Privacy & data protection
Last updated: October 2026
What Aeris Tennis stores about you, why, and the control you have over it. Written to the EU General Data Protection Regulation.
What we store
Account data: your name, username, email address and a hashed password. Passwords are stored only as salted hashes and cannot be read back by anyone, including us.
Player profile: the experience level, goals, availability and preferences you choose to enter. All of it is optional and all of it is editable by you.
Training records: the sessions you log, the lessons you complete, your streak and your goals.
Submitted videos: any video you send for analysis, plus the goals and questions you attach to it.
Coach feedback: the analyses and plans your coach writes for you.
Aeris conversations: if you use the AI assistant, your messages and its replies.
Payments: a reference to each transaction, its amount and status. Card details are never stored by Aeris Tennis — they go directly to the payment provider.
Who can see your videos
Submitted videos are stored in private storage, outside the public web root, and are served only through an authorised endpoint that checks who is asking on every single request.
Only two parties can ever open one: you, and the coach or administrator reviewing it. Other members cannot see your video, your analysis, your profile or your training record — not even by guessing a URL.
Aeris AI and your data
If you are an Ultra member and use Aeris, the assistant is given a summary of your own training record and your coach's written feedback so it can answer usefully. It is never given another member's data.
When an external model provider is configured, that summary is sent to the provider to generate a reply. Your videos are never sent to any AI provider. If no provider is configured, Aeris answers from your records locally and says so.
Legal basis
We process account and training data to perform the contract you enter into when you create an account. Optional profile details are processed on the basis of your consent, which you can withdraw by clearing those fields.
Your rights
Under the GDPR you can request access to your data, correct it, have it deleted, restrict how it is processed, object to processing, and receive a portable copy.
Export: your settings page provides a complete machine-readable export of everything held about you.
Deletion: your settings page also lets you delete your account, which removes your profile, training records, submitted videos and conversations. Payment records are retained only as long as tax law requires.
Retention
Account and training data is kept while your account is open. Submitted videos are kept so you can revisit the analysis; you may delete any individual submission at any time. Sessions expire after 30 days.
Contact
For any data protection request, contact the site administrator using the address shown in your account settings.