Privacy Notice

Data controller

Pongdot, the developer of the app, is responsible for your personal data under Mexico's Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP). For any question about this notice or your data, write to hola@pongdot.com.

What data the app uses

• Microphone and speech recognition: only during a call that you start. Speech recognition runs on the phone, with Apple's on-device recognition. We do not record or store audio, and audio never leaves your phone.
• Voice assistant: Needle, a model that runs on the phone, interprets the text of each command, and the spoken replies are also generated on the phone. Nothing is sent to any server to understand your commands.
• Bluetooth: only to talk to your ball launcher. The ID of the last ball launcher is stored on your phone so the app can reconnect.
• Data on the phone: your saved routines, history, settings and a voice-command log (the last 7 days, at most 5 MB) are stored on your device. You can delete them by uninstalling the app.
• Pongdot account (optional): you can use the app without an account. If you create one or sign in, we store your username, your password (only as a secure hash, never in plain text), your session (a sign-in token, its expiry date, and the IP address and browser or device you signed in from), and the date and version of the privacy notice and terms you accepted when you created it. To prevent password guessing, each sign-in attempt, successful or not, stores the IP address it came from and the username or email address entered, for about 28 hours. Likewise, to limit mass sign-ups, each attempt to create an account stores its IP address for about 28 hours.
• Profile (optional): you can add a name, your club and a profile photo. The photo (256×256 pixels, at most 64 KB) is stored on our server and, for now, only you can see it; if you don't upload one, your account uses one of our characters.
• Email (optional): your account works without one. If you add one, we send you a link to confirm it, and it only counts once confirmed. We use it only to send you the confirmation link and to let you sign in with it, never for marketing, and we show it to no one. To prevent abuse, each request to add or change your email address, or to resend the link, stores the IP address it came from for about 28 hours.
• Synced routines: while you are signed in, your saved routines (their names and drills) are also stored in your account, so you have them on your other devices. The routines that come with the app are not sent.
• "Help improve Pongdot" (only if you say yes): after about 3 minutes of use, the app asks you once: "Help us improve Pongdot?" Only if you answer "Yes, send", or switch the setting on, does the app send Pongdot the text of what it hears during a call (your commands and anything else said near the phone; never the audio), app events (decisions, errors, timings, connections and the commands sent to the ball launcher) and your calibrations. They are tied to a random install ID, your phone's operating system, the app version and, when you are signed in, your account ID. Only what is logged after your yes is sent, and it never includes audio, passwords or sign-in tokens. To prevent abuse, we keep the IP address they come from for about 28 hours. If you answer "Not now", nothing is sent. You can withdraw your consent at any time in Settings › Privacy › "Help improve Pongdot", and from then on the app stops sending them.

How we use it

• To understand your voice commands and turn them into ball-launcher commands, entirely on the phone.
• To connect and reconnect to your ball launcher.
• To keep your routines, history, settings and command log on your phone.
• If you have an account, to let you sign in and stay signed in securely, to show your profile in the app and to keep your routines on all your devices.
• If you said yes to "Help improve Pongdot", to find bugs and improve how the app understands your commands and aims the ball launcher.

What we do not do

• We do not record your voice or send audio to any server. The text of what the app hears is sent only if you said yes to "Help improve Pongdot".
• We do not track you across apps or websites, we show no ads, and we use no third-party analytics or crash-reporting services.
• We do not sell your personal data or share it with third parties for their own purposes.
• We do not ask for your location or your contacts. Bluetooth is used only to talk to your ball launcher.
• The account is optional, and so are your profile's name, club, photo and email.

Apple features and shared logs

Keyboard dictation and iCloud backups are Apple features outside Pongdot. If you choose to share your voice log from the app's Logs screen, it goes only where you send it.

Who processes your data

Audio never reaches any server. The optional account, synced routines and the "Help improve Pongdot" logs use the providers listed below. We only choose providers that protect your data with the same or an equal level of protection as this notice describes. We give them only the data they need to provide their service to us, and they handle it under their own terms of service and privacy policies:

• Vercel, which hosts pongdot.com, its sign-in service and the service that receives routines and logs.
• Turso, the database that stores accounts, profiles, sessions, routines and logs.
• Resend, which sends the confirmation emails when you add or change your email address.

How long we keep it

App data stays on your phone until you delete it; uninstalling the app removes it. Logs sent through "Help improve Pongdot" are kept for up to 90 days and then deleted automatically. Your account, profile and synced routines are kept for as long as the account exists. The IP addresses we keep to prevent abuse (when you sign in, create an account, change your email address or send logs) are deleted within about 28 hours. A session expires after about 7 days without use and is deleted when you sign out or delete your account; for now, an expired session, with its IP address and device, stays stored until that device connects again or you delete your account.

Deleting your account

You can delete your account at any time in the app: open the menu, tap your account and choose "Delete account"; we ask for your password to confirm. You can also ask us by emailing hola@pongdot.com. When you delete it, we erase your user record and password, your profile (name, club, photo and email), your sessions, your synced routines and the logs tied to your account. Logs sent while signed out carry only the random install ID and are deleted on their own after 90 days.

Security

App data stays on your phone, protected by the operating system. Your account data, routines and logs are encrypted in transit (HTTPS), and your password is stored only as a hash.

This website

pongdot.com uses no analytics or advertising. It sets a session cookie only when you sign in, to keep you signed in. When you visit, the hosting provider and the web-font service (Google Fonts) may log technical data, such as your IP address and browser, to deliver the page.

Children

Pongdot is not directed to children under 13, and we do not knowingly collect their personal data.

Your rights

Under the LFPDPPP you may exercise your rights of access, rectification, cancellation or opposition (ARCO), and revoke your consent, by writing to hola@pongdot.com. You can delete the app data by uninstalling the app, stop sending logs by switching off "Help improve Pongdot" in Settings › Privacy, and delete your account in the app, as described above.

Changes

If this notice changes, we update the date on this page. Continuing to use Pongdot after a change means you accept the updated notice.

Contact

Questions and data requests: hola@pongdot.com.