Effective 2 August 2026 · Ballmark for iOS · Version 1.0
Ballmark is made by Fresaberry, a small independent app studio (Wallace Ting, trading as Fresaberry). Fresaberry is the controller of the personal data described in this policy.
Questions about privacy, or about your data specifically, go to hello@fresaberry.com.
This policy covers the Ballmark iOS app and this website. It does not cover any third-party service you reach from the app, such as the maps application that opens when you tap directions.
Browsing courts, viewing photos and reading reviews all work while signed out. In that state we hold no account and no identifier for you. We do record anonymous usage events, described in section 7.
An account is required only to contribute — to add a court, upload a photo, or write a review.
Ballmark offers two ways to sign in:
Both are native token-based flows. Ballmark has no passwords. There is no email-and-password registration, so there is no password of yours for us to store or lose.
When you first sign in, a profile record is created automatically. It holds:
If you use Apple's Hide My Email, the address we receive and store is an Apple relay address. We never see your real one.
We do not receive your Apple or Google password, and we cannot see anything else in those accounts.
If you grant location permission, Ballmark uses your location on the device to centre the map on courts near you.
Your location is never uploaded. It is not sent to our servers, not stored, and not shared. The permission prompt inside the app says the same thing, in the same words: "Ballmark centres the map on courts near you. Your location is never uploaded."
When you add a court and drop a pin, the app turns that pin into a street address using CoreLocation on your device — Apple's built-in geocoder. We do not send the coordinates to a third-party geocoding service to do it.
Declining location permission does not restrict the app. You can search and pan the map instead.
Note that a court's own location is stored and published — that is the directory. What is never stored is your location.
Ballmark can add photos to a court listing. Two things are worth knowing:
What is uploaded is the image itself. Uploaded photos are stored in Cloudflare R2 and served publicly from img.fresaberry.com.
Please do not upload photos of identifiable people without their agreement. Section 12 explains how to get a photo taken down.
One honest caveat about removal: photos are served through a content delivery network, so once a photo is deleted it can still be served from a cached copy at the network's edge for up to four hours before it disappears everywhere. It is gone from Ballmark immediately; the cache is what lags.
Signed-in users can contribute:
All of this is published in the directory, attributed to your display name, and visible to anyone using the app. Treat it as public from the moment you submit it.
Contributions from accounts we have not marked as trusted are held as drafts and reviewed by a moderator before they appear.
The rights you grant us in what you contribute are set out in the contributor licence, which is shown to you in the app and which you consent to at the point of contributing.
That licence is versioned, and we record which version you agreed to rather than just that you agreed. Anything you contributed stays under the version that was current when you contributed it. If we change the terms, we ask again — we do not apply new terms retroactively to work you have already given us.
Ballmark records a short, fixed list of events so we can tell which parts of the directory are useful and where coverage is thin. It is five things, and this is all of them:
Each event stores which court it concerned and when. The only additional detail recorded anywhere is which photo in a carousel you looked at, as a number. There is no free-text field, and nothing about your device, your network or your position is attached.
If you are signed in, the event records your account. If you are signed out, no account identifier is attached at all and the event cannot be traced to a person.
Event data is readable only by an administrator. No other user can see it, no third party receives it, it is not sold, and it is not used to build an advertising profile or to follow you anywhere. There is no third-party analytics or attribution SDK in Ballmark, and no crash-reporting SDK either.
Two deliberate design choices are worth stating plainly, because they are the kind of thing privacy policies usually leave vague:
Ballmark is a small app and relies on four external services. Each acts as a processor for us and is bound by its own terms.
| Service | What it does | What it handles |
|---|---|---|
| Supabase | Database and authentication | Your profile, contributions, and usage events |
| Cloudflare | R2 object storage and image transformation | Uploaded photos |
| Google Maps SDK for iOS | Renders the map inside the app | Map tile requests from your device |
| Apple & Google | Sign-in providers | Authentication; they tell us who you are, not what you do |
The Google Maps SDK operates under Google's own terms and privacy policy while it renders the map. We do not send it your stored location, because we do not store your location.
Supabase and Cloudflare may process and store data outside your own country, including in the United States. If you are in the EEA or the UK, that is a transfer to a third country, made on the basis of the standard contractual clauses those providers operate under.
You can delete your account from inside the app. Tap the initials button in the top-right of the map, then Delete account. You do not have to email us and wait for us to action it.
Deletion is real. There is no deactivated state, no flag and no hidden copy of your account kept aside — your sign-in record itself is deleted, not just your profile.
What happens to each kind of content:
| What | On deletion |
|---|---|
| Your account and profile | Deleted, including your display name and the address your sign-in provider gave us |
| Your reviews | Deleted |
| Private notes on your account | Deleted |
| Courts and court details you added | Stay in the directory, with the link to you removed |
| Photos you uploaded | Stay in the directory, with the link to you removed |
The line we drew is between your words and the directory's record. A review is you speaking, so it goes with you. A court's location, surface and lights are facts about the world that other people now rely on — a court that vanishes from a public directory is a court someone drives to and finds gone. Those stay, under the contributor licence you agreed to when you submitted them, but nothing in the app credits them to you afterwards.
If a specific photo or court of yours needs to come down for a reason beyond authorship, email hello@fresaberry.com and we will look at it.
Deletion takes effect immediately, both in the app and in our database. Copies may persist briefly in routine encrypted backups before those rotate out.
You can report a court listing, a photo or a review from inside the app. For a photo — including a photo of you that you did not agree to — open it and the Report control sits on the image itself. You can also email hello@fresaberry.com if you would rather not use the app.
We act on reports of objectionable content within 24 hours, by removing the content, the account that posted it, or both. You do not need an account to report something, and reports are readable only by an administrator — the person you reported cannot see your report or work out who filed it.
You can also block an account, which hides its reviews and photos from you. Blocking is silent: the other person is not told. Full detail is on the support page.
Wherever you are, you can email hello@fresaberry.com to ask what data we hold about you, ask us to correct it, or ask us to delete it. We will respond within 30 days. We do not charge for this, and we will not treat you differently for asking.
If you are in the EEA or the UK, our lawful bases are: performance of a contract (running your account and publishing what you contribute), and legitimate interests (keeping the directory accurate and moderated, and understanding which parts of it get used). You have the rights of access, rectification, erasure, restriction, portability and objection, and the right to complain to your national data protection authority.
If you are in California, you have the rights to know, delete, and correct. We do not sell or share personal information and we do not use it for cross-context behavioural advertising, so there is nothing for you to opt out of.
Ballmark is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has created an account, email hello@fresaberry.com and we will delete it.
Traffic between the app and our services is encrypted in transit. Access to the database and to administrator-only data is restricted to Wallace Ting. Because there are no passwords in Ballmark, there is no password database to breach. No system is perfectly secure, and we will not claim otherwise.
If we change how Ballmark handles data, we will update this page and change the effective date at the top. Material changes will also be surfaced in the app. This page is the current version; there is no separate archive.
Fresaberry — Wallace Ting, trading as Fresaberry
hello@fresaberry.com