Privacy Policy
Last updated: 12 October 2026 · Effective: 12 October 2026
In short: Tonsser uses the activities and reflections you log to run Hooper and give you AI Coaching. We do not sell your data and do not use it for third-party advertising. You can see, download or delete your data at any time.
1. Who is responsible
Tonsser ApS, CVR no. 35472088, c/o Peter Holm Nielsen, Peder Pårs Vej 20, 9000 Aalborg, Denmark, is the data controller for Hooper.
Privacy questions: privacy-hooper@tonsser.com. Data protection officer: Jonathan Lavigne, privacy-hooper@tonsser.com.
2. What data we might collect
| Category | Examples | Source |
|---|---|---|
| Account | Name, username, email or phone, password, date of birth, country, language | You |
| Parent or guardian | Parent's name, email, record of consent | Parent |
| Basketball profile | Position, team or school, level, goals | You |
| Activities | Training sessions, games, duration, type, intensity, date. We do not collect your location. | You |
| Reflections | How a session felt, notes, effort and mood ratings you choose to add | You |
| AI Coaching | Your questions, AI suggestions, objectives and progress | You and the app |
| Photos and videos | Profile picture, media you upload | You |
| Usage and device | App interactions, device model, OS, app version, IP address, push token | Your device |
| Partner programmes | Membership of a pilot or programme run with a school, federation, academy, team or circuit | Partner |
| Support | Messages you send us | You |
Sensitive information. Effort, mood or how a session felt may reveal information about your health. We only collect it if you choose to add it, based on your explicit consent (or your parent's). You can stop adding it or withdraw consent at any time.
We do not currently collect data from health apps, sleep trackers or wearables. We will update this policy and ask for consent before we do.
3. Why we use your data and our legal basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Create and run your account and the app | Contract (Art. 6(1)(b)); parental consent where required (Art. 8) |
| Provide AI Coaching | Contract; explicit consent for health-related reflections (Art. 9(2)(a)) |
| Verify age and parental consent | Legal obligation (Art. 6(1)(c)) |
| Keep Hooper safe and prevent abuse | Legitimate interests (Art. 6(1)(f)) |
| Improve Hooper and AI Coaching using de-identified data | Legitimate interests |
| Run partner pilots and programmes | Contract or consent, depending on the programme |
| Push notifications | Contract; you can turn off push in your device or app settings |
| Comply with law and handle disputes | Legal obligation; legitimate interests |
4. AI Coaching
AI Coaching analyses your profile, activities and reflections to suggest training ideas, objectives and feedback. This is a form of profiling.
- It does not make decisions with legal or similarly significant effects on you, such as team selection.
- Suggestions are automated and may be wrong. You decide whether to follow them.
- We send only the data needed for each suggestion to a third-party AI provider, which processes it on our behalf and is contractually prevented from using it to train its own models.
- We do not use children's data to train general-purpose AI models.
- You can object to profiling at any time by emailing privacy-hooper@tonsser.com.
5. Children and parents
- Minimum age 13. We do not knowingly collect data from younger children.
- Parental consent. If you are under the digital age of consent in your country (13 in Denmark, Sweden and the US; up to 16 elsewhere in the EU), we ask a parent or guardian to consent first.
- Private by default. Profiles of users under 18 are not public by default.
- No targeted ads, no sale of data.
- Parent rights. A parent or guardian can review, change or delete their child's data and withdraw consent via privacy-hooper@tonsser.com.
6. Who we share data with
| Recipient | What and why |
|---|---|
| Service providers | Hosting (Amazon Web Services, EU region), AI Coaching (a third-party AI provider) and push notifications (WonderPush). They act only on our instructions under data processing agreements. |
| Partners running a programme | If you join through a school, federation, academy, team or circuit, we may share your participation and progress with them, as explained when you join and with consent. |
| Other users | Only what you choose to share through social features. |
| Authorities and advisers | Where required by law, to protect safety or enforce our Terms. |
| Buyers or investors | If Tonsser is involved in a merger, sale or financing, under confidentiality. |
We never sell personal data.
7. International transfers
We store your data with Amazon Web Services in the EU. Our AI provider may process data outside the EEA, including in the United States. When it does, we rely on the EU-US Data Privacy Framework or the European Commission's Standard Contractual Clauses with additional safeguards.
8. How long we keep data
| Data | Kept for |
|---|---|
| Account, profile, activities, reflections | While your account is active; deleted within 30 days of account deletion |
| Inactive accounts | Deleted after 24 months of inactivity, with a warning first |
| Parental consent records | Life of the account plus 3 years |
| Support messages | 2 years |
| Server logs | 90 days |
| Aggregated, de-identified data | May be kept, as it no longer identifies you |
9. Security
We use encryption in transit and at rest, access controls and regular reviews. No system is fully secure. If a breach affects you, we will inform you and the authorities as the law requires.
10. Your rights
You can access, correct, delete or download your data, object to processing based on legitimate interests (including profiling), restrict processing in some cases, and withdraw consent at any time. Use the app settings or email privacy-hooper@tonsser.com. We reply within one month. A parent or guardian can exercise these rights for a child.
You can complain to the Danish Data Protection Agency (Datatilsynet, datatilsynet.dk) or the authority where you live, such as IMY in Sweden.
11. Additional notice for US users
This section applies if you live in the United States.
- Children under 13. We do not knowingly collect personal information from children under 13, in line with the Children's Online Privacy Protection Act (COPPA).
- State privacy rights. Depending on your state (for example California), you may have rights to know, delete, correct and opt out. We do not sell personal information or share it for targeted advertising. Contact privacy-hooper@tonsser.com; we will not discriminate against you for using your rights.
- Minors' content removal. California users under 18 can ask us to remove content they posted.
12. Changes and contact
We will tell you in the app or by email before significant changes take effect, and ask for consent again where required.
Contact: Tonsser ApS, c/o Peter Holm Nielsen, Peder Pårs Vej 20, 9000 Aalborg, Denmark · privacy-hooper@tonsser.com