Privacy Policy

1. Information We Collect

1.1 Information You Provide Directly. We collect information you provide when you create an account, subscribe, or use the Service, including:

• Name and email address
• Payment information (processed securely by Stripe — we do not store card details)
• Profile information (e.g. profile photo, position, training notes)
• Player data entered by Trainers (names, emails, training observations, session records)
• Communications you send to us

1.2 Information Collected Automatically. When you use the Service, we may automatically collect:

• Device information (device type, operating system, unique device identifiers)
• Log data (IP address, browser type, pages visited, time and date of visits)
• Usage data (features used, actions taken within the Service)
• Cookies and similar tracking technologies (see Section 6)

1.3 Information from Third Parties. We may receive information about you from third-party services we use, including Supabase (authentication), Stripe (payment processing), and Resend (email delivery).

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service
• Process payments and manage subscriptions
• Send transactional emails (account invitations, password resets, billing notifications)
• Send service announcements, updates, and feedback requests
• Respond to your enquiries and provide customer support
• Monitor and analyse usage to improve the Service
• Detect, prevent, and address fraud, security incidents, and abuse
• Comply with applicable legal obligations
• Enforce our Terms of Service

3. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

Service Providers. We share information with trusted third-party service providers who assist us in operating the Service, including Supabase, Stripe, and Resend. These providers are contractually obligated to protect your information and may only use it for the purposes for which it was disclosed.

Trainer–Player Relationship. When a Trainer adds a Player to the Service, the Trainer can view that Player's profile, training data, and session records. Players consent to this sharing by accepting the invitation to join the Service.

Legal Requirements. We may disclose your information if required to do so by law or in response to valid legal process (e.g. a court order or subpoena).

Business Transfers. In the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you via email or prominent notice on the Service before your information is transferred and becomes subject to a different privacy policy.

Protection of Rights. We may disclose your information where we believe in good faith that such disclosure is necessary to protect the rights, property, or safety of PlayerRX, our users, or the public.

4. Data Retention & Deletion

We retain your personal information for as long as your account is active or as needed to provide the Service. If you cancel your subscription or request deletion of your account, we will retain your data for 90 days before permanent deletion, after which it cannot be recovered. We may retain certain information for longer periods where required by law or for legitimate business purposes (e.g. billing records).

Account Deletion Requests. You may request deletion of your account and personal data at any time by emailing support@playerrx.com with the subject line "Delete My Account." We will process your request within 30 days and confirm once deletion is complete. Note that deletion is permanent and cannot be undone.

If you are using our iOS or Android application, you may also submit a deletion request by navigating to your Profile within the app and selecting "Request Account Deletion," or by emailing the address above.

5. Data Security

We implement industry-standard technical and organisational measures to protect your personal information against unauthorised access, loss, destruction, or alteration. These measures include encrypted data transmission (TLS/HTTPS), secure authentication (Supabase), and access controls. However, no method of transmission over the internet or method of electronic storage is 100% secure. We cannot guarantee absolute security.

In the event of a data breach that poses a high risk to your rights and freedoms, we will notify affected users and, where required, relevant regulatory authorities within the timeframes required by applicable law.

6. Cookies and Tracking

We use cookies and similar technologies to authenticate sessions, maintain your login state, and analyse usage patterns. We use only the cookies necessary to operate the Service. We do not use third-party advertising cookies.

You can control cookies through your browser settings. Disabling cookies may affect your ability to use certain features of the Service.

7. Children's Privacy

The Service is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13 without parental consent, we will take steps to delete that information promptly.

Players between 13 and 17 years of age may only use the Service under the supervision and with the consent of a parent or legal guardian. Trainers are responsible for ensuring they have obtained appropriate consent before adding minors to the Service.

8. Your Rights — United States (CCPA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):

• Right to Know: You may request disclosure of the categories and specific pieces of personal information we have collected about you.
• Right to Delete: You may request deletion of your personal information, subject to certain exceptions.
• Right to Opt-Out: We do not sell personal information, so there is nothing to opt out of.
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.

To exercise these rights, contact us at support@playerrx.com. We will respond to verified requests within 45 days.

9. Your Rights — European Users (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have the following rights under the General Data Protection Regulation (GDPR) and applicable national data protection laws:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure ("Right to Be Forgotten"): Request deletion of your personal data in certain circumstances.
• Right to Restriction of Processing: Request that we restrict processing of your data in certain circumstances.
• Right to Data Portability: Request a copy of your data in a structured, machine-readable format.
• Right to Object: Object to processing based on legitimate interests or for direct marketing.
• Rights Related to Automated Decision-Making: We do not make decisions based solely on automated processing that produce significant legal or similar effects.

Legal Basis for Processing. We process your personal data on the following legal bases: (a) performance of a contract (to provide the Service); (b) legitimate interests (to operate, improve, and secure the Service); (c) legal obligation; and (d) your consent where required.

Data Transfers. Your information may be transferred to and processed in the United States or other countries outside the EEA. Where we transfer data outside the EEA, we rely on appropriate safeguards including Standard Contractual Clauses approved by the European Commission.

To exercise your GDPR rights, contact us at support@playerrx.com. You also have the right to lodge a complaint with your local data protection authority.

10. Marketing Communications

We may send you emails regarding service updates, new features, and feedback requests. You can opt out of non-transactional emails at any time by clicking the unsubscribe link in any email or contacting us at support@playerrx.com. You cannot opt out of transactional emails necessary for the operation of your account (e.g. billing receipts, password resets).

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice within the Service. Your continued use of the Service after the effective date of the updated policy constitutes your acceptance of the changes.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at: support@playerrx.com