Legal

Privacy Policy

Last updated: May 2026

At leveldup, we take your privacy seriously — especially because our platform serves families and young athletes. This policy explains what information we collect, how we use it, and your rights regarding your data.

1. Information We Collect

We collect information you provide directly to us when creating an account, including your phone number (for parents) or email address (for gyms and coaches). We also collect information about your child athlete, including their name, birth year and month, sport, and competition level. We collect data about conditioning sessions logged within the app, including exercises completed, effort ratings, and session duration. We do not collect children's personal information directly — all accounts are created and managed by a parent or guardian.

2. How We Use Your Information

We use the information we collect to provide, maintain, and improve our services, generate personalized conditioning programs using AI, send progress reports to coaches at your request, send account-related communications such as trial reminders and receipts, and respond to your questions and support requests. We do not sell your personal information to third parties. We do not use your information for advertising purposes.

3. Children's Privacy (COPPA Notice)

leveldup is a platform for parents to manage training plans for their child athletes. We do not allow children under 13 to create accounts. All accounts are created and managed by parents or legal guardians (users must be 18+).

What we collect about children in your account
·Name or nickname
·Date of birth (month and year)
·Sport and competitive level
·Training activity (exercises completed, session logs, progress data)
·Any coach notes or program uploads you provide
What we do NOT collect
Photos of children (unless you upload a program photo — see below)
Location data
Device identifiers tied to child profiles
Behavioral data for advertising purposes
Photos and uploads

If you photograph a coach's paper program using the Upload feature, that image is processed by our AI to extract the program text, then deleted from our servers within 24 hours. We do not retain uploaded photos beyond program extraction.

Third parties who may receive child data
Anthropic (Claude API)AI plan generationSport, level, age, focus areas, coach notes
SupabaseDatabase & authAll account and athlete data (encrypted at rest)
VercelHostingNone (compute only)
ResendEmail deliveryParent email address only
StripePaymentsParent billing info only (no child data)

We do not sell, rent, or share child data with any third party for advertising, marketing, or analytics purposes beyond the above.

Parental rights
·Reviewall data we hold about your child (visit Account Settings → Athlete Profiles)
·Correctinaccurate information (edit athlete profile at any time)
·Deleteyour child's profile and all associated data (Account Settings → [Athlete Name] → Delete Profile)
·Revoke consentand close your account entirely (Account Settings → Delete Account)

To exercise these rights or ask questions, contact: privacy@leveldup.app

Data retention

We retain athlete data as long as your account is active. If you delete an athlete profile, all associated training plans, session logs, and progress data are permanently deleted within 30 days. If you close your account, all data is permanently deleted within 30 days.

4. Data Storage and Security

Your data is stored securely using Supabase (PostgreSQL) with row-level security policies that ensure you can only access your own data. Photos of coaching programs uploaded for digitization are deleted from our servers within 24 hours after processing. We use industry-standard encryption for data in transit and at rest. While we take reasonable measures to protect your information, no security system is impenetrable.

5. Third-Party Services

We use the following third-party services to operate leveldup: Supabase for database and authentication, Stripe for payment processing (we never store your payment card details), Anthropic's Claude API for AI program generation, and Resend for email delivery. Each of these services has their own privacy policy governing how they handle data.

6. Sharing Your Information

We do not sell or rent your personal information. We may share your information with third-party service providers who assist us in operating the platform, as described above. We may share progress reports with coaches only when you explicitly initiate that action within the app. We may disclose your information if required by law or to protect the rights and safety of our users.

7. Your Rights

You have the right to access the personal information we hold about you, correct inaccurate information, delete your account and associated data, export your data, and opt out of non-essential communications. To exercise any of these rights, contact us at privacy@leveldup.app. We will respond to requests within 30 days.

8. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of significant changes by email or through a notice in the app. Your continued use of leveldup after changes are posted constitutes your acceptance of the updated policy.

Questions about this policy? Contact us at privacy@leveldup.app