Privacy Policy

1. Information We Collect

We collect several types of information from and about users of the Platform:

1.1 Personal Identification Information

• Full name, email address, phone number, and mailing address
• Date of birth or age (to verify eligibility and for age-appropriate content)
• Profile photographs
• Account credentials (passwords are stored in hashed form; we never store plaintext passwords)
• Third-party authentication identifiers (e.g., Google OAuth identifiers)

1.2 Activity Profile and Performance Data

• Skill levels, specializations, and activity-specific attributes
• Performance statistics, scores, session records, and progress metrics
• Training plans, drill completion records, and coaching notes
• Leaderboard rankings and achievement data

1.3 Media Content

• Videos and photographs of training sessions, techniques, and performances
• AI-analyzed media and generated annotations or feedback
• User-uploaded profile images and other media content

1.4 Coach and Club Owner Information

• Professional qualifications, certifications, and coaching experience
• Club or academy names, locations, and facility details
• Payment and banking information (processed and stored by Stripe; we do not store full financial account details)

1.5 Technical and Usage Information

• IP address, browser type and version, operating system, and device information
• Pages visited, features used, time spent on the Platform, and navigation patterns
• Referring URLs and search terms used to reach the Platform
• Error logs and diagnostic data

2. How We Collect Information

We collect information through the following methods:

2.1 Directly From You

When you create an account, complete your profile, upload content, make payments, communicate with coaches or other users, or contact our support team.

2.2 Automatically Through Usage

When you access or use the Platform, we automatically collect certain technical and usage information through cookies, server logs, and similar technologies. See Section 11 (Cookies and Tracking) for more details.

2.3 From Third-Party Sources

When you authenticate using third-party services (such as Google OAuth), we receive certain profile information from those services in accordance with their privacy policies and your privacy settings with them. We may also receive information from payment processors (Stripe) regarding transaction status.

2.4 Through AI Processing

When you use AI-powered features, your submitted content (such as videos and performance data) is processed by our AI systems to generate analyses, recommendations, and insights. See Section 5 (AI and Automated Processing) for more details.

3. How We Use Information

We use the information we collect for the following purposes:

• Providing and operating the Platform: Creating and managing accounts, matching coaches with students, facilitating sessions, and enabling communication between users
• Personalizing your experience: Tailoring training plans, drill recommendations, and content to your skill level, preferences, and goals
• AI analysis and recommendations: Processing videos, performance data, and skill assessments to generate AI-powered coaching insights, technique analysis, and training recommendations
• Processing payments: Facilitating transactions between coaches, club owners, and paying users through our payment processor
• Communication: Sending account-related notifications, session reminders, progress updates, and responding to support inquiries
• Improving the Platform: Analyzing usage patterns and feedback to improve features, content, performance, and user experience
• Safety and security: Detecting and preventing fraud, abuse, and unauthorized access; protecting the safety of our users, particularly minors
• Legal compliance: Complying with applicable laws, regulations, legal processes, or enforceable governmental requests
• Marketing and promotions: Sending promotional communications about new features, services, or events (with your consent, where required)

4. Information About Minors (COPPA Compliance)

Prodemy takes the protection of children's privacy extremely seriously. We comply with the Children's Online Privacy Protection Act (COPPA) and all applicable child protection laws.

4.1 Parental Consent

We do not knowingly collect personal information from children under the age of 13 without verifiable parental consent. Before any personal information is collected from a child under 13, we require the child's parent or legal guardian to provide consent through our parental consent mechanism. Parents must create and manage accounts on behalf of children under 13.

4.2 Information Collected About Minors

For minor users, we may collect: first name (or nickname), age or date of birth, skill levels and performance data, training session records, and videos or photographs uploaded by their parent, guardian, or authorized coach. We limit the collection of information from minors to what is reasonably necessary for participation in the Platform.

4.3 Parental Rights

Parents and legal guardians have the right to:

• Review the personal information we have collected about their child
• Request correction or deletion of their child's personal information
• Refuse to permit further collection or use of their child's personal information
• Manage their child's account settings, content, and privacy preferences
• Request that we stop sharing their child's information with third parties

To exercise any of these rights, parents may contact us at privacy@prodemy.app.

4.4 Media Depicting Minors

Videos and photographs of minors are subject to enhanced privacy protections. Such media may only be uploaded by a parent, legal guardian, or authorized coach with explicit parental consent. Media of minors is not publicly accessible and is shared only with authorized users (the minor's coaches, parents, and club administrators). We do not use media of minors for marketing or promotional purposes without explicit written parental consent.

5. AI and Automated Processing

Prodemy uses artificial intelligence and automated processing to enhance the coaching experience. This includes:

• Video analysis: AI algorithms may analyze uploaded videos to assess techniques, identify areas for improvement, and provide feedback
• Performance recommendations: Automated systems may analyze your performance data and skill levels to recommend training plans, drills, and exercises
• Skill assessments: AI may process performance statistics and session data to generate skill level assessments and progress reports
• Coach matching: Automated processes may be used to recommend coaches based on your location, skill level, goals, and preferences

AI-generated analyses and recommendations are provided for informational and educational purposes only and are not a substitute for professional coaching judgment. You should always consult with a qualified coach before making significant changes to your training regimen.

You may request information about the logic involved in automated decisions that affect you, and you may contest decisions based solely on automated processing by contacting us at privacy@prodemy.app.

6. Third-Party Services

We use the following third-party services to operate the Platform. Each of these services has its own privacy policy governing the data they process:

7. Data Storage and Security

We implement commercially reasonable technical, administrative, and physical security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit using TLS/SSL protocols
• Encryption of sensitive data at rest
• Hashing of passwords using industry-standard algorithms
• Role-based access controls limiting data access to authorized personnel
• Regular security reviews and vulnerability assessments
• Secure authentication mechanisms, including OAuth 2.0 for third-party sign-in

While we strive to use commercially reasonable means to protect your personal information, no method of transmission over the Internet or method of electronic storage is 100% secure. We cannot guarantee the absolute security of your information.

Your data is primarily stored on servers located in the United States. If you access the Platform from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States.

8. Data Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

8.1 With Other Platform Users

Certain information is shared between users as necessary for the Platform to function. For example, coaches may see student profiles, skill levels, and performance data for students they are coaching. Parents may see their child's data. Club owners may see information about coaches and students within their club. Profile information you make visible in your settings may be seen by other users.

8.2 With Service Providers

We share information with third-party service providers who perform services on our behalf (such as Stripe for payments, Cloudinary for media storage, and Vercel for hosting). These providers are contractually obligated to use your information only for the purposes of providing their services to us and in accordance with applicable privacy laws.

8.3 For Legal Reasons

We may disclose your information if required to do so by law, or in the good-faith belief that such action is necessary to: (a) comply with a legal obligation, court order, or legal process; (b) protect and defend the rights or property of Prodemy; (c) prevent or investigate possible wrongdoing in connection with the Platform; (d) protect the personal safety of users of the Platform or the public; or (e) protect against legal liability.

8.4 Business Transfers

If Prodemy is involved in a merger, acquisition, reorganization, sale of assets, or bankruptcy, your personal information may be transferred as part of that transaction. We will notify you of any such change in ownership or control of your personal information.

8.5 With Your Consent

We may share your information for other purposes with your explicit consent.

9. User Rights

Depending on your location and applicable laws, you may have the following rights regarding your personal information:

• Right of access: You may request a copy of the personal information we hold about you
• Right to correction: You may request that we correct inaccurate or incomplete personal information
• Right to deletion: You may request that we delete your personal information, subject to certain legal exceptions
• Right to data portability: You may request a copy of your personal information in a structured, commonly used, machine-readable format
• Right to restrict processing: You may request that we limit how we use your personal information
• Right to object: You may object to processing of your personal information for certain purposes, including direct marketing
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time

To exercise any of these rights, please contact us at privacy@prodemy.app. We will respond to your request within thirty (30) days, or as required by applicable law. We may ask you to verify your identity before processing your request.

10. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with our services. We may also retain and use your information as necessary to:

• Comply with our legal obligations (e.g., tax and accounting requirements)
• Resolve disputes and enforce our agreements
• Maintain security and prevent fraud
• Fulfill any other purpose for which the information was collected, as described in this Privacy Policy

When you delete your account, we will delete or anonymize your personal information within a reasonable time period, except where retention is required by law. Certain data, such as anonymized usage analytics, may be retained indefinitely for Platform improvement purposes.

For minor users, we will promptly delete personal information upon receiving a verified request from a parent or legal guardian, except where retention is required by law.

11. Cookies and Tracking

We use cookies and similar tracking technologies to collect and store certain information when you use the Platform. These technologies include:

11.1 Essential Cookies

These cookies are necessary for the Platform to function properly. They enable core features such as authentication, session management, and security. You cannot opt out of essential cookies.

11.2 Functional Cookies

These cookies allow us to remember your preferences and settings, such as language preferences and display options, to provide a more personalized experience.

11.3 Analytics Cookies

These cookies help us understand how users interact with the Platform by collecting information about pages visited, features used, and navigation patterns. This data is used to improve the Platform and user experience.

Most web browsers allow you to control cookies through their settings. You may choose to block or delete cookies, but doing so may affect your ability to use certain features of the Platform.

12. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), including:

• Right to know: You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources from which we collected your information, the business or commercial purpose for collecting your information, and the categories of third parties with whom we share your information
• Right to delete: You have the right to request deletion of your personal information that we have collected, subject to certain exceptions
• Right to opt out of sale: We do not sell personal information. However, you have the right to opt out of the sale of your personal information should our practices change in the future
• Right to non-discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights
• Right to correct: You have the right to request correction of inaccurate personal information
• Right to limit use of sensitive personal information: You have the right to limit our use and disclosure of your sensitive personal information to purposes necessary to provide the services you have requested

To exercise your California privacy rights, please contact us at privacy@prodemy.app or use our online request form. We will verify your identity before processing your request and respond within 45 days as required by law.

13. International Users

The Platform is primarily intended for use in the United States. If you access the Platform from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country of residence.

By using the Platform, you consent to the transfer of your information to the United States and to the processing of your information in accordance with this Privacy Policy. If you do not consent to this transfer, please do not use the Platform.

If you are located in the European Economic Area (EEA), United Kingdom, or other jurisdiction with data protection laws, you may have additional rights. Please contact us to learn more about how we handle data subject requests from your jurisdiction.

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make changes, we will update the "Last Updated" date at the top of this page.

If we make material changes to this Privacy Policy, we will notify you by: (a) posting a prominent notice on the Platform; (b) sending an email to the address associated with your account; or (c) providing an in-app notification. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

Your continued use of the Platform after the posting of changes constitutes your acceptance of such changes. If you do not agree with the updated Privacy Policy, you must stop using the Platform and may request account deletion.

15. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: