Privacy Policy

For Smash Time · last updated: 24 September 2026

The whole of it, in four lines. Smash Time has no accounts, no sign-in and no analytics. A recording stays on the device that made it unless you press Upload. If you do press Upload (which is how a browser recording gets processed), that video goes to storage for processing and nothing else about you goes with it, because there is nothing else.

That is unusual enough to be worth explaining rather than asserting, so the rest of this page is the detail. If anything here is unclear, ask at support@harfredlabs.com.

Where the processing happens

The heavy work (calibrating the court, tracking both players, cutting the rallies out of the audio) is done by a Python pipeline. There are two places it can run, and which one you get depends on where you recorded.

• On the iPhone. The iPhone app can measure a session on the phone itself. The video and the results never leave the device.
• In the cloud. Android, the web app, and an iPhone session you choose to send are measured in the cloud. Pressing Upload sends the video to private storage over a short-lived link the server signs for that one file, a processing job measures it, and the session comes back. The video is the only thing sent. It is not sent until you press the button, and there is no background sync that would send it for you.

What stays on your device

• The video. Written to the device that recorded it: the phone’s own storage, or the browser’s file storage on a laptop. It is transmitted only when you press Upload, and only to be processed.
• Watch sensor data. Wrist motion and heart rate are collected during a session and transferred to the paired iPhone. They stay in the same place as the video.
• Health data. Where the app reads heart rate through Apple HealthKit, that data is used only to show you your own session and is never transmitted off the device, never shared with anyone, never used for advertising, and never used to train a model.
• Sessions, rallies and findings. The processed numbers, and any coaching text produced from them, are stored locally. Deleting the app deletes them.

What we collect

Almost nothing, and none of it about you as a person:

• Ordinary web server logs. When your browser loads this site, or the app checks whether an update is available, the server that answers records what every web server records: an IP address, a device and browser type, and the time. It is used to serve the request and to spot abuse. It is not used to identify you and it is not combined with anything else.
• Anything you send us. If you email support, we have your email. We keep it for as long as it takes to answer you and no longer.

There are no cookies, no advertising identifiers, no analytics or crash-reporting services, and no third-party scripts on this site or in the app.

Other people on the court

A camera pointed at a squash court records whoever is on it, and in a doubles gallery it can record whoever is watching too. That is a real obligation, so it is written down here rather than left implied:

• Record your own sessions, on a court you have booked, with the agreement of the person you are playing.
• Tell your opponent before you start. It takes one sentence and it is the difference between a training tool and a surveillance device.
• Many clubs have rules about filming. Those rules apply to you and this app does not override them.
• A permanently mounted camera in a club is a different thing entirely, and needs consent, signage and a retention policy before it is switched on. This version of the app is not built for that and should not be used for it.

Footage you have not uploaded is on your machine only: it never reaches us and we could not produce it if asked. Footage you upload for processing is deleted automatically seven days after upload, and is not used for anything else: not shown to anyone, not kept for training, not attached to any profile, because there is no profile to attach it to. Deleting a session in the app deletes the copy on your device.

What we do not do

• We do not sell personal information, and we never have.
• We do not share it with advertisers or data brokers, and we build no advertising profiles.
• We do not use your footage, your sessions or your health data to train models.
• We do not track you across other apps or websites.

Purchases

There are none. Smash Time has no paid features, no subscription and no store listing. If that ever changes, payment would be handled entirely by Apple or Google and we would still never receive card details, and this page would be updated before it happened, not after.

Children

Smash Time is not directed at children under 13 and we do not knowingly collect personal information from them. Since the app collects no personal information from anyone, there is little to collect, but if you believe a child has sent us something through support, write to support@harfredlabs.com and we will delete it.

How long things are kept

Data on your own device lasts until you delete it or remove the app. An uploaded video is deleted automatically seven days after upload. The other files a cloud job writes for that session (the measured positions and the results) are deleted automatically after 90 days. Server logs are kept for a short period for security and diagnostics and then discarded. Support email is kept while the conversation is open.

Your rights

Depending on where you live you may have the right to see the personal information held about you, to correct it, to have it deleted, to object to its use, or to receive a portable copy. In practice the answer for Smash Time is short: there is no account, so there is no profile to show you, and the data that matters is already in your hands. For anything else, write to support@harfredlabs.com and we will respond within the time your local law requires, and in any case within 30 days.

Security

Anything the app fetches over the network travels over an encrypted connection. The strongest protection here is not a control we operate, though: it is that the footage and the measurements never reach us in the first place. No system is perfectly secure and we do not claim otherwise; we simply hold almost nothing.

Changes to this policy

If this changes we will update this page and the date at the top. If a change materially affects how your information is used (in particular if processing ever moves off your own machine), you will be told in the app before it takes effect, not after.

Contact

Smash Time is published by Harfred Labs. For any privacy question, or to exercise any right above, write to support@harfredlabs.com.

← Back to Smash Time