Hi5Tennis

Effective 2026-10-17 · D5STUDIO LLC

Hi5Tennis Privacy Policy

This policy explains how D5STUDIO LLC collects, uses, protects, shares and deletes information in Hi5Tennis, and what rights you can exercise. By using the app you agree to this policy; the service is for users aged 18 or older.

1. Controller and Scope

This policy is issued by D5STUDIO LLC (USA, "we", "us") as data controller and applies to the Hi5Tennis iOS and Android apps and the hi5tennis.com landing pages. By using the service you confirm you have read and understood this policy and that you are 18 or older (see Section 5). If you do not agree, please do not use the service.

The service is currently distributed primarily to local amateur tennis communities in the United States. If you use it from elsewhere, see Section 13 (International Transfers) and Section 14 (Your Rights).

2. Information We Collect

  • Account information: display name, email, sign-in provider (Apple / Google / Email), the account id our sign-in service assigns to you, and the date of birth used to enforce the 18+ registration gate; Find Players uses it too, so only adults find each other there. Your email and date of birth are never shown to other users. Before you sign in, the app uses an anonymous sign-in from our sign-in service: it has an account id of its own and no profile, and cannot read league information (Section 4); the app does not delete it.
  • Gender: required when you create your profile, because your Captain needs it for men's, women's and mixed lines. Only you and your team's Captain see it. The server also uses it to check lineups, so a Captain or Co-Captain who puts a player on a men's or women's line that does not fit is told that the player does not match it. It never appears in Find Players or reports.
  • Mobile number (optional): a profile detail only. It is never shown to other users or in Find Players or reports, never used for sign-in or matching, and we send no text messages to it.
  • Player profile: photo or initials, city and self-rated NTRP. When you add a photo, our server turns it into a small 150 × 150 icon and keeps neither the original nor its metadata (location included). We also keep when you made your profile, when you last changed your photo, and how many times and when you last changed your name (these decide when you may change them again), and your answer to "Let contacts matching find me", which does nothing while contacts matching is not offered.
  • Match and league data: your teams and roles (Captain, Co-Captain, Organizer) and join requests; RSVPs, fixtures, availability, lineups, scores, standings, coordination proposals, rulings and audit records.
  • Limited text communications: Team Stream shows the lines' scores only, with no text; pre-match notes on a casual fixture are kept only on your phone. Team Notices, Organizer Broadcasts, match-bound Match Threads and one-to-one direct messages are not available yet (see "Not available yet" below); once available, direct messages will be limited to plain text (≤200 characters, auto-deleted after 24 hours, contacts limited by your current role). We do not provide photo/video uploads or follow feeds.
  • Invite and deep-link records: invite links and display codes are equivalent. When you join a team, we record the team, how you joined (for example by a join request or a team code) and when; a join request also records its status and when it was decided.
  • Conduct records: fact-based entries created by Captains, visible by default only to relevant Captains and Organizers. A person named in a record may access its content under Section 6 and appeal to the Organizer.
  • Agreement consent records: that you accepted the Terms and this policy, and when.
  • Device and diagnostic information: the app has no push notifications at present and includes no crash-reporting, analytics or advertising SDK, and our own code collects no push token, crash log or device identifier. The Google Firebase services the app uses receive, with each request, technical details of the app and device (such as the device model, operating system and app identifier) and the IP address the request comes from, which Google uses to run and measure those services. These request records and our servers' operating logs, which can include your account id (and your email address if a mail to you fails), are kept under our hosting provider's log retention. The RevenueCat SDK, which the app starts at launch for subscriptions, sends RevenueCat with each request your account id (before you sign in, an anonymous id of its own), similar technical details (such as the device model, operating system, app version, language and App Store country) and the identifier Apple gives the app for your device; RevenueCat may keep them under its terms.
  • Subscription and entitlement information: transaction identifiers, subscription status and expiry returned by Apple / Google and synced through RevenueCat. We do not receive or store your card number, bank account or full billing address.
  • League fee bookkeeping: fee rules, amounts, purpose, deadlines and refund rules set by Organizers or Captains; your "I have paid" self-report, remark code, and confirmation / waiver / refund flags with timestamps. Payment QR codes are uploaded by a Captain or Organizer and point to third-party payment services; payment happens off-platform and we never touch the funds.
  • Find Players: your switch "Let nearby players find me" and when you last changed it. It is off unless you turn it on, and turning it on needs a city in your profile. "Nearby" means the city in your profile: your city first, then your state. We never use or collect your phone's location. Your city also picks the "Public leagues near you" in Find Players and orders Local Public Leagues. A search itself stores nothing new except when it was made (see "Limits"). If our moderator pauses you in Find Players, we also record the pause, when it was made and by which moderator account.
  • Blocks: the players you block in Find Players, each with the name they had when you blocked them and the time.
  • Reports: when you report a player in Find Players, we record who reported whom, the reason you chose (one of four, with no free text), the time, the reported player's name at that time, the report's status and the moderator's actions on it. A new report, or a report made again with a different reason, is also mailed to our support mailbox (see Sections 4 and 8).
  • Limits: to prevent abuse, our server counts each account's reports (at most 2 a day) and Find Players searches (at most 50 an hour), keeping only the day's report count and the times of your recent searches. These records are not shown to anyone in the app and are deleted with the account.
  • Not offered at present: contacts matching, social friend sync and a public profile (including public or affiliate links) are not offered at present; nothing is matched, synced or published. If we add any of them, we will update this policy first and ask for your consent.
  • Not available yet: direct messages, Team Notices and Organizer Broadcasts, Match Threads, Drill Calls, conduct records, league fee bookkeeping (payment QR codes included) and sponsorship are shown in the app as "not available yet", and we collect nothing for them; what this policy says about them applies once they are available. Casual squads and their fixtures, pre-match notes included, are kept only on your phone.
  • Sponsorship and aggregate reporting: Organizers may enter sponsor identity, contact, off-platform agreement reference value, in-kind valuation, brand assets, placement rights and delivery status. The platform may count aggregate placement impressions, clicks, offer saves and sponsor-reported redemptions. Sponsors do not receive player profiles, rosters, contact details or person-level activity.

We do not collect: your phone's location (precise or approximate; the only location we keep is the city you type in your profile), your contacts, biometric identifiers, health or medical data, political or religious beliefs, payment card numbers, or government identification numbers such as Social Security numbers.

3. Purposes and Legal Bases

The list below explains why we process data. The legal bases in parentheses apply to users covered by GDPR / UK GDPR; elsewhere we rely on contract performance and legitimate business purposes.

  • Providing accounts, teams, lineups, scores and standings: account, profile, match and league data — (performance of a contract)
  • Security, fraud prevention, quota and permission checks, audit trails: join records, audit logs and server logs — (legitimate interests: protecting the service and its users)
  • Notifications and communication: notification-centre records — (contract / legitimate interests; marketing messages require consent)
  • Find Players (being found by nearby players): your switch, and the name, NTRP, city and photo shown to players of your city or state while it is on — (consent, withdrawable at any time by turning the switch off)
  • Safety in Find Players: blocks, reports and moderation: block lists, reports, report mails, the moderator's actions, and the counts of reports and searches — (legitimate interests: keeping players safe and enforcing our Terms)
  • Age verification: age flag and consent records — (legal obligation)
  • League fee bookkeeping and reconciliation: fee rules, self-reported status, remark codes — (contract / legitimate interests)
  • Subscription and entitlement sync: transaction identifiers, subscription status — (performance of a contract)
  • Aggregate sponsorship reporting: aggregated impression, click and save counts — (legitimate interests; no person-level detail)
  • Complying with legal obligations: tax, law-enforcement requests, copyright notices and dispute records — (legal obligation)

You may object to processing based on legitimate interests under Section 14, and you may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.

4. How Information Is Used and Visible

  • League information can be read by anyone signed in with a Player profile (creating one in the app needs you to confirm you are 18 or over), and not before sign-in or by an account without a profile: each league's teams and their Captains' names; every member's name, NTRP, team and account id, and when and how they joined (Section 2); who is Co-Captain, since when, and which Captain (by account id) delegated the seat; the matches, with their scores, check-ins and the names of the players in them; disputes, with who filed them and what they say; and lineups (by account id). Your availability answers are seen only by you and your team's Captain; for gender, see Section 2.
  • Organizers manage only their leagues; Captains and Co-Captains manage only authorized teams/seasons. Co-Captains cannot transfer captaincy, dissolve teams, delete season records or expand conduct-record sharing.
  • Score, lineup, broadcast, invite-setting and ruling actions record actor and timestamp for audit.
  • After dispute escalation, an Organizer may read a snapshot of the latest 50 Match Thread messages; the snapshot is deleted when the dispute closes.
  • Some leagues may be set up and managed by the Hi5Tennis team without an Organizer subscription; players and captains use them exactly like any other league.
  • Find Players: while your switch "Let nearby players find me" is on, signed-in adult players in your city or state can find you, see your name, NTRP, city as you typed it and photo, and report or block you, unless either of you has blocked the other. If you or they give no state, players in a city of the same name in another state can find you too. Your mobile number, email, gender and date of birth are never shown. Their app also receives your internal account id, which it does not display.
  • You can turn the switch off at any time on Find Players, Discovery Permissions or Privacy / Matching Controls, and you then stop appearing. You can search without turning your own switch on.
  • Blocks: only you can see your block list, and the person you block is not told. A block hides the two of you from each other in Find Players only; if you share a team, you still see each other in its roster. You can unblock on Privacy / Matching Controls. If someone blocks you, their list keeps your name as it was then.
  • Reports: only our moderator sees reports. The moderator sees the reporter's name and account id; the reported player's name, account id, city, NTRP, photo, Find Players switch and pause; and the reason, the time and how many reports are about that player. The reported player is never told who reported them. A report does not block anyone. Our server accepts a report about any player who has a profile, whether or not their switch is on.
  • Report mails: a new report, or a report made again with a different reason, is mailed to our support mailbox support@hi5tennis.com (at most 20 report mails a day in all). The mail carries both players' names and account ids, the reason (and any earlier reason), the time, the reported player's city, NTRP, whether they have a photo, their switch, their pause and the number of reports about them, and the report's id; never a mobile number, email address, gender or date of birth.
  • Moderation: the moderator may dismiss a report, pause the reported player in Find Players (their switch is turned off and cannot be turned on until they are restored), remove their photo, or restore them. Each action is recorded on the report with the moderator's account and the time. A paused player sees only that their Find Players profile is paused, with no reason and no reporter named; the reporter is not told the outcome.
  • We do not sell your personal information and we do not share it for cross-context behavioural advertising. We do not use your match data for third-party ad targeting.
  • In a merger, acquisition or asset sale your data may transfer as a business asset. We will give notice in-app or by email before the transfer and require the recipient to maintain protection no lower than this policy.
  • We may disclose information where required by law, valid legal process, or as necessary to protect users and public safety, and will notify you beforehand where legally permitted.

5. Age Requirement

  • The service is for users aged 18 or older. We do not knowingly provide accounts to, or collect personal information from, anyone under 18; registration requires a real date of birth, which the app checks when you register, and the server refuses team joins, captaincy and Find Players below 18.
  • If we learn that an account belongs to someone under 18, we disable it and delete the related data. Anyone may report this to support@hi5tennis.com with the subject "Age".
  • We collect no guardian information and offer no guardian-consent flow.

6. Conduct Records and Your Right of Access

  • Conduct records are created by Captains about objective facts, are visible by default only to relevant Captains and Organizers, serve internal league operations, and are neither published nor spread across leagues.
  • You have the right to access the content of conduct records about you. Request it in the app or email support@hi5tennis.com with the subject "Privacy Request". Within the timelines in Section 14 we will provide the record's content, creation time, league/team and sharing scope. Where necessary to protect the rights and freedoms of others, an ongoing dispute investigation, or as permitted by law, we may minimise details such as the author's identity and will explain why.
  • You may request correction of an inaccurate record, add your own statement, or appeal to the Organizer for deletion. Appeals and outcomes are written to the audit log.
  • Conduct records are not a credit report, background check or assessment of personal character and may not be used for employment, credit, housing or insurance purposes. We do not verify or endorse their accuracy.

7. Third-Party Services (Sub-processors)

  • Firebase Authentication / Firestore / Cloud Functions (Google LLC, USA) — authentication, data storage (profile photos included), server-side business logic and server logs.
  • RevenueCat (RevenueCat, Inc., USA) — manages Apple / Google subscription entitlements and gives us aggregate subscription reports, identifying you by your account id; its SDK in the app sends the device details described in Section 2.
  • Hostinger — mail and website hosting: sends our account and report mails, hosts our support mailbox support@hi5tennis.com, and hosts the website hi5tennis.com.
  • Apple App Store / Google Play (Apple Inc. / Google LLC) — in-app digital subscription billing. We receive only transaction identifiers and subscription status and never handle card data.
  • Third-party payment services (targets of QR codes chosen by Captains or Organizers) — off-platform league fee collection under their own privacy policies; we are not involved.
  • Affiliate links and sponsor landing pages (third-party merchants) — governed by their own privacy policies.

These providers act as our processors under data processing agreements and may process data only on our instructions, not for their own purposes, except the limited technical details that Google uses to run and measure its services (Section 2). We will update this section and the effective date when we add a sub-processor.

8. Retention and Automatic Deletion

  • Pre-match notices are deleted 24 hours after the activity; Team Notices and Broadcasts 24 hours after expiry.
  • Match Threads are deleted 24 hours after the match and are never archived or exported.
  • Team Stream clears after the match; Drill Call responses/cards clear after 7 days; Casual squads idle for 30 days are flagged and members are prompted to clean up; squads are never silently deleted, and related content is purged once members confirm dissolving the squad.
  • Official scores, standings, rulings and join records are kept with their league, with no automatic deletion by time at present. Once available, conduct records will be retained by season or event for no more than 2 years, with export reminders before automatic deletion.
  • League fee bookkeeping is retained with the season for no more than 2 years, or longer where law (for example tax law) requires.
  • Agreement consent records are kept for the life of the account and deleted with it.
  • Your Find Players switch, block list and photo are kept until you change them or delete your account, and a moderator's pause until you are restored or delete your account. Only the latest switch setting and its time are kept.
  • Reports are kept on our server. A report the moderator has not handled yet is kept until it is handled; a report the moderator has handled (dismissed it, paused the player in Find Players, removed their photo or restored them) is deleted within 90 days after the moderator's last action on it. Reports about a player who is paused stay while the pause lasts, even past those 90 days; once the pause ends, our server's next daily clean-up deletes the handled ones whose 90 days have passed. Reports are also deleted at once when the reporter's or the reported player's account is deleted (one exception is in Section 14). A report made again by the same person about the same player before it is deleted replaces the earlier reason and time and waits to be handled again; the moderator's earlier actions stay on it.
  • Report mails: we delete a report mail from our support mailbox within 90 days after the report is handled, or, for a report removed from our server before it is handled (for example when either account is deleted), within 90 days after it is removed. Deleting an account does not remove the mail at once. Our server also keeps a record of each report mail (its subject, which names the reported player, and both account ids; the full text too if the mail was not sent) for as long as the report it belongs to, and deletes it with that report (at once when either account is deleted or, for a mail still being sent then, at our server's next daily clean-up).
  • Counts of reports and searches: we keep only your latest day's report count and your recent search times, and delete them with your account.
  • Records necessary for dispute handling, fraud investigation, copyright notices or legal obligations are retained for the applicable statutory or limitation period.
  • After a season, Captains and Organizers may delete records within their scope earlier; deletion is irreversible and requires confirmation.

9. Deep Links, QR Codes and Invite Codes

Team-join links (/j/), Captain-upgrade links (/c/), QR codes and display codes resolve to the same invite record. Authentication is required before confirmation; the server rechecks the token/codeRef, expiry, uses and quotas. pendingJoin may resume after installation. Repeated confirmation is idempotent.

10. League Fees and Payment Information

League entry, court and ball fees are collected off-platform by the Organizer or Captain. Hi5Tennis does not collect, escrow, split or take commission on them, is not a payment processor or money transmitter, and does not store your card number or bank account details.

In-app fee dashboards, payment QR display, remark codes and "I have paid" self-reports are bookkeeping and reconciliation aids only and are not proof of payment. If you pay through a third-party QR code, that payment service's own privacy policy governs the information it collects — please review it before paying.

In-app payment is limited to Hi5Tennis digital subscriptions such as the Organizer Standard or Advanced annual subscription and is processed by Apple App Store / Google Play.

11. League Sponsorship, Disclosure and Data Boundaries

  • League sponsorship is a season-scoped relationship between an Organizer and a local business, distinct from a personal affiliate link. Every placement must be clearly labeled "League Sponsor / Sponsored."
  • Sponsors receive aggregate performance reports only. They cannot access player profiles, rosters, contact details, precise location, Match Threads, conduct records or person-level match activity.
  • Sponsor destinations must use https and pass domain, category and disclosure checks. Alcohol, tobacco/nicotine, gambling, weapons, restricted drugs, adult content and other operations-blocked categories are prohibited.
  • Sponsored content is shown only within this league and can be opted out of.
  • Passive placements may appear on the public league page, schedule, standings footer and finals page. Any league-wide sponsored notice is limited to one league, must be labeled and expiring, is frequency capped, and cannot be sent cross-league.
  • Sponsorship is a v1 optional operations tool configured by the Organizer within a league. Cash/in-kind contracts, invoicing, taxes, payment and offline fulfillment remain off-platform responsibilities of the Organizer and sponsor. Hi5Tennis does not collect, escrow, split or take commission on sponsor funds and does not guarantee sales or redemptions.

12. Security and Breach Notification

We apply technical and organizational measures proportionate to the risk, including encryption in transit and at rest, access control enforced by Firestore Rules, mandatory server-side validation for critical writes, server-side limits on reports and searches, action audit logs, multi-factor authentication for internal production access, separation of production keys from the code repository, and separate development and production environments.

No measure guarantees absolute security. If a personal data breach occurs that is likely to risk your rights and freedoms, we will notify the competent supervisory authority within 72 hours of becoming aware (where that obligation applies) and notify affected users without undue delay where the risk is high, and will meet the breach-notification requirements of your state or country.

13. International Data Transfers

The app's servers (Google Firebase) and our principal sub-processors are located in the United States; Hostinger, which hosts our mail and website (Section 7), may keep them on servers in other countries. If you use the service from the EU/EEA, the UK, Switzerland or another region with cross-border transfer requirements, your personal data is transferred to and processed in the United States.

For those transfers we rely on lawful transfer mechanisms including the EU Standard Contractual Clauses (2021) and, where applicable, the UK International Data Transfer Addendum, supplemented by encryption, access control and data minimisation. Email support@hi5tennis.com to request details of the mechanism relied on.

The service is currently distributed to the US market. If we formally offer it to EU or UK users, we will appoint a local representative under GDPR Article 27 and publish their contact details on this page.

14. Your Rights

Wherever you are, you can: access and export your data, correct your profile, delete your account, turn off "Let nearby players find me", block or unblock players, withdraw consent, and access and appeal conduct records. In-app data export is not available yet: to access or export your data, email support@hi5tennis.com with the subject "Privacy Request". To delete your account, use "Settings → Data Export / Delete Account" in the app.

Identity verification: we verify identity through your registered email or an authenticated in-app session and will not ask for identity documents beyond what is necessary.

Response times: generally within 30 days of receipt and successful verification, extendable for complex requests with an explanation. For California residents, we confirm receipt within 10 business days and respond substantively within 45 days, extendable once by a further 45 days with notice.

California (CCPA / CPRA): you have rights to know, access, correct, delete, and limit the use of sensitive personal information, and to opt out of the "sale" or "sharing" of personal information. We do not sell your personal information and do not share it for cross-context behavioural advertising, so no opt-out request is needed. We will not discriminate against you for exercising your rights. You may use an authorized agent. Residents of other states with comprehensive privacy laws (including Virginia, Colorado, Connecticut, Utah and Texas) have corresponding access, correction, deletion, portability and opt-out rights.

EU/EEA and UK (GDPR / UK GDPR): you have rights of access, rectification, erasure, restriction of processing, data portability and objection, and may withdraw consent at any time without affecting the lawfulness of prior processing. You may lodge a complaint with your national supervisory authority or the UK ICO.

Other regions: mandatory rights granted by the law of your jurisdiction are not limited by this policy.

Effect of account deletion: deleting your account deletes your profile first, so you leave Find Players at once. It then deletes your team memberships and join requests, your block list, the reports you made and the reports about you (one exception below), the server's records of those reports' mails, and your counts of reports and searches, and removes your name from other people's block lists.

League records are not anonymized at present: they stay as they are, to keep season standings complete (see below). Records we must keep by law (tax, disputes, copyright notices) are retained under Section 8 and for the applicable statutory period.

What stays after deletion:

  • Report mails already in our support mailbox, until we delete them within 90 days after the report is handled or removed.
  • A report you made about a player whom the moderator has paused at that time. It stays without you as the reporter while that player is paused, so that the moderator can still restore them, and is then deleted as Section 8 describes; its internal id still contains your account id.
  • Our server's record of the mail confirming your deletion, with your email address and account id (and your name if the mail was not sent). It is deleted within 90 days after the mail is sent or, if it could not be sent, after the attempt.
  • Your account id, without your name, in other people's block lists; and, if you were the moderator, your account id and name on the reports you handled, until those reports are deleted (Section 8), and your account id on the pause of each player you paused, until that player is restored or deletes their account.
  • Your name and account id in league records: your name in the scores, check-ins and opponent lists of matches you played, your name or account id on the score and dispute changes you made, your account id in lineups, and your name as a team's Captain in a league that has ended; and, if you held an Organizer or Co-organizer seat, that seat's record with your account id and name. All but the seat records can be read by anyone signed in with a Player profile (Section 4).
  • Server logs that mention your account id (or your email address if a mail to you failed), and the request records with your IP address, under our hosting provider's log retention.
  • The subscription record RevenueCat keeps for us under your account id, which we do not delete when you delete your account, and the purchase records Apple keeps under its own terms. Deleting your account does not cancel a subscription.

15. Website and Cookies

hi5tennis.com is a static landing and legal-document site. It serves no cross-site advertising cookies and performs no cross-site tracking, using only technical storage necessary to operate the page (currently limited to language preference).

The current landing and legal pages do not offer a contact form; you may email support@hi5tennis.com directly. Fonts, the logo and primary visual assets are embedded or served as same-origin static resources and are not loaded from a third-party font CDN.

If we introduce analytics, a contact form or another third-party page service in the future, we will first update this section and Sections 7 and 8, and provide consent or opt-out mechanisms as required in your region, including honouring browser opt-out signals such as Global Privacy Control (GPC).

16. Changes to This Policy

We may update this policy. Material changes will be announced at least 14 days before they take effect, by in-app notice or email, and the effective date at the top of this page will be updated. Where a new purpose requires consent by law, we will seek your consent again. We keep prior versions and can provide them on request.

17. Contact

D5STUDIO LLC · Privacy: support@hi5tennis.com (subject line "Privacy Request") · hi5tennis.com

Send copyright / DMCA notices to support@d5studio.pro with the subject "DMCA Notice" (DMCA Designated Agent: D5STUDIO LLC, Attn: Copyright Agent, 801 FM 1463 Rd, STE 200-335, Katy, TX 77494, Phone: 512-588-2412).

Hi5Tennis, your local league OS.