Privacy policy

Last updated: 12 October 2026 · Teufl-Keil Georg

This policy explains which personal data the Nimble Hit app and this website process, why, and what your rights are. The app and the website are two separate things, so they have separate sections.

In plain words

Your training stays on your headset.
Usage statistics go to Unity only if you say yes at the first start. You can switch them off or delete them in Settings at any time.
If the app crashes, a crash report goes to Unity. This report is sent from every player.
The 3-Minute leaderboard is Meta's. It shows your Meta name and best score to your friends, and theirs to you.
The coach's voice is generated by AI (Microsoft Azure). It is made before the app is released; nothing you say goes anywhere.
Never collected: your voice, video, camera images, or the movements of your head and hands.

1. Who is responsible

Teufl-Keil Georg
Technoparkstraße 3/16
4820 Bad Ischl, Austria
office@nimble-hit.com

For any question about your data, or to use your rights, write to office@nimble-hit.com.

Part A — The Nimble Hit app

2. Data that stays on your headset

The app keeps a save file on your headset. It holds the history of your sessions with their scores and stats, the moves you have learned, your sparring skill levels and names, your settings (language, mixed reality or virtual room), your answer to the usage-statistics question, and the date of a deletion request.

This file never leaves your headset through the app. Deleting the app deletes it.

3. Meta's platform

Nimble Hit runs on Meta Quest and uses Meta's platform for four things:

Checking your purchase: the app asks Meta whether your Meta account owns the game. If the check fails, for example offline, the game keeps working.
Your Meta identity: used for the leaderboard. The app has no account of its own.
Your friends list: to show the 3-Minute leaderboard among your friends, the app asks Meta for the friends who follow you back and also own the game, and shows their Meta names and best scores beside yours. The app uses this list only for that display. It does not save it and does not send it anywhere.
The 3-Minute leaderboard: your best score, with that run's stats (duration, speed, reaction, accuracy, guard and time lost), is stored by Meta under your Meta account. Meta shows it to your friends with your Meta name. The app reads your own entry to show your personal best.

Provider: Meta Platforms. Meta's own privacy policy governs this data: meta.com/legal/privacy-policy. Nimble Hit cannot delete data that Meta stores.

Legal basis: performance of the contract (Art. 6(1)(b) GDPR) — these functions are part of the game you bought.

4. Usage statistics, only with your consent

Provider: Unity Gaming Services Analytics, Unity Technologies.

When: at the first start, the app asks every player “Help improve Nimble Hit?” with Yes and No, two buttons of equal weight. Without a yes, nothing is collected. You can switch it on or off later in Settings. “Delete my analytics data” in Settings sends Unity a request to delete your data; it also switches sharing off.

What is shared: your sessions, points, skill levels, device details, country and a device ID. Never: your name, your Meta account, voice, video or camera images.

In detail, the app records these events: opening a menu, the start and end of sessions and sparring matches, each sparring round, a move learned, and a setting changed. Each carries fixed values only: the mode, the duration, points, speed, reaction, accuracy, guard, skill levels and shares, the environment and the language. No names, no IDs, no free text.

Unity adds its own fields: battery, processor, memory, screen, volume, country, time zone, a random installation ID and a device identifier. The data is therefore pseudonymous, not anonymous: it carries no name or Meta account, but an ID.

Purpose: to see how the app is used, where players stop, and what to improve.
Legal basis: your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time in Settings; this does not affect what was processed before.
How long it is kept, and how deletion works: as described in Unity's privacy policy: unity.com/legal/privacy-policy. A deletion request from Settings goes to Unity directly.
Transfer outside the EU: Unity processes data in the United States, on the basis of the EU–U.S. Data Privacy Framework or the European Commission's standard contractual clauses.

5. Crash reports

Provider: Unity Cloud Diagnostics, Unity Technologies.

If the app crashes, it sends a crash report to Unity. This happens for every player, whatever the answer to the usage-statistics question. A report carries device details and the last 50 lines of the app's log. The log is kept free of names, user IDs and leaderboard names.

Purpose: to find and fix errors.
Legal basis: our legitimate interest in a working app (Art. 6(1)(f) GDPR). You can object at any time by writing to office@nimble-hit.com; we will examine your objection and answer you.
How long it is kept: as described in Unity's privacy policy: unity.com/legal/privacy-policy.
Transfer outside the EU: as in section 4.

6. What the app never collects

Voice: the app has no microphone permission.
Video and camera images: mixed reality is drawn by the headset's system. The app never receives camera images.
The movements of your head and hands: used live for the game, and neither stored nor sent.
Advertising: none. No advertising IDs, and no tracking for ads.

7. Permissions

The app asks for hand tracking, internet access, and one permission that Unity needs to receive messages. Nothing else.

8. The coach's voice is generated by AI

The coach's voice is a synthetic voice, generated with Microsoft Azure AI Speech (text to speech). It is not a recording of a person. The lines are generated before the app is released and ship inside it. Nothing you say or do goes to Azure. The app also says this in its Settings.

9. Children

Nimble Hit is not directed at children under 13. If you are a parent and believe your child has shared data with us, write to office@nimble-hit.com and we will help you delete it.

Part B — This website

10. Visiting this website

This website is hosted by Elementor Ltd. (Elementor Cloud Website), with Cloudflare as its content delivery network. When you open a page, their servers process your IP address, the time, the page and your browser's details, so that the page can be delivered and protected against attacks. How long these logs are kept is set out in their privacy policies: elementor.com/about/privacy and cloudflare.com/privacypolicy.

Legal basis: our legitimate interest in running the website securely (Art. 6(1)(f) GDPR).

11. Google Analytics, only with your consent

This website uses Google Analytics (Google Ireland Limited / Google LLC) to count visits and see which parts of the page are read. It runs only after you click “Accept” in the cookie banner. “Reject” has the same weight, and nothing is loaded from Google before your choice. Your choice is kept in your own browser (local storage), and you can change it at any time with “Cookie settings” at the bottom of every page; withdrawing removes the Google Analytics cookies.

What is processed: after your consent, Google Analytics sets the cookies _ga and _ga_<ID> (a random ID) and records the pages you view, how long you stay, your browser, device and approximate location. Google does not store your full IP address in Google Analytics. Details: policies.google.com/privacy.
Legal basis: your consent (Art. 6(1)(a) GDPR, § 165 (3) TKG 2021).
Transfer outside the EU: Google may process data in the United States, on the basis of the EU–U.S. Data Privacy Framework.

12. Fonts

The website's font, Inter, is stored on this website's own server. No request goes to Google Fonts.

Your rights

You have the right to access your data, to have it corrected or deleted, to restrict its processing, to data portability, and to object. Where processing is based on your consent, you can withdraw it at any time. Write to office@nimble-hit.com.

You can also complain to a supervisory authority. In Austria this is the Datenschutzbehörde, Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at.