Your privacy is important to us. This Privacy Policy document outlines the types of personal information that is received and collected by SensiBallVR and how it is used.

PRIVACY POLICY

Last Updated: June 2026 Version: v1.0

1. Introduction

Welcome to SensiballVR.

This Privacy Policy explains how SensiballVR Arge Anonim A.Ş. (“SensiballVR”, “we”, “our”, or “us”) collects, uses, stores, processes, protects, and discloses personal data when users access or use:

• the SensiballVR website,
• virtual reality training environments,
• mobile or desktop applications,
• athlete performance systems,
• ranking and benchmarking systems,
• coach and organization management tools,
• and related digital services (collectively, the “Service”).

This Privacy Policy is designed to support:

• GDPR-aligned transparency,
• youth athlete privacy protection,
• organizational and club onboarding,
• and responsible sports-performance data processing.

By accessing or using the Service, you acknowledge that your personal data may be processed in accordance with this Privacy Policy.

2. Company Information

Company Name: SensiballVR Arge Anonim A.Ş.

Country of Registration: Türkiye

Privacy Contact: info@sensiballvr.com.tr

Security Contact: developer@sensiballvr.com

3. Definitions

Account

A user account created to access or use the Service.

Personal Data

Any information relating to an identified or identifiable individual.

Sports Performance Data

Performance-related interaction data generated during sports training sessions.

Controller

The organization or individual determining the purposes and means of processing personal data.

Processor

An entity processing personal data on behalf of a Controller.

User

Any athlete, coach, parent, guardian, club representative, academy representative, or organization using the Service.

Service

The SensiballVR platform, websites, applications, VR environments, and related services.

4. Information We Collect

4.1 Account & Identity Information

We may collect:

• Full name
• Email address
• User ID
• Gender
• Date of birth
• Team or club affiliation
• Player position
• City
• Address
• Profile photograph

4.2 Sports Performance Information

During training and platform use, we may process:

• Scenario identifiers
• Session history
• Reaction time metrics
• Accuracy scores
• Completion results
• Foot usage percentages
• Ranking information
• Benchmarking data
• Comparative performance analytics
• Historical athlete development information

This information is processed exclusively for:

• sports training,
• athlete development,
• cognitive and reaction-based exercises,
• performance continuity,
• comparative sports analysis,
• coaching evaluation,
• and organizational athlete management.

4.3 Technical Information

SensiballVR currently does not intentionally collect or permanently retain:

• IP addresses,
• device identifiers,
• headset identifiers,
• persistent behavioral telemetry,
• advertising telemetry,
• cloud-based crash reports,
• or third-party advertising analytics.

Temporary operational logs may be generated for:

• security,
• infrastructure stability,
• operational troubleshooting,
• and service continuity.

5. How We Use Personal Data

We may use personal data for:

• providing and maintaining the Service,
• authentication and authorization,
• athlete account management,
• sports performance analysis,
• rankings and benchmarking,
• comparative athlete analytics,
• coach visibility features,
• organizational administration,
• infrastructure maintenance,
• customer support,
• legal compliance,
• operational governance,
• and security monitoring.

SensiballVR does not use athlete data for unrelated advertising profiling purposes.

6. Rankings, Benchmarking & Comparative Analytics

The Service may include:

• rankings,
• leaderboards,
• benchmark systems,
• comparative performance analytics,
• and team-level visibility tools.

These functions exist solely for:

• sports training,
• athlete development,
• organizational coaching,
• performance improvement,
• and educational sports analysis.

SensiballVR does not use these systems for:

• medical diagnosis,
• clinical evaluation,
• recruitment decisions,
• employment decisions,
• disciplinary actions,
• or automated legal decision-making.

7. Children & Youth Athletes

The Service may be used by athletes under the age of 18.

Parent-Managed Accounts

Where users participate individually, accounts may be created and managed by a parent or legal guardian.

Club & Academy Accounts

The Service may also be used through:

• clubs,
• academies,
• federations,
• schools,
• or sports organizations.

In these cases, the relevant organization is responsible for obtaining:

• parental permissions,
• notices,
• legal authorizations,
• and organizational approvals

required under applicable law.

SensiballVR recognizes the increased privacy sensitivity associated with youth athlete information.

8. Legal Basis for Processing

Depending on the context, SensiballVR may process personal data based on:

• performance of a contract,
• legitimate interests,
• organizational administration,
• legal obligations,
• parental authorization,
• and user consent where required.

Where consent is used as a legal basis, users may withdraw consent where applicable.

9. Data Sharing

Personal data may be shared with:

• authorized coaches,
• clubs and academies,
• organizational administrators,
• infrastructure providers,
• operational service providers,
• and legally authorized authorities where required.

SensiballVR does not sell personal data.

SensiballVR currently does not use:

• behavioral advertising systems,
• third-party advertising analytics,
• or external advertising telemetry platforms.

10. Hosting & Infrastructure

SensiballVR infrastructure is hosted using:

• Contabo GmbH infrastructure services,
• self-hosted Kubernetes environments,
• self-hosted MySQL and PostgreSQL databases,
• and self-managed backend systems.

Primary infrastructure region:
France / European Union

Authentication infrastructure is self-hosted using:

• Spring Security,
• JWT-based authentication,
• and internal authorization systems.

11. Security Measures

SensiballVR implements technical and organizational security measures including:

• TLS encryption for data in transit,
• AES-256 encryption for sensitive personal data fields,
• restricted production database access,
• role-based access control (RBAC),
• Kubernetes Secret credential management,
• operational monitoring,
• and infrastructure access logging.

Security governance improvements continue to evolve over time.

12. Data Retention

Personal data may be retained for:

• athlete development continuity,
• training history,
• benchmarking,
• organizational reporting,
• operational continuity,
• and legal obligations.

Users may request deletion of their account and associated personal data.

Some operational backup data may remain temporarily retained according to infrastructure recovery procedures.

13. Data Deletion Requests

Users may request deletion of personal data by contacting:
info@sensiballvr.com.tr

Identity verification may be required before deletion requests are completed.

14. International Data Transfers

Personal data may be processed within infrastructure environments operated by SensiballVR and approved infrastructure providers.

Where international data transfers become applicable, reasonable safeguards and contractual protections may be implemented where legally required.

15. Future Sensor & Eye-Tracking Features

SensiballVR may introduce future technologies including:

• eye-tracking integrations,
• sensor-based interaction systems,
• visual attention analysis,
• and advanced athlete telemetry.

If such technologies materially change:

• the categories of processed data,
• the privacy risk profile,
• or the nature of athlete profiling,

SensiballVR may:

• update this Privacy Policy,
• implement additional transparency measures,
• require additional consent or parental authorization,
• and conduct additional privacy impact assessments.

The current production platform does not process eye-tracking telemetry.

16. Your Rights

Subject to applicable law, users may have rights including:

• access,
• correction,
• deletion,
• restriction of processing,
• objection,
• portability,
• and withdrawal of consent where applicable.

Users within the EEA may also have the right to lodge complaints with relevant data protection authorities.

17. Cookies & Tracking

SensiballVR currently uses only operationally necessary website technologies.

The Service does not currently operate:

• behavioral advertising systems,
• advertising pixels,
• or third-party marketing telemetry.

If future analytics or tracking technologies are introduced, this Privacy Policy may be updated accordingly.

18. Third-Party Links

The Service may contain links to third-party websites or platforms. SensiballVR is not responsible for the privacy practices or content of third-party services.

19. Changes to This Privacy Policy

SensiballVR may update this Privacy Policy from time to time.

Updated versions may be published through the website, applications, or associated services.

Continued use of the Service after updates may constitute acknowledgment of the updated Privacy Policy.

20. Contact

Privacy & Data Protection Contact: info@sensiballvr.com.tr

Security Contact: developer@sensiballvr.com