Privacy Policy

At Athlō, privacy isn't just a legal requirement-it's core to our mission. We believe athletes should own their data, control who sees it, and never have it sold or exploited. This policy explains how we handle your information.

Our Core Privacy Commitments

• Athletes own their data. You control it, you can export it, you can delete it.
• We never sell your data. Not to scouts, colleges, brands, or anyone else.
• We don't use your data to train AI models. Your information helps you-not our algorithms.
• You control who sees what. Your Support Circle access is entirely in your hands.

Information We Collect

Information You Provide

• Account information: Name, email address, date of birth, and account credentials.
• Profile information: Sport, position, team affiliations, and profile photo (optional).
• Wellness data: Sleep quality, energy levels, mood, soreness, and other wellness check-in responses.
• Training data: Workout logs, training plans, exercise completion, and performance notes.
• Health information: Injury reports, recovery status, and movement test results (provided voluntarily).
• Communications: Messages you send us through support channels.

Information Collected Automatically

• Usage data: How you interact with the platform (pages visited, features used).
• Device information: Browser type, operating system, and device identifiers.
• Log data: IP address, access times, and referring URLs.

How We Use Your Information

• To provide the service: Displaying your data, generating insights, and enabling your Support Circle.
• To improve the platform: Understanding how features are used to make them better.
• To communicate with you: Service updates, security alerts, and support responses.
• To ensure safety: Detecting fraud, abuse, and security threats.
• For optional AI features: If enabled, to provide personalized insights based on your data (see AI section below).

How We Share Your Information

With Your Support Circle

You choose who to invite to your Support Circle (coaches, parents, physios, etc.) and what data each person can see. You can modify or revoke access at any time.

With Service Providers

We use trusted third parties for hosting, analytics, and email delivery. These providers are contractually bound to protect your data and use it only as we direct.

We Never Share

• With scouts, colleges, or recruiters (unless you explicitly choose to)
• With advertisers or marketing companies
• With data brokers or resellers
• For purposes of building marketing profiles

Legal Requirements

We may disclose information if required by law, court order, or to protect the safety of our users or the public.

AI Features and Your Privacy

Our optional AI features analyze your data to provide personalized insights. Here's how we protect your privacy:

• AI is optional: You can disable AI features entirely and still use the full platform.
• No model training: Your data is never used to train AI models.
• Privacy scanning: Personal identifiers are stripped before AI processing.
• No data retention by AI providers: We use AI providers that don't retain your data.
• Transparent suggestions: You can see what data informed any AI suggestion.

Children's Privacy

We take the privacy of young athletes seriously:

• Athletes under 13: Require a linked parent/guardian account. Parents must consent to data collection and can access all data.
• Athletes 13-18: Can create accounts independently but can link parent accounts for oversight.
• PIPEDA and COPPA compliance: We comply with Canadian and US children's privacy regulations.
• Parental controls: Parents can view data, manage sharing permissions, and delete accounts for children under 13.

Data Retention and Deletion

• Your data stays as long as you want it: We retain your data for as long as your account is active.
• Export anytime: Download all your data in standard formats (CSV, JSON, PDF) at any time.
• Delete anytime: Request account deletion and we'll remove your data within 30 days.
• Some data retained for legal purposes: We may retain certain records as required by law.

Data Security

We implement industry-standard security measures:

• Encryption in transit (TLS) and at rest
• Regular security assessments
• Access controls and authentication
• Secure data centers with physical protections
• Employee training on data protection

Your Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal data.
• Correction: Update or correct inaccurate data.
• Deletion: Request deletion of your data.
• Portability: Export your data in a machine-readable format.
• Restriction: Limit how we process your data.
• Objection: Object to certain types of processing.

To exercise these rights, contact us at [email protected].

Cookies and Tracking

We use cookies and similar technologies for:

• Essential cookies: Required for the platform to function (authentication, security).
• Analytics cookies: Help us understand how the platform is used (can be disabled).
• No advertising cookies: We don't use cookies for advertising or tracking across sites.

International Data Transfers

Athlō is based in Canada. If you're accessing the platform from outside Canada, your data may be transferred to and processed in Canada, which has privacy laws that may differ from your jurisdiction. By using the platform, you consent to this transfer.

Changes to This Policy

We may update this policy from time to time. We'll notify you of significant changes via email or in-app notification. Continued use of the platform after changes constitutes acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy or our data practices:

• Email: [email protected]
• Mail: Athlō, [Address], Canada