Legal

Privacy Notice

Last updated · 11 October 2026

This notice explains what personal data I collect when you use amirardekani.com, how I use it, and the rights you have under the UK General Data Protection Regulation (UK GDPR) and the EU General Data Protection Regulation (EU GDPR). It is written to be readable — if anything is unclear, email me and I will explain.

خلاصه‌ی فارسی

The short version

  1. I am Amir Ardekani, a sole trader in the UK. I decide how your data is used, except the players a buyer enters in the testing app: the buyer decides about them and I only store them (section 2.10). Email me at amirardekanian@gmail.com.
  2. I collect what you give me: your application (including any injuries), your training and habit ticks in the apps, the name, email and WhatsApp number you give for the free tracker, and, if you buy the course or the testing app, your sign-in and any players you enter in the testing app (section 2.10).
  3. I use it to coach you and to run the apps. I do not sell it, show ads or build marketing profiles.
  4. Your records in my database can be read by you and me only. The one exception is the leaderboard: if you train with me, you join it after your first workout, and other athletes see your board name, points and rank. You can leave in one tap.
  5. Some companies handle data for me: Supabase (my database, in London), Web3Forms (form emails), Plausible (visit counts, no cookies), GitHub (hosting), jsDelivr (loads code for the apps), Anthropic (Claude helps me write programmes and I check every one) and Google (fonts on a few pages, YouTube when you press play).
  6. I keep your application while you coach with me and for up to 24 months after. Ask me and I delete it sooner. It leaves my weekly backups within about three months (section 4).
  7. You can ask to see, fix, delete or move your data, or object to how I use it. I reply within a month. You can also complain to the ICO (ico.org.uk).
Jump to a section

1. Who is the data controller?

Amir Ardekani, sole trader, is the data controller for this site. You can reach me at amirardekanian@gmail.com. I operate from the United Kingdom.

2. What I collect and why

2.1 Coaching intake form

When you complete the application form at /form.html, you voluntarily submit information such as your name, email address, tennis background, training history, health-relevant information (including injuries), goals, and logistics (availability, equipment). I need this information to assess suitability for coaching and to design a safe and appropriate programme for you.

Lawful basis: performance of a contract (Article 6(1)(b) UK/EU GDPR), and, for health-relevant information you disclose about injuries or medical history, your explicit consent (Article 9(2)(a) UK/EU GDPR).

Your submission is saved directly to my own secure database, provided by Supabase (London, UK), where only I can read it — this is the durable record I work from. A copy is also delivered to my email inbox as a notification via Web3Forms, a form-relay service. Both Supabase and Web3Forms act as processors on my behalf and do not use your data for their own purposes; you can review their privacy policies on their sites.

Courses run with a partner club. Some courses are run together with a club, for example the 6-Week Padel Performance Course at The UTS in Hoylake (/uts-padel.html). The athlete form for a course like this also asks for a short health screen, an emergency contact and, for athletes under 18, a parent or guardian’s details and consent. It is stored and delivered in exactly the same way as above. Because the club runs the course with me, your answers are also shared with that club’s coaching staff, who use them only to run your course safely. The form names the club and asks for your explicit consent before you send it. The padel video you send on WhatsApp and your physical test results are used only for your movement analysis, performance profile and report, and are never published.

Lawful basis for partner courses: the same as above, plus your consent (Article 6(1)(a)) for the optional permission to share photos or clips from sessions on social media. You can withdraw that permission at any time.

If you are a coaching client using your private training app, the app records your training progress — which sessions and exercises you complete, weights logged, effort (RPE) ratings, pre-session readiness check-ins, and any notes you add. Your check-in answers also set that day’s targets in the app (on a lower day, for example, every effort target one lower); that is worked out on your phone, and the kind of day it chose, and whether you chose to train as written instead, is saved with the session. This information is saved on your device and also backed up to a secure database provided by Supabase (London, UK), so that I, as your coach, can review your progress and support your training. Only I can access it; Supabase acts as a processor on my behalf. This data is kept for as long as you are an active coaching client and removed on request.

2.2 Programme app data

Read the details

If I build a programme for you, you open it at amirardekani.com/program.html and sign in with the username and password I give you. The programme itself is kept in the same private database as your progress (below), readable only by you and me. The app also uses your browser’s local storage on your device to remember your progress (completed sessions, weight logs, RPE scores, session notes, readiness answers, and interface preferences), so that it works without a signal. It also keeps a copy of the last version of your programme it loaded, so that the programme opens without one too (in a basement gym, for example). Only one programme is ever kept this way: yours is replaced each time the app loads it again, and it is deleted when you sign out, if someone else signs in on the same device, or if my server stops accepting your sign-in. Signing out (your initials, top right, then Sign out) first sends anything still waiting, and your progress stays on the phone for your next sign-in. The habit tracker (section 2.3) reads your name from the same copy, so it opens without signal too. Clearing your browser data deletes it.

This progress is also backed up to my database so that I can coach you properly: I need to see whether you finished a session, what you lifted, and what you told me about it. The backup is hosted on Supabase (London, UK). Your record is tied to your own sign-in (a username and password), and nobody but you and me can read it — other athletes cannot. The app no longer has a chat: you message me on WhatsApp, which keeps those conversations under its own privacy policy. Messages you sent through the app’s old chat (removed on 26 September 2026) stay in the same database until you ask me to delete them. If you clear your browser data, the local copy is deleted but the backup remains until you ask me to delete it (see section 6).

When you finish a session (you rate it and tap Done), the app also emails me a summary of it: the day, the exercises and what you logged, how long it took, your readiness answers, your rating and your note. It goes through Web3Forms, the same form-relay service as the application form. If you have no signal, the summary waits on your phone and goes by itself once you do; it is kept only on that phone, never copied to another device, and deleted from it once it has gone.

The app also has a Library of ready-made workouts — warm-ups, mobility flows, recovery sessions and full sessions — that are not part of your own programme. If you open one and press Mark as done, I store a single line saying which workout it was and the date you did it. Nothing else: no weights, no notes, no exercise-by-exercise record. It is used so that your habit tracker can tick the matching habit for that day, and so that I can see what you have been doing between our sessions. Pressing the button is the only thing that reaches me — opening a workout and reading it does not. When the app suggests one of these workouts (after a check-in that says you are sore, or once every session of your week is done), it notes on your phone only when you last opened that workout, so the suggestion goes away once you have looked at it; that note is never sent anywhere.

The app also keeps your Personal Records (called The Ceiling until 26 September 2026) — an estimate of the most you could lift once, for each exercise. Normally it is not a test you take: when you finish a session, the app works one out from the sets you logged, using the weight you used, the reps, and the effort (RPE) you gave it, and if it beats your best on that lift it adds it to your records by itself. You can also enter one yourself from the Personal Records screen, choosing a lift from your current programme and, if you like, dating it to the day you actually lifted it. Some lifts carry a note from me asking you to retest them every few weeks; that is a suggestion on your screen, not something the app does on its own. Either way, what is kept is the lift’s name, the estimated number, the set it came from, the date, whether it came from a test, and whether the app added it by itself — in the same private record as the rest of your programme progress, readable only by you and me. Nothing about it is ever shown to other athletes, and it earns no points anywhere. You can delete any entry from its row in that lift’s history, and the deletion follows to every device you use: the app will not add it back.

That screen also shows your strength relative to your body weight, because for a racket-sport player that ratio matters more than the raw kilos. To do that it uses your most recent body-weight reading (section 2.3) — the same private record, your own data, shown only back to you on your own device. If you have never logged a weight, the app asks you to add one rather than showing anything.

If you signed up through a partner tennis academy rather than directly with me, a summary of your training and recovery goes to your coach at that academy. That is part of the arrangement between me and the academy, and it is stated on the sign-up form before you join. It covers what you did and when — never your messages to me, your health answers, your body weight or your leaderboard activity.

Lawful basis: contract (Article 6(1)(b)) — delivering the coaching you have paid for.

2.3 Habit tracker and leaderboard

Read the details

The habit tracker at amirardekani.com/habits.html (the same sign-in) works the same way: what you tick off each day is stored on your device first and backed up to the same private record. Your points and levels are calculated from that history — they are never stored, only recomputed. The one exception is the titles you unlock by levelling up: a record that you reached a level is kept, so that a reward stays yours after the scores reset each season. It is a list of title names against your athlete ID and nothing else. You can correct or fill in the last few days of your own log inside the app; older days are closed to editing.

Body weight is recorded in the programme app, not the habit tracker (it moved there in September 2026; readings taken before the move came with it and nothing was lost). It is a standard part of the programme app, and nothing is recorded until you enter a reading. Each reading you enter is kept as a date and a number in kilograms, in the same private record as the rest of your training history, and is used for one purpose: so that you and I can see the trend while I coach you. It is never shown to other athletes — not on the leaderboard, not in Roll Call, not in any form — and it earns no points, so it cannot appear indirectly through your score either. You can delete any single reading from its row in the history, or every reading you have ever logged in one action from the same screen. You can still ask me to delete them instead, or as part of deleting the rest of your data (see section 6).

Lawful basis: legitimate interests (Article 6(1)(f) UK/EU GDPR) — letting you and me see the trend behind a number you have chosen to log, as part of the coaching relationship, weighed against your right to object to this specific processing at any time: nothing is recorded unless you enter a reading yourself, and every reading can be deleted in one action from the same screen, rather than by a form or a request to me.

The tracker includes a leaderboard, and everyone training with me is on it. You are added automatically once you have finished your first workout in the programme app, rather than being asked to join. The app tells you this before it happens — its tour and the Crew tab show the name you will appear under, let you change it, and let you keep yourself off the board in advance with one tap — and again afterwards: a banner on the day screen says you are on the board, shows the name other athletes see, and takes you straight to the setting — not only in this notice. You can leave at any time from inside the app (Settings → Crew board), and leaving removes your entry immediately and for good: you are not added back. While you are on it, other athletes can see the display name shown on that banner — by default your first name and the initial of your surname, for example “Alex R.”, which you can change to anything you like, including something that is not your name — your points and rank, and the title you have chosen to show, if any. A title is a reward you unlock by levelling up (such as “Ironclad”); showing one is optional, you choose which, and you can show none. Your habits, your logs, your programme, your real name and your athlete ID are never shared. Only signed-in athletes can view the board; it is not public, and it is not indexed or shared outside it. One board is shared by everyone using the tracker — both my coaching clients and people using the free tracker without coaching — so the athletes who can see your entry are not only my clients. You can rename yourself or leave at any time from inside the app, and leaving removes your entry immediately.

Being on the board also lets you use Roll Call: one short sentence a day that other athletes on the board can read. This is entirely voluntary — you never have to write one, and the tracker works exactly the same if you do not. If you do write one, four things are visible to the other athletes on the board for seven days: your display name, the title you have chosen to show (if any), the sentence you wrote, and how much of that day’s habits you had completed, as a single percentage. Habits are not all worth the same — a training session counts for more than a supplement — so that one number is weighted, and a reader who knows the weights could make a reasonable guess at which habits were behind it. It is still one number: the app never sends the list. Please do not put anything sensitive in it — in particular nothing about your health, injuries, medication or anything else you would not want another client to read. You can change or delete your sentence at any time before midnight, after which it stays as written. Leaving the leaderboard immediately hides every sentence you have written, and you can ask me to delete them outright (see section 6). I can also remove any line from the wall myself.

Lawful basis: legitimate interests (Article 6(1)(f) UK/EU GDPR) for the leaderboard entry itself — a shared board is part of how this coaching programme works, and the information shown is limited to a changeable display name, a score, a rank and a title you choose to show, weighed against your right to object at any time by leaving, which is a single tap inside the app rather than a request to me. It is not described as consent, because you are added without being asked and consent has to be a real choice made in advance. Roll Call remains consent (Article 6(1)(a)) — nothing is shown unless you write it, and you can delete it.

2.4 Jump test

The jump test at amirardekani.com/jump.html is different from everything else on this page: nothing you put into it ever leaves your device. There is no account, no login and no backend.

Your video is never uploaded. When you choose a clip, your browser reads the file directly from your phone and analyses it there. It is not sent to me, it is not sent to Supabase, and it is not sent to any third party. Close the page and the video is gone from the app entirely.

Three things are saved in your browser’s local storage, on your device only, under the keys aa_jump_cfg, aa_jump_log and aa_jump_meta: the details you enter about yourself (a name if you give one, standing height, and optionally body mass, sex, age and footwear), the conditions of each test, and your saved results. I cannot see any of it. There is a Clear all jump data on this device button in the app that deletes the lot, and clearing your browser data does the same.

The page loads fonts from Google Fonts, which is noted in section 2.8. Nothing else on the page makes a network request.

Lawful basis: not applicable — no personal data reaches me, so there is no processing by me to have a basis for. The storage on your device is strictly necessary for the tool you asked to use.

2.5 Habit tracker signups (AA Proof)

The habit tracker is also offered free to people who are not coaching clients, through amirardekani.com/proof.html. That form collects three things: a display name you choose, your email address and your WhatsApp number. The form is delivered to me by Web3Forms, the same service as the coaching application.

I use your email and WhatsApp number for two things: to send you your sign-in, and occasionally to ask how you are getting on with it. I do not add you to a mailing list, I do not sell or share your details, and I do not pass them to advertisers. Your contact details are stored in the same Supabase database (London, UK) and are readable only by me — never by other athletes, and never in the public part of the site.

Once set up, the free tracker works exactly as described in 2.3: what you log is stored on your device and backed up to your own private record, except that you are never added to the leaderboard automatically: a free account has no programme workouts, so joining the board, and Roll Call, stay your choice. Free users and coached athletes share the same board, so if you join it, my coaching clients can see your display name, points, rank and chosen title — and your Roll Call sentence if you write one.

Ask me at any time and I will delete your account, your contact details and everything you have logged. There is no notice period and you do not have to give a reason.

Lawful basis: consent (Article 6(1)(a)) — you asked for the link, and you can withdraw at any time.

2.6 Analytics

I use Plausible Analytics to understand aggregate, anonymous visit patterns (page views, referrer, country, device type). Plausible is a privacy-first, cookie-less analytics service hosted in the EU. It does not set cookies, does not track users across sites, and does not collect personally identifiable information. No individual user can be identified from the data I receive.

Lawful basis: legitimate interests (Article 6(1)(f)) — measuring aggregate traffic to improve the site. Because no identifiers are stored or returned to your device, this processing falls outside the scope of PECR / ePrivacy cookie-consent requirements.

2.7 Embedded video (YouTube)

Exercise demonstration videos are embedded from YouTube. Nothing is requested from YouTube until you tap a video’s play button: the player is only loaded at that moment. When you do, Google (YouTube’s operator) may set cookies and collect data according to Google’s privacy policy. I have no control over that processing. If you prefer not to share data with Google, do not press play on embedded videos.

2.8 Hosting, server logs, fonts and code libraries

This site is hosted on GitHub Pages. GitHub may retain temporary request logs (including IP address and user-agent) for security, abuse prevention, and service operation. See GitHub’s privacy statement. I do not receive or access these logs.

Fonts. The home page, the apply and free-tracker forms, the privacy and terms pages, the Farsi pages and the Etminan pages serve their typefaces from this site, so those pages make no font request to Google. Some other pages (the articles, the training and habit apps and the UTS page) still load their typefaces from Google Fonts. To draw them, your browser asks Google’s servers for the font files, which tells Google your IP address and the address of the page. Google explains what it does with that in its Google Fonts privacy FAQ. I do not receive that data.

Code libraries. The training and habit apps, the pages you sign in to, load the code library that connects them to my database (Supabase’s) from jsDelivr, a free code delivery network. To fetch it, your browser asks jsDelivr’s servers for that file, which tells jsDelivr your IP address and the address of the page. jsDelivr explains what it does with that in its privacy policy. I do not receive that data.

2.9 Writing your programme with an AI assistant

I use an AI assistant, Claude, made by Anthropic, to help me write your programme and the notes in it. To do that I put what you told me in your application and your training record into the assistant: your name, your goals, your background, any injuries, your weekly check-ins, and the sessions you have logged with your effort ratings, readiness answers and notes. I read, change and approve every programme myself before you see it, and the assistant does not decide whether I coach you.

Anthropic acts as a processor on my behalf and handles this data under its own privacy policy and terms; it may process it outside the UK and the EEA (section 5). If you have a question about this, or want your data deleted, message me (section 6).

Lawful basis: the same as section 2.1: performance of a contract and, for health-relevant information, your explicit consent.

2.10 Course and testing-app accounts

If you buy the Tennis Performance System course or the tennis testing app, I create a sign-in for you: a username and a password. I keep the username, the date it was made, whether it is active, and a short private note of my own about who bought it, which only I can read. The sign-in service stores your password as a one-way hash. The first password I generate for you is also held in my database until you sign in with it, and then it is deleted.

The course is downloaded to your device when you sign in. It does not send me your progress, your answers or what you have read.

The testing app stores what you enter in it in my database, hosted on Supabase (London, UK): the players you add (their name, birth year and month, sex, handedness and squad), your notes about them and their test results. It is kept so that you can use the app from any device. I do not read it or use it for anything else. It is included in my weekly backup, which I can technically open, and I do not. Removing a player in the app only hides them; when you ask me to delete your account, the hidden ones go too, and if you want one player’s details gone sooner, ask me.

Who decides about the players. You choose to put that information in, and it should only be about people you are allowed to record. You decide why you record it and how it is used, so for the players you enter you are the one responsible for it and I only store it for you. If your players include children, you are responsible for having the right to record their details. If you are a player, or a parent, and a coach or academy entered your details, ask them first: they decide, and I will help them answer you.

Ask me and I delete your account and everything stored under it, in one step. There is no notice period.

Lawful basis for your account: performance of a contract (Article 6(1)(b)): you bought the product and it cannot work without the account. For the players you enter, the lawful basis for recording them is yours to have.

3. What I do not do

4. Retention

Intake-form submissions are retained for as long as our coaching relationship is active and for up to 24 months afterwards, so I can respond to follow-up questions and honour any obligations. You may request earlier deletion at any time.

Habit-tracker signups (section 2.5) are retained for as long as you use the tracker, and deleted on request — contact details, logged history, body-weight readings, board entry and unlocked titles together.

Course and testing-app accounts (section 2.10) are kept while the account is active and deleted on request: the sign-in, my note about it and, for the testing app, every player, note and result you entered.

Plausible’s aggregate, anonymous analytics data is retained by Plausible per their policy and cannot be linked back to you individually.

Local-storage data on your device persists until you clear it yourself.

Backups. Once a week I download a backup of my database. I keep the backups from the last 12 weeks and delete older ones, so if I delete your data from the database, it leaves my backups within about three months.

Erasure receipts. When I erase an account, I keep a receipt: the date, the kind of record, how many rows were removed and a one-way hash of the username or id. It holds no name, email or contact. It lets me check, if I ever restore an old backup, that I do not bring back someone I already erased.

Email copies. Each form you send also arrives as an email in my inbox (section 2.1). I do not clear those out on a schedule, so ask me and I delete yours.

5. International transfers

Web3Forms, Plausible, GitHub, jsDelivr (the code library, section 2.8), Anthropic (the AI assistant, section 2.9) and Google (YouTube and Google Fonts) are operated by organisations that may process data in the UK, EU, or other jurisdictions (including the United States). Where data leaves the UK or the EEA, these providers rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions. You can review each provider’s policy via the links above.

6. Your rights

Under UK and EU GDPR you have the right to:

To exercise any of these rights, email amirardekanian@gmail.com. I will respond within one month.

7. Security

I take reasonable, proportionate steps to protect your data: encrypted transport (HTTPS), the minimum collection necessary, strong account security on my email and hosting providers. No transmission over the internet can be guaranteed 100% secure; if I ever become aware of a personal-data breach that is likely to result in risk to your rights, I will notify you and the ICO as required by law.

8. Children

Programmes are bought by adults. You must be 18 or over to apply and pay. If the athlete is under 18, a parent or guardian applies and pays for them, gives the consent in the form on their behalf, and answers the health questions with them.

9. Changes to this notice

If I update this notice, I will change the “last updated” date at the top. Material changes will be communicated to active coaching clients by email.

← Back to home