HoopArc Privacy Policy

Effective Date: August 26, 2026

HoopArc (“HoopArc,” “we,” “us,” or “our”) is operated by Vladan Markovic, an individual based in Bosnia and Herzegovina.

This Privacy Policy explains how we collect, use, store, disclose, and protect personal information when you use the HoopArc mobile application, website, and related services.

For privacy questions or requests, contact:

support@hooparc.app

1. Who Is Responsible for Your Data

For personal information processed through HoopArc, Vladan Markovic is the data controller, except where another service provider acts as an independent controller under its own terms and applicable law.

Contact:

Vladan Markovic Bosnia and Herzegovina support@hooparc.app

2. Information We Collect

Account and Authentication Information

HoopArc uses Sign in with Apple and Supabase Authentication.

Depending on what Apple makes available when you sign in, we may process:

• your Apple account identifier used for authentication;
• your HoopArc/Supabase user identifier;
• your email address or Apple private relay email address, when provided;
• authentication and session information necessary to keep you signed in securely.

We do not receive your Apple ID password.

Player Profile and Onboarding Information

You may provide information used to create and personalize your basketball profile, including:

• player/display name;
• basketball position;
• playing level;
• goals and development targets;
• team-practice frequency;
• individual-workout frequency;
• games per week;
• strengths and focus areas;
• confidence and other basketball-related self-assessment responses.

Basketball Activity and User Content

When using HoopArc, you may create basketball-related information such as:

• Training logs;
• workout titles and details;
• training duration and intensity;
• basketball development areas;
• notes;
• Game logs;
• opponent information;
• scores and basketball statistics;
• performance assessments;
• pre-game mindset entries;
• post-game reflections;
• Weekly Reviews;
• lessons and development observations.

Some fields allow you to enter free-form text. Please do not enter sensitive personal information that is unnecessary for your use of HoopArc.

HoopArc does not provide dedicated fields requesting medical records, health diagnoses, precise location, addresses, phone numbers, contacts, or other similar sensitive information.

Progression Information

HoopArc generates basketball-progression information based on the information you provide and your activity within the app.

This may include:

• skill ratings;
• mentality ratings;
• Overall Rating (OVR);
• archetype;
• XP;
• level;
• streak;
• Development Points;
• Current Focus;
• Missions;
• weekly snapshots;
• progression history;
• position-change history.

These values are part of HoopArc's internal progression system.

Player Photos

Adding a player photo is optional.

If you choose to select or take a player photo:

• HoopArc requests Photos or Camera permission only when needed;
• the image is processed on your device;
• a processed image may be temporarily stored locally;
• the processed player image may be uploaded to private Supabase Storage;
• the image is used for your HoopArc profile and Player Card.

The original camera or photo-library file is not intentionally uploaded as the permanent HoopArc profile image; HoopArc uses the processed version.

HoopArc does not operate a public player-photo gallery.

Subscription and Purchase Information

HoopArc uses the Apple App Store for billing and RevenueCat for subscription management and entitlement verification.

We may process information such as:

• subscription product;
• purchase and restoration status;
• subscription status;
• premium entitlement status;
• expiration or renewal information;
• RevenueCat customer identifiers;
• transaction or receipt-related information necessary to verify access.

HoopArc does not directly receive or store your full payment-card number or complete payment credentials. Apple handles payment processing.

Notifications and Reminders

If you choose to allow notifications, HoopArc may schedule local iOS reminders for features such as Missions and Weekly Reviews.

HoopArc does not currently collect an Expo push token or operate a remote advertising notification system.

Notification preferences and certain in-app notification records may be stored as necessary to provide these features.

Technical and Operational Information

HoopArc processes limited technical and operational information necessary to run the Service securely and reliably.

This can include identifiers and status information used for:

• authentication;
• secure synchronization;
• offline recovery;
• duplicate-request prevention;
• idempotent operations;
• entitlement verification;
• account operations;
• retry handling;
• application-state reconciliation;
• security and troubleshooting.

Our infrastructure and SDK providers may also process technical or operational metadata as part of providing their services, subject to their own privacy obligations.

3. Information We Do Not Use for Advertising or Tracking

HoopArc does not currently contain its own:

• advertising SDK;
• behavioral advertising system;
• attribution SDK;
• cross-app tracking system;
• ATT/IDFA-based tracking;
• third-party behavioral analytics SDK;
• location-tracking system;
• contact-upload system;
• microphone-recording feature.

We do not sell your personal information.

We do not use your personal information for third-party behavioral advertising.

4. Why We Use Your Information

We use personal information as necessary to:

• create and maintain your HoopArc account;
• authenticate you securely;
• create and personalize your player profile;
• save Training, Game, mindset, and Weekly Review information;
• calculate and display player progression;
• provide ratings, XP, levels, streaks, Missions, and other career features;
• display your optional player photo;
• synchronize data between sessions and supported devices;
• preserve supported drafts and pending operations;
• provide offline/retry functionality;
• verify subscriptions and premium access;
• restore eligible purchases;
• provide reminders you choose to enable;
• generate Player Cards you choose to share;
• provide customer support;
• prevent fraud, abuse, duplicate operations, and unauthorized access;
• maintain the security and reliability of HoopArc;
• process account deletion;
• comply with applicable legal obligations.

5. Legal Bases for Processing

Where data-protection law requires us to identify a legal basis, we rely on one or more of the following, depending on the processing:

Performance of the Service

We process information that is necessary to provide HoopArc and the functionality you request, such as account authentication, player data, Training and Game records, progression, subscription access, and synchronization.

Legitimate Interests

Where permitted by law, we process limited information for legitimate interests such as:

• protecting HoopArc and its users;
• preventing fraud and abuse;
• maintaining service reliability;
• troubleshooting;
• enforcing access controls;
• responding to support requests;
• improving security.

We use this basis only where those interests are not overridden by your applicable rights and freedoms.

Consent

Where required, we rely on your choice or consent for optional functionality, such as granting access to your Camera, Photos library, or Notifications.

You can withdraw device permissions through iOS Settings.

Legal Obligations

We may process or retain information where necessary to comply with applicable law, regulatory requirements, legal claims, or lawful requests.

6. Third-Party Services

We use a limited number of third-party providers to operate HoopArc.

Apple

Apple provides or supports:

• Sign in with Apple;
• App Store purchases and subscriptions;
• Camera and Photos access through iOS;
• local notification functionality;
• native sharing functionality.

Apple may process information under its own terms and privacy policies.

Supabase

Supabase provides:

• authentication infrastructure;
• database hosting;
• private file storage;
• server-side functions and related infrastructure.

HoopArc account data, player data, activities, reflections, progression information, optional player photos, and subscription-access state may be processed using Supabase infrastructure.

RevenueCat

RevenueCat helps HoopArc:

• process subscription information;
• verify premium entitlement;
• restore eligible purchases;
• reconcile App Store subscription status;
• process App Store subscription events.

RevenueCat may process subscription-related identifiers, purchase information, entitlement information, and your HoopArc user identifier as necessary to provide those services.

User-Selected Share Destinations

If you choose to share a Player Card, iOS allows you to select the recipient or third-party application.

HoopArc does not automatically publish the Player Card.

Once you intentionally share information with another service or person, their handling of that information is governed by their own policies.

We use service providers only where we have a reasonable basis to expect that personal information processed on our behalf will receive protections consistent with this Privacy Policy and applicable data-protection requirements.

7. Local Storage on Your Device

HoopArc uses local device storage where necessary for functionality and reliability.

This may include:

• authentication session information in secure storage;
• onboarding drafts;
• Training drafts;
• Game and reflection drafts;
• Weekly Review drafts;
• pending synchronization operations;
• notification-related preferences and acknowledgements;
• temporary processed player-photo files;
• cached player images.

Some information is intentionally kept across app launches so that supported drafts, authentication, and offline/retry behavior continue to work.

After successful synchronization or completion, relevant temporary information is cleared where appropriate.

Logout and account-deletion flows are designed to clear private local application state, pending photo files, session information, and relevant application caches.

Some operating-system-managed or image-cache files may remain temporarily until replaced, cleared, or removed through normal device/application cache management.

8. Player Card Sharing

HoopArc can generate a Player Card containing information such as:

• player name;
• optional player photo;
• position;
• OVR;
• level;
• selected basketball ratings.

Sharing occurs only when you initiate it.

HoopArc does not automatically upload your Player Card to a public HoopArc service and does not create a public social profile, follower system, or public feed.

The generated share image is temporary.

You control where the image is sent through the iOS share sheet.

9. Data Retention

We keep personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including providing HoopArc, maintaining security and reliability, supporting legitimate legal requirements, and resolving disputes where applicable.

In general:

• account and career data is retained while needed to provide your HoopArc account;
• local drafts and pending operations are retained only as necessary to support the relevant workflow, synchronization, or recovery;
• optional player photos remain until replaced, removed, or the associated account is deleted;
• subscription-access information is maintained as necessary to verify access;
• security, infrastructure, backup, or operational records may be retained for limited periods according to operational or legal requirements.

We do not state a fixed retention period where the underlying system or provider does not guarantee one.

Apple, RevenueCat, Supabase, and other infrastructure providers may retain certain records under their own legal, security, accounting, backup, or operational requirements.

10. Account Deletion

HoopArc provides account deletion from within the app.

The deletion process is designed to:

• reauthenticate you where necessary;
• revoke the relevant Apple authorization where applicable;
• remove your private HoopArc player photos;
• delete player-owned application records;
• remove the HoopArc subscription-access mirror associated with your account;
• delete your Supabase Auth account;
• clear private local HoopArc data.

Deleting the HoopArc app from your iPhone does not by itself delete your HoopArc account.

Deleting your HoopArc account also does not automatically cancel an active App Store subscription.

Subscriptions must be managed separately through Apple.

Certain information maintained independently by Apple, RevenueCat, infrastructure providers, or required by law may remain after HoopArc-controlled account data has been deleted.

11. Your Privacy Choices

Player Photo

Providing a player photo is optional.

You may replace or remove your photo using available HoopArc functionality.

You can also revoke Camera or Photos permissions through iOS Settings.

Notifications

Notifications are optional.

You may disable HoopArc notifications through iOS Settings and through any applicable in-app preference controls.

Account Deletion

You may delete your HoopArc account using the in-app account-deletion functionality.

Privacy Requests

You may contact:

support@hooparc.app

to ask questions or exercise applicable privacy rights.

12. Your Privacy Rights

Depending on where you live and applicable law, you may have rights relating to your personal information, including the right to:

• request access to information about you;
• request correction of inaccurate information;
• request deletion;
• request restriction of certain processing;
• object to certain processing;
• request a portable copy of eligible information;
• withdraw consent where processing is based on consent;
• receive information about how your personal information is used;
• lodge a complaint with a competent data-protection authority.

These rights may be subject to lawful limitations and exceptions.

We may need to verify your identity before fulfilling certain requests.

For users in Bosnia and Herzegovina, complaints may also be directed to the Personal Data Protection Agency in Bosnia and Herzegovina.

13. Children and Younger Users

HoopArc is a general-audience basketball application and is not directed to children under 13.

We do not ask users to provide a date of birth as part of the current HoopArc experience.

If you are under the age at which you may independently agree to the use of an online service in your jurisdiction, you may use HoopArc only with the authorization of a parent or legal guardian where required by applicable law.

Where applicable law requires parental or guardian consent for the processing of a minor's personal information, HoopArc may be used only if the required consent has been obtained.

If we become aware that personal information has been provided by a child in circumstances where applicable law required parental authorization that was not obtained, we will take reasonable steps to restrict processing and delete the information where required.

A parent or legal guardian who believes a child has provided personal information contrary to applicable law may contact:

support@hooparc.app

14. International Processing

HoopArc uses service providers that may process information in countries other than Bosnia and Herzegovina or your country of residence.

Where applicable law requires safeguards for international transfers or processing, we rely on appropriate legal, contractual, or provider safeguards as applicable.

15. Security

We use technical and organizational measures intended to protect personal information handled through HoopArc.

These measures include, where applicable:

• authenticated account access;
• private database authorization rules;
• private player-photo storage;
• server-side authorization for sensitive operations;
• verified subscription access;
• protected server credentials;
• secure session handling;
• encrypted network connections provided by our infrastructure.

No electronic system can guarantee absolute security.

16. Changes to This Privacy Policy

We may update this Privacy Policy when HoopArc, its service providers, or applicable legal requirements change.

If changes are material, we may provide notice through the app, the HoopArc website, or another reasonable method.

The current version will display its effective date.

17. Contact

For privacy questions or requests:

Vladan Markovic HoopArc Bosnia and Herzegovina support@hooparc.app