PRIVACY POLICY
Last updated: September 23, 2026
This Privacy Policy explains how Impact Development LLC ("Impact Development," "we," "us," or "our") collects, uses, discloses, stores, and deletes information when you use our mobile applications, websites, and related services (collectively, the "Services").
This policy applies to Golfer AI, Boxer AI, Blush AI, Hooper AI, Wrestler AI, and Dribbler AI, including their websites, support services, communities, AI analysis tools, and related features. A feature described below applies only when it is available in the particular app you use.
1. Company and contact information
Impact Development LLC
30 N Gould St, Ste N
Sheridan, WY 82801, United States
Email: contact@impactdevelopment.llc
Phone: +1 (307) 449-0461
For privacy requests, including access or deletion requests, email contact@impactdevelopment.llc with the subject "Privacy Request."
2. Information we collect
We collect information only when needed to operate the feature you choose, maintain security, process subscriptions, communicate with you, or understand and improve our Services.
2.1 Account and profile information
Depending on the app and features you use, this may include your name or display name, email address, user ID, profile photo, username, age or date of birth, gender, height, weight, dominant side or stance, position, experience level, goals, preferences, and Sign in with Apple or Google account identifiers.
2.2 Sports, fitness, beauty, and nutrition information
This may include training sessions, workout history, movement or technique statistics, scores, duration, estimated calories, XP, rankings, drills, goals, skill level, measurements, nutrition goals, food logs, calories, macros, vitamins, minerals, saved plans, and responses you provide during onboarding.
2.3 Photos, videos, camera frames, audio, and face/body information
If you choose a camera, photo-library, video-analysis, nutrition-scanning, community, or voice feature, we may process the photo, video, sampled video frames, audio, or text you provide. Photos or video frames may incidentally contain your face, body, clothing, home, training location, or other people visible in the background. Section 4 provides the complete face-data disclosure.
2.4 Communications and user-generated content
This includes coach-chat messages, food descriptions, support messages, feedback, community posts, comments, replies, likes, follows, reported content, captions, media you post, and descriptions you submit with a training video.
2.5 Purchases and subscriptions
We receive product identifiers, subscription status, purchase and renewal status, transaction identifiers, storefront or currency, and limited purchase history from Apple and our subscription processor. We do not receive or store your complete payment-card number.
2.6 Device, diagnostics, analytics, and attribution data
This may include device and app identifiers, device model, operating-system version, app version, language, region, IP address, crash and performance data, feature interactions, session timestamps, installation source, advertising or attribution identifiers where permitted, and consent status. We do not use face data for advertising or tracking.
2.7 Information from service providers
We may receive authentication information from Apple or Google, purchase and entitlement information from Apple and RevenueCat, analytics and infrastructure information from Google/Firebase, and install-attribution information from AppsFlyer.
3. How we use information
We use information to:
- authenticate users, maintain accounts, and provide requested features;
- provide sports coaching, movement analysis, video feedback, beauty or makeup analysis, nutrition estimates, AI chat, drills, plans, and recommendations;
- personalize goals, training, content, and progress displays;
- save user-selected content and synchronize it across supported devices;
- operate communities, rankings, moderation, reports, and safety controls;
- process subscriptions, restore purchases, and verify entitlements;
- respond to support requests and send service communications;
- diagnose crashes, secure the Services, prevent fraud and abuse, enforce limits, and comply with law;
- measure product performance and marketing attribution; and
- improve our user experience using aggregated or de-identified information where reasonably possible.
We do not sell personal information. We do not use face data to identify a person, authenticate identity, build a biometric profile, or determine sensitive traits.
4. Face data, body data, photos, and videos
This section specifically explains what face data we collect, why it is used, where it is sent, how it is stored, and when it is deleted.
4.1 What face data is collected
We do not collect faceprints, biometric templates, Face ID data, or facial-recognition identifiers. We do not attempt to determine a person's identity from a face.
Face data means visual information about a face that may appear in content you voluntarily capture or select:
- In Golfer AI, Boxer AI, Hooper AI, Wrestler AI, and Dribbler AI, a user's face may appear incidentally in camera video or sampled still frames used to evaluate visible sports movement, body position, balance, form, or technique. These apps analyze sports performance, not facial identity.
- In Blush AI, a user-selected face photo may be analyzed for visible facial regions, landmarks, skin appearance or tone, and makeup placement solely to provide the requested beauty, makeup, visualization, or recommendation feature.
- A face may also appear in a profile photo or photo/video the user voluntarily posts to a community.
4.2 How face data is collected and used
Face-containing content is collected only when you choose to use a relevant camera, photo, video, analysis, profile, or community feature and grant the applicable iOS permission. Before Dribbler AI transfers personal content to OpenAI for an AI feature, the app presents a disclosure identifying the data and OpenAI and asks for affirmative permission.
For sports AI analysis, the app may extract a limited set of compressed still frames from a live or selected training video. Those frames, session metrics, and a description you provide are used to generate coaching feedback. Dribbler AI does not upload the complete training video for OpenAI analysis. The original video remains on the device unless you separately choose to post, share, or upload it through another feature.
For Blush AI, the selected image and visual face information are used only to generate the beauty or makeup result requested by the user. We do not use face data for advertising, tracking, surveillance, eligibility decisions, or identification.
4.3 Sharing and storage of face data
When you affirmatively allow and request cloud AI processing, relevant images or sampled frames are transmitted using encryption to Impact Development's authenticated backend hosted on Google Cloud and then to OpenAI, L.L.C. ("OpenAI") through its business API. Our backend processes AI request content in memory and does not intentionally save those sampled training frames or food/beauty analysis images to a database or storage bucket.
OpenAI processes the content to return the requested result. OpenAI states that API inputs and outputs are not used to train its models by default. Under OpenAI's standard API controls, content may be retained in abuse-monitoring logs for up to 30 days, unless legal or security obligations require longer retention. OpenAI may retain an image flagged for potential child-safety review as described in its API data-control documentation.
Profile photos and community photos/videos are stored with Google Firebase/Cloud Storage only when you choose to upload them. Saved Blush AI content may be stored locally or in cloud storage when the app offers and you use a save/sync feature. This user-saved content is separate from transient AI processing.
4.4 Face-data retention and deletion
- Impact Development AI processing: sampled frames and images submitted for an AI result are not intentionally persisted by our backend after the request completes.
- OpenAI API processing: API content may remain in abuse-monitoring logs for up to 30 days, unless OpenAI is legally required to retain it longer or a safety exception applies.
- On-device content: remains until you delete it, delete the app, or iOS removes it.
- Profile or community media: remains until you delete the content or account, subject to backup, legal, fraud-prevention, and moderation needs described below.
- Saved app content: remains until you delete it or your account, unless a shorter period is presented in the feature.
You can stop future AI transfers by declining or withdrawing AI-data permission in the app where that control is available. You can delete eligible content in the app, delete your account using the in-app account-deletion control, or request deletion at contact@impactdevelopment.llc. Account-associated production data is deleted or de-identified within 30 days after a valid deletion request, except data we must keep for legal, security, fraud-prevention, transaction, or dispute purposes. Content already delivered to a service provider is deleted according to that provider's applicable retention schedule.
5. AI services and affirmative permission
Some requested features use OpenAI through our secured server-side backend. Depending on the feature, content sent to OpenAI may include:
- sampled training-video frames that may contain a face or body;
- session duration, movement statistics, technique events, selected activity, and a user-provided description;
- a food or beauty photo, or a text description;
- AI-coach chat messages and recent conversation history; and
- relevant profile, training, nutrition, drill, or workout context needed to personalize the requested response.
We disclose these categories and name OpenAI before Dribbler AI first sends them for AI processing. If you select "Not now," the content is not sent and the cloud AI request is cancelled. Granting camera or photo-library permission does not by itself grant permission to share data with OpenAI.
OpenAI processes content on our behalf to provide the requested output and is required to protect business API data under its applicable terms and data-processing commitments. We do not opt in to use API content to train OpenAI models.
6. Other service providers and disclosures
We disclose only the information reasonably needed for providers to perform services for us. Depending on the app, providers may include:
- Google LLC (Firebase and Google Cloud): authentication, databases, file storage, server hosting, App Check, analytics, crash reporting, and operational security;
- OpenAI, L.L.C.: AI analysis and text or image-based responses requested by the user;
- RevenueCat, Inc.: subscription status, entitlements, purchase validation, and subscription analytics;
- AppsFlyer Ltd.: installation and marketing attribution, campaign measurement, device or advertising identifiers where permitted, and fraud prevention;
- Apple Inc.: App Store purchases, Sign in with Apple, device permissions, push notifications, and speech recognition where used;
- Google Sign-In: authentication where offered; and
- LiveKit, Inc.: realtime audio/video room connectivity and related technical metadata where a supported app provides a realtime feature.
We may also disclose information when required by law, to protect users or the Services, to investigate abuse or fraud, with your direction or consent, or as part of a merger, financing, acquisition, or sale of assets subject to appropriate safeguards.
Provider processing may occur in the United States and other countries where the provider or its subprocessors operate. Their own privacy notices and our contractual arrangements govern their processing.
7. Storage and retention for other information
We apply the following general periods unless a shorter period is presented in the app or a longer period is required by law:
- Account and profile data: while the account is active, then deleted or de-identified within 30 days after account deletion.
- Training, nutrition, progress, community, and saved content: while the account is active or until you delete the content. Deleted community content may be retained temporarily for moderation, fraud prevention, backups, or legal obligations.
- Support communications: up to 24 months after the request is resolved, unless needed longer for a dispute or legal obligation.
- Analytics, attribution, crash, and diagnostic data: generally up to 24 months, subject to provider settings and legal requirements.
- Security and rate-limit records: generally up to 90 days, or longer when reasonably necessary to investigate abuse, protect users, or comply with law.
- Subscription and transaction records: for the period required to provide subscriptions and satisfy tax, accounting, dispute, and legal obligations, which may be up to seven years.
- De-identified or aggregated information: may be retained where it can no longer reasonably identify you.
Backups may take additional time to cycle out, but deleted information is not restored to active systems except when required for disaster recovery, security, or law.
8. Your choices and rights
Depending on your location, you may have the right to access, correct, delete, restrict, object to, or obtain a portable copy of personal information, and to withdraw consent. You may also have the right to appeal a denied request or complain to your local data-protection authority.
Available controls may include:
- iOS Settings for camera, microphone, speech, photo-library, notification, and tracking permissions;
- an in-app AI-data-sharing choice where cloud AI is used;
- in-app controls to edit profiles and delete posts or saved content;
- an in-app account-deletion control; and
- device privacy controls that limit advertising identifiers or tracking.
Withdrawing permission stops future processing based on that permission but does not affect processing already completed. Some features cannot work without the data they require.
To exercise a privacy right, contact contact@impactdevelopment.llc. We may need to verify your identity before completing the request.
9. Legal bases for EEA, UK, and similar jurisdictions
Where required, we rely on:
- contractual necessity to provide the features, account, and subscription you request;
- consent for optional permissions, AI sharing, marketing, or other processing where consent is required;
- legitimate interests in security, fraud prevention, support, service improvement, and limited analytics, balanced against your rights; and
- legal obligations for tax, accounting, safety, regulatory, or law-enforcement requirements.
You may withdraw consent at any time. You may object to processing based on legitimate interests by contacting us.
10. California and other U.S. state privacy rights
Residents of applicable U.S. states may request access, correction, deletion, or portability and may opt out of covered sale, sharing, or targeted advertising. We do not sell personal information for money. Some attribution activity may be considered "sharing" or targeted advertising under certain laws; where required, you can limit this through the iOS tracking prompt or device privacy settings and by contacting us.
We will not discriminate against you for exercising a privacy right.
11. Children's privacy
The Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. Users under the age required by local law must have permission from a parent or legal guardian. If you believe a child provided information without proper authorization, contact us and we will investigate and delete it as required.
12. Security
We use administrative, technical, and organizational safeguards designed to protect information, including authenticated requests, encryption in transit, access controls, App Check or similar integrity protections, rate limits, secret management, and restricted production access. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
13. International transfers
We and our providers may process information outside your country, including in the United States. Where required, we use recognized safeguards for international transfers, such as contractual protections or adequacy mechanisms.
14. Policy changes
We may update this policy as our Services or legal obligations change. We will update the "Last updated" date and provide additional notice in the app, on our website, or by email when required. Material changes apply prospectively unless law permits otherwise.
15. Contact us
Impact Development LLC
Privacy Officer
30 N Gould St, Ste N
Sheridan, WY 82801, United States
Email: contact@impactdevelopment.llc
Phone: +1 (307) 449-0461
Specific face-data text for App Review reference
Sections 4.1 through 4.4 explain what face data may be processed, how it is collected and used, the parties with whom it is shared, where it is stored, its retention period, and available deletion controls. Section 5 explains the OpenAI transfer and affirmative permission.