Privacy Policy
Last updated: [Confirm: date]
Introduction
Metric Athlete is operated by Quantum Leap Technologies (Pty) Ltd, a company registered in South Africa [Confirm: registration number]. This policy explains how we collect, use, share and protect information when you use our pods, apps, website and related services (the Service).
1. Information we collect
We collect the following information to provide and improve the Service.
Personal information
- Name and surname
- Email address
- Phone number
- Date of birth
- Profile photograph (optional)
Athletic performance data
- GPS position and motion data recorded by the pod during sessions
- Movement metrics such as speed, distance and acceleration
- Session duration and intensity
- Team and player assignments
- Performance analytics and statistics
Health and injury information
- Injury descriptions and return-to-play progress entered by coaches or staff
- Load and risk indicators calculated from session data
Device information
- Device type and operating system
- Unique device identifiers
- App version and usage statistics
- Push notification tokens
Account information
- Login credentials, handled by our authentication provider
- Subscription and billing information
- Communication preferences
Website information
- Page visit statistics from our website analytics
- Questions you type into the website chat assistant
- Details you send us when you contact us
2. How we use your information
We use information for these purposes.
Providing the Service
- GPS performance tracking and analytics
- Team management and player monitoring
- Calculating performance metrics and the Acute:Chronic Workload Ratio
- Generating performance reports and insights
Communication
- Sending service updates and notifications
- Responding to questions and support requests
- Sending promotional messages, with your consent
Improvement
- Understanding usage so we can improve the Service
- Developing new features
Legal compliance
- Meeting legal obligations
- Protecting our rights and preventing fraud
- Enforcing our Terms & Conditions
3. Storage, security and retention
We protect your data with technical and organisational safeguards.
Storage
- Data is stored on Amazon Web Services [Confirm: Africa (Cape Town) region for all production data]
- Sign-in is handled by AWS Cognito
Security
- Data is encrypted in transit
- Sensitive data is encrypted at rest
- Access controls limit who can see data
- Passwords are never stored in plain text
Retention
- We keep account data while your account is active
- We keep performance data for analytics while the account or team that owns it is active
- When you remove your account, we remove your login and personal information, and the personal information of players only you manage
- We keep team and session statistics, GPS and motion data in anonymised form after an account is removed, no longer tied to your name
- We keep security, audit and email delivery records to protect the Service and meet legal obligations
- [Confirm: backups are purged within 90 days of deletion]
4. Sharing and disclosure
We do not sell your personal information. We share it only in these circumstances.
Within your team
- Coaches and authorised team members can view player and team data
- People you invite or authorise can see what you share with them
Service providers
- Amazon Web Services for hosting, sign-in, storage and email
- Google Firebase for app analytics and push notifications
- Mapbox for maps and position heat maps
- Vercel for website hosting and analytics
- [Confirm: the provider behind the website chat assistant]
Legal requirements
- To meet legal obligations
- In response to lawful requests from authorities
- To protect our rights and safety
Business transfers
- If we merge, are acquired or sell assets, we will tell users about any change of ownership
5. Your rights
Under the Protection of Personal Information Act (POPIA) and other applicable laws, you can:
Access and correction
- Ask for a copy of your personal data
- Export your performance data
- Correct inaccurate information
Deletion and objection
- Remove your account in the app, or ask us to remove it. See metricathlete.com/delete-account for what is removed and what is kept in anonymised form
- Object to certain processing or ask us to restrict it
- Withdraw consent at any time
Communication preferences
- Opt out of promotional messages
- Manage push notifications and email preferences
Complaints
- Complain to the Information Regulator (South Africa) if you are unhappy with how we handle your data
6. Location data
Pods record GPS position during sessions. We use this to calculate distance, speed and movement metrics, and to create heat maps and position analysis. Location data is stored with the session it belongs to.
Device location
- [Confirm: why the app asks for device location, and whether it runs in the background]
- You can refuse device location in your device settings, though some features may not work
7. Children
The Service is intended for coaches and sports professionals. Coaches can add players who are under 18.
Players under 18
- A parent or guardian must consent before a child's information is added
- Coaches and their organisations are responsible for getting this consent
- A parent or guardian can ask us to correct or delete their child's information
8. International transfers
Some service providers process data outside South Africa. When they do, we use appropriate safeguards as required by applicable data protection laws.
9. Changes to this policy
We may update this policy. We will tell you about material changes by email or in the app, and update the date at the top of this page.
10. Contact us
Quantum Leap Technologies (Pty) Ltd, South Africa. We aim to respond within 5 business days.
Contact details
- Privacy: privacy@metricathlete.com [Confirm: mailbox is live]
- Support: support@metricathlete.com [Confirm: mailbox is live]
- Information Officer: [Confirm: name and contact details]