Privacy Policy

1. Introduction

PlayFast (“we,” “our,” or “us”) respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application, website, and hardware devices (collectively, the “Service”).

2. Information We Collect

Account Information

• Name, email address, and username
• Age and age bracket (for age-appropriate training)
• Athletic profile (position, level, goals)
• Optional: profile photo, phone number

Training Data

• Workout sessions (date, duration, rep counts)
• Sensor data from PlayFast hardware device
• Training progress and streaks
• Device information (app version, phone model)

Technical Data

• Device identifiers (for Bluetooth pairing)
• Usage analytics and crash reports
• IP address and general location (country/region)

3. How We Use Your Information

We use your information to:

• Provide and personalize the training experience
• Generate daily routines appropriate for your age and skill level
• Track your progress and maintain workout history
• Communicate with you about the Service
• Process payments and manage subscriptions
• Improve and develop new features

4. Opt-In Data Sharing

By default, your data is private. The following features require your explicit opt-in consent:

Leaderboard Participation

If you opt in, your username, profile photo, and rep counts may be visible to other users on leaderboards. You can opt out at any time in your profile settings.

ML Training Data

If you opt in, your anonymized training data may be used to improve our throw detection algorithms and training recommendations. This data is aggregated and cannot be used to identify you personally.

5. Children's Privacy (Under 13)

The Service is not intended for users under 13 years of age. We do not knowingly collect personal information from children under 13. If you are under 13, please do not use the Service or provide any personal information. If we learn that we have collected personal information from a child under 13 without verifiable parental consent, we will delete that information promptly.

6. Data Security

We implement appropriate technical and organizational measures to protect your data:

• Encrypted data transmission (HTTPS/TLS)
• Secure database with row-level security policies
• Authentication required for all data access
• Reasonable security practices and timely updates

While we strive to protect your data, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

7. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. You can request deletion of your account and associated data at any time.

• Account data: Retained until account deletion
• Training history: Retained until account deletion
• Sensor data: Retained for up to 2 years for service improvement
• Payment records: Retained as required by law (typically 7 years)

8. Your Rights

You have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your data
• Request a copy of your data in a portable format
• Opt out of optional data sharing at any time
• Withdraw consent for data processing

We will respond to requests to exercise these rights within two weeks.

9. Third-Party Services

We use the following third-party services:

• Supabase: Database and authentication
• Stripe: Payment processing
• Apple/Google: OAuth authentication (optional)

These services have their own privacy policies governing their use of your data. We are not responsible for the privacy practices of third-party services.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the “Last updated” date.

11. Contact Us

For privacy-related questions or to exercise your rights, contact us at:

Email: support@playfastlax.com