Back

Legal

Privacy Policy

Last updated: May 29, 2026

1. Introduction

Welcome to Dunk AI ("we", "our", "us"). We are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains what data is collected when you use the Dunk AI mobile application, how it is used, and what rights you have.

Dunk AI is operated by [Your Name / Company Name], based in Germany, and is subject to the General Data Protection Regulation (GDPR).

2. What Data We Collect

2.1 Data We Collect Directly

Dunk AI itself does not directly collect personal data beyond what is strictly necessary to provide the service. When you use the video analysis feature, video content you upload is processed to generate coaching feedback and is not stored permanently.

2.2 Data Collected via RevenueCat (Subscription Management)

We use RevenueCat, Inc. to manage in-app subscriptions and purchases. RevenueCat acts as a data processor on our behalf. When you make a purchase or manage a subscription, RevenueCat collects and processes the following data:

  • Purchase history (transactions, subscription status, renewal dates)
  • App user ID (an anonymous or pseudonymous identifier assigned to your account)
  • Device information (device type, operating system version, app version)
  • Store receipt data (from Apple App Store or Google Play) for receipt validation and fraud prevention
  • Aggregated and anonymized usage analytics for service improvement

RevenueCat stores this data on Amazon Web Services (AWS) servers in the United States. RevenueCat is certified under GDPR and maintains a Data Processing Addendum (DPA). For more details, see RevenueCat's Privacy Policy at https://www.revenuecat.com/privacy.

RevenueCat does not receive your full payment or billing details — payment processing is handled directly by Apple or Google.

2.3 Data You Provide via AI Features

When you use Dunk AI's coaching features (workout planning, nutrition guidance, video analysis), input data such as your fitness goals, dietary preferences, and uploaded videos is processed to generate personalized recommendations. This data is processed in real time and not stored beyond providing the service to you.

3. Legal Basis for Processing (GDPR)

We process your personal data on the following legal bases:

  • Performance of a contract (Art. 6(1)(b) GDPR): Processing necessary to provide the subscription service you have purchased.
  • Legitimate interests (Art. 6(1)(f) GDPR): Fraud prevention and ensuring the security of our services.
  • Consent (Art. 6(1)(a) GDPR): Where you have explicitly agreed to processing, for example for optional analytics features.

4. Data Transfers Outside the EU

RevenueCat, Inc. is based in the United States. Data transferred to RevenueCat is subject to appropriate safeguards under GDPR, including Standard Contractual Clauses (SCCs). By using Dunk AI and making a purchase, you acknowledge that your subscription-related data will be processed in the USA under these safeguards.

5. Data Retention

RevenueCat retains purchase and subscription data for as long as necessary to fulfill the service and comply with legal obligations. You may request deletion of your data at any time (see Section 7).

Temporarily processed data from AI coaching features (workout, nutrition, video analysis) is not retained after your session.

6. Sharing Your Data

We do not sell your personal data to third parties. Your data may be shared only with:

  • RevenueCat, Inc. – for subscription and purchase management
  • Apple / Google – payment processing through their respective app stores
  • Law enforcement or regulatory authorities – where required by applicable law

7. Your Rights (GDPR)

As a data subject under the GDPR, you have the following rights:

  • Right of access – You may request a copy of the personal data we hold about you.
  • Right to rectification – You may request correction of inaccurate data.
  • Right to erasure – You may request deletion of your personal data ("right to be forgotten").
  • Right to restriction of processing – You may request that we limit how we use your data.
  • Right to data portability – You may request your data in a structured, machine-readable format.
  • Right to object – You may object to processing based on legitimate interests.
  • Right to withdraw consent – Where processing is based on consent, you may withdraw it at any time.

To exercise your rights, contact us at: team@ascendedlabs.net

You also have the right to lodge a complaint with your local data protection authority. In Germany, this is the Landesbeauftragte für Datenschutz in your respective federal state.

8. Children's Privacy

Dunk AI is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can delete it.

9. Security

We take appropriate technical and organizational measures to protect your data. RevenueCat uses industry-standard encryption for data in transit and at rest, and holds a SOC 2 Type II certification.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via the app or by updating the "Last updated" date at the top of this document. Continued use of the app after changes constitutes your acceptance of the updated policy.

11. Contact

Email: team@ascendedlabs.net