Privacy Policy

1. Information We Collect

1.1 Information You Provide Directly. We collect information you provide when you create an account, subscribe, or use the Service, including:

• Name and email address
• Payment information (processed securely by Stripe — we do not store card details)
• Profile information (e.g. profile photo, position, training notes)
• Player data entered by Trainers (names, emails, training observations, session records)
• Communications you send to us

1.2 Information Collected Automatically. When you use the Service, we may automatically collect:

• Device information (device type, operating system, unique device identifiers)
• Log data (IP address, browser type, pages visited, time and date of visits)
• Usage data (features used, actions taken within the Service)
• Cookies, pixels, and similar tracking technologies, including online identifiers such as the Meta (Facebook) _fbp and _fbc cookies, referral source, and events such as starting sign-up or completing a purchase (see Section 6)

1.3 Information from Third Parties. We may receive information about you from third-party services we use, including Supabase (authentication), Stripe (payment processing), and Resend (email delivery).

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service
• Process payments and manage subscriptions
• Send transactional emails (account invitations, password resets, billing notifications)
• Send service announcements, updates, and feedback requests
• Respond to your enquiries and provide customer support
• Monitor and analyse usage to improve the Service
• Measure the performance of our advertising and track conversions (for example, on our public marketing and sign-up pages)
• Detect, prevent, and address fraud, security incidents, and abuse
• Comply with applicable legal obligations
• Enforce our Terms of Service

3. How We Share Your Information

We do not sell your personal information for money. We may share your information in the following circumstances:

Service Providers. We share information with trusted third-party service providers who assist us in operating the Service, including Supabase, Stripe, and Resend. These providers are contractually obligated to protect your information and may only use it for the purposes for which it was disclosed.

Advertising and Analytics Partners. On our public marketing and sign-up pages (not within the Trainer dashboard or the Player portal), we share limited information with Meta Platforms, Inc. (Facebook) to measure advertising performance and conversions. This may include page views, device and browser information, IP address, the _fbp and _fbc cookies, referral source, events such as sign-up or purchase, and a hashed (irreversible) version of your email address where available. Under some U.S. state privacy laws, this type of disclosure for cross-context behavioural advertising is considered "sharing." See Section 6 and Section 8 for details and your choices.

Trainer–Player Relationship. When a Trainer adds a Player to the Service, the Trainer can view that Player's profile, training data, and session records. Players consent to this sharing by accepting the invitation to join the Service.

Legal Requirements. We may disclose your information if required to do so by law or in response to valid legal process (e.g. a court order or subpoena).

Business Transfers. In the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you via email or prominent notice on the Service before your information is transferred and becomes subject to a different privacy policy.

Protection of Rights. We may disclose your information where we believe in good faith that such disclosure is necessary to protect the rights, property, or safety of PlayerRX, our users, or the public.

4. Data Retention & Deletion

We retain your personal information for as long as your account is active or as needed to provide the Service. If you cancel your subscription or request deletion of your account, we will retain your data for 90 days before permanent deletion, after which it cannot be recovered. We may retain certain information for longer periods where required by law or for legitimate business purposes (e.g. billing records).

Account Deletion Requests. You may request deletion of your account and personal data at any time by emailing support@playerrx.com with the subject line "Delete My Account." We will process your request within 30 days and confirm once deletion is complete. Note that deletion is permanent and cannot be undone.

If you are using our iOS or Android application, you may also submit a deletion request by navigating to your Profile within the app and selecting "Request Account Deletion," or by emailing the address above.

5. Data Security

We implement industry-standard technical and organisational measures to protect your personal information against unauthorised access, loss, destruction, or alteration. These measures include encrypted data transmission (TLS/HTTPS), secure authentication (Supabase), and access controls. However, no method of transmission over the internet or method of electronic storage is 100% secure. We cannot guarantee absolute security.

In the event of a data breach that poses a high risk to your rights and freedoms, we will notify affected users and, where required, relevant regulatory authorities within the timeframes required by applicable law.

6. Cookies and Tracking

We use cookies and similar technologies to authenticate sessions, maintain your login state, and analyse usage patterns.

Advertising and conversion measurement. On our public marketing and sign-up pages (not within the Trainer dashboard or the Player portal), we also use the Meta (Facebook) Pixel and the Meta Conversions API to measure advertising performance and conversions. These technologies may set cookies such as _fbp and _fbc, and may collect your IP address, browser and user-agent information, page views, referral source, and actions such as starting sign-up or completing a purchase. Where available, we also send Meta a hashed (irreversible) version of your email address so it can match conversions. We do not place these advertising technologies on the Trainer dashboard or the Player portal.

You can control cookies through your browser settings, and you can use browser privacy controls, device-level tracking settings, or ad blockers to limit this tracking. You can also adjust ad personalisation in your Meta account settings. Disabling cookies may affect your ability to use certain features of the Service. See Section 8 for additional choices that may apply to California residents.

7. Children's Privacy

The Service is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13 without parental consent, we will take steps to delete that information promptly.

Players between 13 and 17 years of age may only use the Service under the supervision and with the consent of a parent or legal guardian. Trainers are responsible for ensuring they have obtained appropriate consent before adding minors to the Service.

8. Your Rights — United States (CCPA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):

• Right to Know: You may request disclosure of the categories and specific pieces of personal information we have collected about you.
• Right to Delete: You may request deletion of your personal information, subject to certain exceptions.
• Right to Opt-Out of Sharing: We do not sell your personal information for money. However, as described in Sections 3 and 6, we share limited information with Meta (Facebook) on our public marketing and sign-up pages to measure advertising and conversions, which may be considered "sharing" for cross-context behavioural advertising under California law. You can limit or opt out of this sharing by using your browser's privacy and cookie controls, device-level tracking settings, or an ad blocker to block these technologies, and by adjusting ad personalisation in your Meta account settings. You may also contact us at support@playerrx.com with any privacy request.
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.

To exercise these rights, contact us at support@playerrx.com. We will respond to verified requests within 45 days.

9. Your Rights — European Users (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have the following rights under the General Data Protection Regulation (GDPR) and applicable national data protection laws:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure ("Right to Be Forgotten"): Request deletion of your personal data in certain circumstances.
• Right to Restriction of Processing: Request that we restrict processing of your data in certain circumstances.
• Right to Data Portability: Request a copy of your data in a structured, machine-readable format.
• Right to Object: Object to processing based on legitimate interests or for direct marketing.
• Rights Related to Automated Decision-Making: We do not make decisions based solely on automated processing that produce significant legal or similar effects.

Legal Basis for Processing. We process your personal data on the following legal bases: (a) performance of a contract (to provide the Service); (b) legitimate interests (to operate, improve, and secure the Service); (c) legal obligation; and (d) your consent where required.

Data Transfers. Your information may be transferred to and processed in the United States or other countries outside the EEA. Where we transfer data outside the EEA, we rely on appropriate safeguards including Standard Contractual Clauses approved by the European Commission.

To exercise your GDPR rights, contact us at support@playerrx.com. You also have the right to lodge a complaint with your local data protection authority.

10. Marketing Communications

We may send you emails regarding service updates, new features, and feedback requests. You can opt out of non-transactional emails at any time by clicking the unsubscribe link in any email or contacting us at support@playerrx.com. You cannot opt out of transactional emails necessary for the operation of your account (e.g. billing receipts, password resets).

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice within the Service. Your continued use of the Service after the effective date of the updated policy constitutes your acceptance of the changes.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at: support@playerrx.com