Privacy Policy

What data we process and why. Updated 15 October 2026.

1. Controller

Basketouch Solutions Spain SL · help@basketouch.com · drawsports.app

2. What data we process

• Account: your email address and, if you belong to a team, the team name and your role in it (administrator or member).
• Subscription: status, start and renewal dates, number of licences and Paddle subscription identifiers.
• Payment: handled entirely by Paddle. We store no card or bank details.
• Technical data: IP address processed by the hosting infrastructure, browser type and session identifiers, for security and operation.

3. What we do NOT process

The work you do in the app (videos, analyses, whiteboards, notes, player or opponent names) stays on your device. It is not uploaded to our servers and we do not read it.

4. Campaign and visit measurement

Campaign parameters. If you reach drawsports.app from a link with campaign parameters (utm_source, utm_medium, utm_campaign, utm_content), we keep them only while that tab stays open (session storage) and add them to the links on this site, to the pack purchase link on cutsports.app and, if you buy with Paddle, to the purchase, so we know which campaign led to the trial or payment. On the App Store link we add the campaign name, so Apple tells us how many downloads it generated; we do not receive personal data about those downloads.

Our own visit measurement (only with your consent). If you accept the cookie notice, we anonymously record which pages are visited, the type of source of the visit, the campaign parameters, the language and whether the App Store or purchase link is clicked, using a random visitor identifier (up to 13 months) and a session identifier. We do not record your name or email, and we do not store your IP address in the events. They are kept on our systems (Supabase, European Union) and deleted after 13 months. If you reject, no identifier is stored and no event is sent. You can change your choice at any time from the Cookie Policy.

Legal basis: your consent for visit measurement, and legitimate interest for campaign attribution (the parameters describe the campaign, not you). You can object by writing to help@basketouch.com.

5. Why we use the data

• To give you the service you bought and validate your licence. Legal basis: performance of the contract.
• Invoicing and tax obligations. Legal basis: legal obligation.
• Support when you write to us. Legal basis: contract and legitimate interest.
• Service security and fraud prevention. Legal basis: legitimate interest.

We do not sell your data or share it for advertising.

6. Who we share it with

• Paddle, as Merchant of Record, to charge and invoice.
• Supabase, for the accounts and licences database.
• Vercel, for hosting the website and the panel.
• Resend, to send the service emails.

All act as processors under contract. Where any of them processes data outside the European Economic Area, GDPR safeguards apply, such as standard contractual clauses.

7. How long we keep it

While your account is active and, afterwards, as long as needed for legal and tax obligations, usually six years for invoicing. Then it is deleted or anonymised.

8. Your rights

You can access, rectify, erase, restrict or object to processing, and request portability, by writing to help@basketouch.com. You may also complain to the Spanish Data Protection Agency (aepd.es).

9. App Store purchases

If you subscribe through Apple's in-app purchase, Apple processes that transaction's data under its own privacy policy. We only receive confirmation that an active subscription exists.

10. Changes

If we change this policy we will publish the new version on this page with its update date.