account.
• Live-scoring telemetry & preferences: kept until you delete them, or delete your account.
• Aggregated, fully de-identified statistics may be kept indefinitely for product analytics.
• Stripe and Resend keep records for as long as required by law (typically 7 years for billing).

You have the right to access, correct, export, delete, or restrict our processing of your data, and to withdraw any consent you have given. The fastest paths:

• Delete your account and everything we hold: Settings → Account → Delete account.
• Any other request: email dziarkach@gmail.com — we respond within 30 days.

If you are in the EEA, UK, or Switzerland, you also have the right to lodge a complaint with your local data protection authority.

California residents have the right to know what personal information we collect and why, the right to access and delete that information, the right to correct inaccuracies, and the right to opt out of any "sale" or "sharing." We do not sell or share personal information for cross-context behavioral advertising. To exercise any right, email dziarkach@gmail.com.

Shot:DNA is not directed to children under 13 (16 in the EEA/UK) without verifiable parental consent. We offer two paths so younger players can still take part:

• Parental consent flow. A child can request an account; we email a one-time link to the parent or guardian they name. The parent sets the password, and the account is created under the parent's email — flagged as parent-supervised. Until that approval lands, no account exists and no profile data is stored beyond the pending-request row, which auto-expires in 30 days.

Supervised accounts get reduced data exposure: leaderboards are hidden, social features are disabled, and the parent on file is the contact for account-related notices (re-consent on policy change, deletion, data-access requests). If you are a parent or guardian and believe we have collected data about a child outside these flows, email dziarkach@gmail.com and we will delete the account and any associated data within 30 days.

Data is encrypted in transit (HTTPS) and at rest at our hosting provider. Access to production data is restricted to the owner and audit-logged. Stripe and Resend are PCI DSS / SOC 2 compliant respectively.

If we make material changes we will update the "Effective" date at the top and, for significant changes, notify you in the app or by email before they take effect.

August 4, 2026: Updated for the tap-first product. Removed the model-training opt-in across signup and account flows — the tap-only product has no audio, video, photos, or pose data to train on.

Shot:DNA is operated as a sole proprietorship by a natural person.

• Name: Andrei Dziarkach
• Address: 9084 Sandra Pl, Manassas Park, VA 20111, USA
• Email: dziarkach@gmail.com
• Legal form: Natural person / sole proprietor (no business entity, no VAT registration).

See also our Terms of Use.