Privacy Policy

1. Who We Are

PerformX ("we", "us", "our") is a sports technology company providing AI-powered coaching and athlete management software. Our registered business contact is legal@performax.coach.

2. What We Collect

We only collect data that's genuinely needed to run the platform:

• Account data — your name, email address, and authentication credentials (stored securely via OAuth providers like Google).
• Profile data — sport, age, performance metrics, and goals you voluntarily provide.
• Training data — sessions, competitions, workloads, results, and coach notes you or your coach enter into the platform.
• Device & activity data — if you connect a wearable (Garmin, Strava, Apple Health), we receive the activity data you authorise that service to share.
• Usage data — standard server logs (IP address, pages visited, timestamps) used for security and debugging.
• Payment data — handled entirely by Stripe. We never see your raw card number.

3. How We Use Your Data

• Provide, maintain, and improve your personalised coaching portal.
• Generate AI-powered coaching insights and training recommendations.
• Send transactional emails (session reminders, subscription receipts, security alerts).
• Ensure platform security, detect fraud, and comply with legal obligations.
• Produce aggregate, anonymised analytics to improve the product (your individual data is never identifiable in these reports).

4. What We Don't Do

• We do not sell or rent your personal data to anyone. Ever.
• We do not serve targeted advertising or share data with ad networks.
• We do not use your personal training data to train third-party AI models without your explicit opt-in consent.
• We do not allow coaches to share athlete data outside their own squad without athlete consent.

5. Data Sharing

We share data only with the following categories of trusted service providers, under strict contractual obligations:

• AWS — cloud infrastructure and database hosting (ap-southeast-2 region, Australia).
• Amazon Bedrock — AI model inference (your data is not used to train foundation models).
• Stripe — subscription billing and payment processing.
• Google OAuth — authentication only; we receive your email and name, nothing more.

We may disclose data if required by law, court order, or to protect the safety of our users.

6. Data Retention

We keep your data as long as your account is active. If you delete your account, we remove your personal data within 30 days, except where we're legally required to retain it (e.g., billing records for tax purposes — kept for 7 years in Australia).

7. Your Rights

Depending on your jurisdiction, you have the right to:

• Access — request a copy of the data we hold about you.
• Correction — ask us to fix inaccurate data.
• Deletion — request that we delete your account and personal data.
• Portability — export your training data in a common format.
• Objection — opt out of specific processing activities.

To exercise any of these rights, email us at legal@performax.coach. We'll respond within 14 days.

8. Cookies & Tracking

We use a small number of essential cookies to keep you logged in and maintain your session. We do not use advertising or tracking cookies. For full details, see our Cookie Policy.

9. Security

We use industry-standard measures including encryption in transit (TLS 1.2+), encryption at rest, strict access controls, and regular security reviews. No system is perfectly impenetrable — but we take this seriously and will notify you promptly if a breach affects your data.

10. Children's Privacy

PerformX is not directed at children under 13. We don't knowingly collect data from anyone under 13. If you believe a child has provided us data, please contact us immediately.

11. Changes to This Policy

We'll notify you by email or in-app banner if we make material changes to this policy. Continued use of PerformX after changes take effect constitutes your acceptance.

12. Contact

Questions? Concerns? Just want to chat about data ethics? Reach us at legal@performax.coach.