Your game stays yours.

PlayDNA reads motion, workout, and heart-rate data during sessions you start and stores the resulting personal match records on your iPhone. Match analysis and deterministic Coach plans stay on your devices. Optional app telemetry, Live Duo, and Cloud Coach are the PlayDNA app features that send data to Shuttle Works services; each requires an explicit choice, and Live Duo requires both teammates to sign in with Apple.

The website stores an email with Loops if you join the launch list and serves anonymous usage statistics through Google Analytics. The app does not contain Google Analytics. Its optional product analytics and classifier-research telemetry are off by default and described below.

Personal match records, raw motion, scores, Health data, and deterministic Coach plans live in the app container on your iPhone. They may also be present in an encrypted device backup managed by Apple. Shuttle Works cannot read those personal records.

If you enable Cloud Coach, account records, conversations, consent, active Coach memories, and the PlayDNA+ entitlement link are stored by Supabase in the European Union. Cached conversations on the iPhone expire after 30 days. Deleting the app removes local records but does not delete optional Cloud Coach data; use “Delete Cloud Coach data” in Settings first.

Live Duo requires both teammates to sign in with Apple. To create and relay the shared match, PlayDNA stores each participant’s account identifier and display name, the match configuration, score revisions, and each wearer’s sanitized stroke track. Shared match records are stored by Supabase in the European Union. Both participants can view the resulting shared match evidence.

Raw wrist motion, HealthKit data, personal sessions, Match Profile, Coach, and Trends stay on each player’s devices. Unjoined invitations expire after 15 minutes, interrupted matches expire after 24 hours, and retained shared records expire after 90 days. Deleting either participant’s cloud account removes the shared server match and both sanitized tracks; a teammate’s previously downloaded local snapshot may remain offline.

We request read access to heart rate and workout data through HealthKit so the app can show effort and recovery alongside your shots. HealthKit data is never used for advertising, never sold, and never shared with third parties, in line with Apple's HealthKit terms. You can revoke access at any time in Settings → Health → Data Access.

When the classifier gets a shot wrong you can relabel it. If you also tap “Share correction”, the app sends us the following, and nothing else:

Corrections are hosted by Supabase in the European Union (Ireland) and retained for no more than 24 months. You can delete everything your installation has sent at any time from PlayDNA Settings — “Delete my shared data” — which also removes the identifier.

Cloud Coach is optional and available only after three separate conditions: Sign in with Apple, verified PlayDNA+ access, and Cloud Coach consent. A request contains your typed message, sport, locale, a bounded summary of the active deterministic plan, only the metrics cited by that plan, and up to 20 active Coach memories. It does not contain raw sessions, raw motion, Health data, precise location, contacts, advertising identifiers, or your Apple identifier inside the coaching prompt.

Cloud Coach responses may propose one memory change. The app applies a memory only after the server confirms it, shows the change, and offers undo. You can inspect, edit, or delete each memory; revoke consent; sign out; or delete all Cloud Coach account data in Settings.

PlayDNA retains Cloud Coach messages for up to 30 days. Cloud Coach is enabled only while OpenRouter's optional account-level input/output logging is disabled. Requests are limited to downstream provider endpoints marked zero-data-retention, with downstream provider data collection denied. Access remains restricted server-side to the configured owner account during dogfood. You can revoke consent or delete Cloud Coach data in Settings.

PlayDNA+ is sold through the App Store. Apple handles payment and gives us a signed receipt that proves a subscription is active. The receipt does not contain your name, email or payment details. Apple's own privacy policy governs what Apple keeps.

Under GDPR and similar laws you can ask what we hold, ask us to correct or delete it, or object to processing. “Delete my shared data” removes optional telemetry tied to the random installation identifier. “Delete Cloud Coach data” removes conversations, memories, consent, and entitlement links tied to the optional account. Deleting a cloud account also removes its Live Duo server matches and sanitized tracks, although a teammate’s previously downloaded local snapshot may remain offline. These controls do not delete personal match sessions stored on your iPhone. You can also contact us and we will respond within the period required by applicable law.