Marrany – Privacy Policy
Effective date: set this when you publish the policy.
This Privacy Policy explains how Marrany (“we”, “the App”) handles your information. Marrany is a bilingual (Arabic / English) coaching app on iOS and Android. It records short videos of padel (and similar) shots and gym movements, can photograph gym machines for identification, sends media to the Musanid coaching backend, and shows AI-generated technique and training guidance.
Where to host this document. Apple and Google require a publicly reachable Privacy Policy URL. Convert this Markdown to HTML and serve it at
https://coach.musanid.ai/privacy. The iOS build settingPC_PRIVACY_POLICY_URLand the AndroidPRIVACY_URLmust match that URL (Settings → Privacy policy). Play Console Data safety must match this page.
1. Who is responsible
Marrany is operated by Musanid AI (the “Operator”). Contact: [email protected].
2. What we collect
We only collect what we need to run the coaching service.
| Category | Examples | Purpose |
|---|---|---|
| Account information | Email address, password (stored as a salted hash), display name, account role. If you use Sign in with Google (Android) or Sign in with Apple (iOS), we receive the identity token and the name/email the provider shares for sign-in. | Authentication; tying reports to your account; in‑app notifications. |
| Training and machine media | Short video clips you record or import (padel shots, gym form), photos or short videos of gym equipment for machine identification, plus auto‑detected motion windows and frames extracted for analysis. | Generating coaching reports, scoring technique, equipment guides, producing recommendation frames. |
| Coaching reports | Findings, drills, scores, snapshot frames generated from your videos. | Showing you and your coach the AI feedback. |
| Diagnostic data | Server‑side logs, error reasons, queue/worker timing. | Debugging failures, monitoring service health. |
| Device/app settings stored only on‑device | Language preference, capture toggles, the API base URL you configured, your bearer token, dev‑only keys. | Remembering your preferences locally. |
We do not collect:
- Microphone audio (capture sessions do not enable an audio input on iOS or Android).
- Location, contacts, calendars, health, or motion data.
- Advertising identifiers or any data used for cross‑app tracking.
The apps do not include third‑party advertising or tracking SDKs. Sign-in may use Apple or Google’s own sign-in libraries (tokens are sent only to our API over HTTPS).
3. How your videos are processed
- The video or photo is uploaded over HTTPS to the Musanid coaching backend at
https://coachapi.musanid.ai(sometimes via a short-lived direct upload to object storage we control). - The backend extracts frames, runs pose detection and a vision-language model to generate findings, drills, or equipment guides, and stores the resulting report or scan alongside the original media.
- You and (if applicable) your assigned coach can view the report — in the iOS or Android app for players, and in the admin/coach portal at
https://coach.musanid.aifor staff.
If the deployment uses a third‑party model provider for translation or captioning (for example, an OpenAI‑compatible endpoint), the relevant text snippets sent for translation are processed under that provider’s data‑processing terms. Disclose the specific provider(s) here before submission.
4. Where data is stored
- Account data, reports, and uploaded videos are stored on the Musanid coaching backend at
https://coachapi.musanid.ai, hosted on commodity cloud infrastructure with disk encryption at rest. - You can delete all of your data at any time from inside the app (see Section 7 – Your rights).
5. Sharing
We do not sell your information. We share data only:
- With sub‑processors strictly needed to run the service (cloud hosting, optional AI/translation provider). These providers receive data under their own data‑processing terms.
- When required by law, court order, or to protect the rights, property, or safety of the Operator, our users, or the public.
6. Retention
- Uploaded videos and the reports generated from them are retained for as long as your account exists.
- When you delete your account (in‑app), the user record, all linked reports, findings, feedback, pose traces, and stored video files are removed from the production database and storage. Backups are rotated on a rolling basis and overwritten within 30 days.
- Server logs are retained for up to 30 days for operational debugging and then rotated out.
7. Your rights
You can:
- Access the data we hold about you – every report and uploaded clip is visible in the app under Reports.
- Delete your account and all associated data at any time from Settings → Delete account (required on Google Play and App Store). This call is
DELETE /auth/meon the backend; it cascades to remove all your reports, findings, feedback, pose traces, gym scans, and best‑effort wipes the related media files from storage. - Withdraw consent by deleting the app and your account.
- Contact us about your data at
[email protected].
Depending on your jurisdiction (e.g. EU/UK GDPR, California CCPA), you may also have rights of rectification, restriction, and portability. To exercise those rights, contact us at the address above.
8. Children
Padel Musanid / Marrany is intended for users 13 and older. We do not knowingly collect personal information from children under 13. If you believe a child has created an account, contact us and we will delete it.
9. Security
- Network traffic between the iOS or Android app and the backend (
https://coachapi.musanid.ai) uses HTTPS (TLS). Production Android builds disallow cleartext. Debug/emulator builds may talk to a local API over HTTP on the emulator loopback only. - Passwords are stored as salted hashes; we never store plaintext passwords.
- Bearer tokens issued at sign‑in are stored in encrypted-preference storage on Android (DataStore) or iOS user defaults on the device and are invalidated when you delete your account or sign out.
No system is perfectly secure; please use a unique password and report any vulnerability you discover to [email protected].
10. International transfers
Depending on the deployment, your data may be processed in countries other than your own. By using the app, you consent to such transfers under the safeguards described in this policy.
11. Changes
We may update this policy from time to time. Material changes will be reflected by updating the Effective date at the top and, where appropriate, by an in‑app notice.