Privacy Policy

1. Who we are

SPORTR is a sports coaching platform operated by SPORTR ("we", "us", "our"). We connect coaches and members for sports coaching sessions. We operate through our website sportrapp.com and our mobile app. For any privacy-related queries, contact us at hello@sportrapp.com.

2. What information we collect

We collect the following information when you use SPORTR:

• Account information: name, email address, phone number, and profile photo
• Google account information: if you sign up or log in with Google, we receive your name and email address
• Apple account information: if you sign up or log in with Apple, we receive your name and email address. If you choose Apple's Hide My Email feature, we receive a private relay email address
• Google Calendar data: if you connect Google Calendar, we access your calendar to create and manage booking events
• Coach profile information: sport category, skills, experience, training locations, and pricing
• Health and fitness information: we may collect information regarding your physical health, fitness levels, or injuries if you choose to share this with a coach to tailor your training. We process this special category data only with your explicit consent, which you provide by voluntarily sharing such details in your profile or chat messages. You may withdraw this consent at any time by contacting us or removing the data from your profile
• Booking information: session dates, times, locations, and notes
• Payment information: payments are processed by Stripe. We store only the card type, last four digits and expiry date; full card details are held by Stripe. We also store booking amounts and transaction references
• Communications: messages sent through our in-app chat feature
• Location data: with your permission, we collect your device's location when you sign up, to confirm that SPORTR is available in your area. If you join our waitlist from outside our current service area, we store your approximate location (including coordinates) so we understand where to expand next. You can decline location access, though this may affect your ability to sign up while we operate in limited areas
• Camera and microphone: with your permission, we access your device's camera and microphone during intro video calls between coaches and members
• Photos: with your permission, we access your photo library so you can upload a profile photo, gallery images, or session posters
• Device information: we collect a device push notification token to send you notifications about bookings, messages, and requests
• Usage data: how you interact with our platform

3. How we use your information and our lawful basis

We process your information under the following lawful bases:

• Performance of a contract: to create and manage your account; process bookings and payments; send booking confirmations and reminders; create calendar invites; and enable in-app chat and video calls
• Legitimate interests: to confirm SPORTR is available in your area and plan expansion; improve our platform; and send push notifications
• Consent: to process location data, and access your camera, microphone, and photos
• Legal obligation: to comply with legal requirements

We use your information to:

• Create and manage your account
• Process bookings and payments between coaches and members
• Send booking confirmations, reminders, and notifications by email
• Create calendar invites for confirmed sessions
• Enable in-app chat between coaches and members for confirmed bookings
• Confirm SPORTR is available in your area and, where it is not, record interest so we can plan our expansion
• Send you push notifications about bookings, messages, and requests
• Enable video calls for intro sessions
• Improve our platform and services
• Comply with legal obligations

4. Automated processing and chat monitoring

We use automated systems to monitor in-app chat to ensure platform security and prevent off-platform transactions. We also sort and filter coaches by the sport you choose and, with your permission, your approximate location, to help you find relevant coaches nearby. We do not build a profile of you or use automated preference-based recommendations. These processes are designed to enhance your experience and protect the community; they do not constitute automated decision-making that produces legal effects or similarly significant effects on you as defined under Article 22 of the UK GDPR.

Messages sent through our in-app chat are monitored to enforce our platform rules. Our automated system blocks messages containing personal contact information including phone numbers, email addresses, and social media handles. SPORTR staff may review chat messages where there is a suspected breach of our terms of service.

5. How we share your information

We share your information with:

• Stripe: for payment processing. Stripe's privacy policy is available at stripe.com/privacy
• Daily.co: for embedded video calls during intro sessions. Daily.co's privacy policy is available at daily.co/privacy
• Google: if you connect Google Calendar or sign in with Google, and to send you transactional emails such as booking confirmations, reminders, and password resets (via Gmail). Google's privacy policy is available at policies.google.com/privacy
• Apple: if you sign in with Apple. Apple's privacy policy is available at apple.com/legal/privacy
• Supabase: for securely hosting our database, which stores your account, booking, and message data. Supabase's privacy policy is available at supabase.com/privacy
• Amazon Web Services (AWS): for storing photos and videos you upload, such as profile and gallery media. AWS's privacy notice is available at aws.amazon.com/privacy
• Vercel: for hosting our platform and delivering it to you. Vercel's privacy policy is available at vercel.com/legal/privacy-policy
• Other users: your coach profile (name, photo, sport, location, bio) is visible to members on our platform. Your name is visible to the coach or member you are booked with

We do not sell your personal data to third parties.

5.1 International transfers

We may transfer your personal data to service providers located outside the UK, including the USA. To ensure your data is protected, we only transfer data to countries with a UK Government adequacy decision, or we implement appropriate safeguards such as the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses. For certain US providers, we may also rely on the UK Extension to the EU-US Data Privacy Framework where the recipient is appropriately certified.

6. Data retention

We retain your account data for as long as your account is active. If you delete your account in the app, your personal data is deleted or anonymised straight away; if you ask us by email or through sportrapp.com/delete-account, we do the same within 30 days of your request. The full list of what is deleted and kept is on that page.

After deletion we keep: booking and payment records for up to 7 years for legal and financial compliance purposes, no longer linked to your name or contact details; safety reports and blocks involving you, shown as "Deleted User"; and a one-way hash of your email address and phone number for 3 years, used only to prevent abuse of new-member offers. Separately, password-reset codes are deleted after 1 day, signed-out app sessions after 30 days, and friend invites that weren't taken up after 90 days.

7. Your rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict the processing of your data
• Data portability
• Withdraw consent at any time where we rely on consent to process your data

To exercise any of these rights, contact us at hello@sportrapp.com. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).

8. Cookies

We use essential cookies to keep you logged in and maintain your session. We do not use advertising or tracking cookies.

9. Security

We use industry-standard security measures to protect your data. Payments are handled by Stripe which is PCI DSS compliant. Passwords are encrypted and never stored in plain text.

10. Children

SPORTR is not intended for users under the age of 18. We do not knowingly collect data from children.

11. Changes to this policy

We may update this privacy policy from time to time. We will notify you of significant changes by email or by a notice on our website.

12. Contact us

For any privacy-related questions or to exercise your rights, contact us at hello@sportrapp.com.