Privacy Policy

• Account data: your email address if you sign up. If you never sign in, you still get an anonymous account tied to your device/browser. (If we add Google Sign-In later, Google would also share your profile name/photo per its own policy.)
• Video you upload or record: batting clips you upload or record in-app for shot analysis. Processed to extract body-pose landmarks (see §2) — we do not perform facial recognition.
• Biomechanical data derived from video: joint angles, swing metrics, and similar figures computed from pose landmarks. This is derived data, not raw biometric identifiers, but we treat it carefully given some jurisdictions (e.g. Illinois BIPA) regulate body-derived data.
• Session, reflection, and mood data: anything you write when logging a match or net session, including free-text reflections and a mood tag. This is sensitive — treat it as you would a private journal.
• Imported career stats: if you import stats from CricHeroes, CricClubs, or ESPNcricinfo, we store what you paste. If you use auto-import with a profile URL instead, we fetch that public page through Firecrawl (see §2) and store the extracted stats plus a short text snapshot of the page.
• Goals: season goals you set in the Your Coach card.
• Team data: if you create or join a team — team name and description, your membership and role, coach notes and drill assignments sent to you, whether you've completed assigned drills, and your mood-sharing choice.
• Usage data: standard technical logs (IP address, browser type, timestamps) from our hosting providers.

We use your data solely to provide the App's features. We share data with these processors, only as needed to run the service:

• Supabase — hosts our database, authentication, and file storage. Your account data, session data, and uploaded videos (if storage is enabled) live here.
• AI model providers (Google Gemini and/or Anthropic Claude) — to generate AI features we send text summaries of your data to one of these providers: for clip feedback, the predicted shot, detected technique indicators, and computed biomechanical metrics (never the raw video); for the Your Coach plan, Weekly Review, and Mindset patterns, short text summaries of your recent analyses, training log entries, written reflections, mood tags, and goals; for a team's Squad Brief (coaches only), the same kind of summaries for players on that team, with moods included only for players who opted in. These providers process the text to return a response and are not permitted to use it to train their models under our API terms.
• Resend — delivers account emails (e.g. password reset) from our verified domain.
• Firecrawl — only if you use the auto-import feature: we send the public profile URL you provide (from CricHeroes, CricClubs, or ESPNcricinfo) to Firecrawl to read that page's content on our behalf. No account data, video, or reflections are sent — just the URL you asked us to read.
• RevenueCat — only in the iPhone and Android apps: manages your Willow Coach subscription. We send it your Willow account id so a purchase can be matched to your account; its SDK also sends device identifiers, store country, and your Willow purchase history. It never receives your video, reflections, or mood data, and it never sees your payment details — those stay with Apple or Google.
• Stripe — only if you subscribe on the web: processes the payment and stores the customer record. We never see or store your card details.
• Our ML inference service — a service we operate that runs pose analysis on your video. Video is processed to extract landmarks and is not retained after analysis unless you've attached it to a Diary session with storage enabled.

We do not sell your data. We do not use your reflections, mood data, or video for advertising.

Teams are optional. If you join one (always via an invite code — never automatic), the following applies until you leave the team:

• Coaches of your team can see your display name and email, your shot analyses (shot, indicators, dates), your logged matches and net sessions (including scores, dismissals, and notes), and whether you've completed drills they assigned.
• Your mood tags and written reflections stay private by default. Coaches only see them if you turn on the sharing toggle for that team, and you can turn it off again at any time.
• All members of your team can see a weekly leaderboard with your display name and training counts (sessions logged, streak length, drills completed) — counts only, never the content of your sessions or reflections.
• Leaving a team ends all of this visibility going forward. Notes a coach already received remain with the team.

You can delete your account at any time from Profile → Account. This permanently and immediately deletes your account and every row of data tied to it — predictions, diary sessions, imported profiles, team notes — plus any video you stored with us, via cascading database deletion. This cannot be undone and we cannot recover it for you once deleted.

Two things deletion does not do, and both matter:

• It does not cancel a subscription bought through Apple or Google. Those are managed by the store, not by us — cancel it in your device's subscription settings, or you will keep being charged.
• Our payment processors (RevenueCat, Stripe) keep their own record of the transaction, because tax and accounting law requires it. Email us and we will ask them to erase what they are permitted to erase.

Willow is not directed at children under 13 (or the applicable minimum age in your country), and we do not knowingly collect data from children under that age.

Depending on where you live, you may have rights to access, correct, export, or delete your data, or to object to certain processing (e.g. under GDPR or CCPA). You can exercise deletion directly in the App. For other requests, contact us at willowappstore@gmail.com.

Your data is protected by database-level access control (Postgres Row Level Security) — you can only ever read or write your own records, enforced at the database, not just in application code. Data is encrypted in transit. No system is perfectly secure; we can't guarantee absolute security.

Willow's Mindset features (mood tracking, pattern detection, video recommendations) are for informational and training-reflection purposes only. They are not a medical device, not a substitute for professional mental health care, and not clinically validated. If you're struggling, please talk to a qualified professional.

We'll update the date at the top of this page when this policy changes, and post material changes in the App.

Questions about this policy: willowappstore@gmail.com