Privacy Policy

• Account data — email address, display name, authentication identifiers (including from Google sign-in if you use it), your role (rider, coach, or admin), and for coaches a brand name and optional logo.
• Athlete profile — the athlete's name, optional email, sport, stance, level, goals, optional gear details, and an evolving written athlete profile our engine maintains from past sessions.
• Ride videos — the video files you upload, plus file size and format metadata.
• Notes — the rider note attached to a submission, coach notes, change-request comments, and internal review notes such as a rejection reason.
• Reports — the delivered report file, marked-up frames extracted from your footage by our offline engine, any PDF version, and the share link token.
• Payment data — where payments are enabled, our payment provider processes your card. We receive only a transaction reference, amount, and status. We never see or store card numbers.
• Operational logs — basic technical logs (timestamps, IP address, error traces) needed to run and secure the service.

• To produce and deliver coaching reports for that athlete only, including referencing that athlete's own past sessions so reports build on each other.
• To run your account: authentication, roles, coach rosters, and session history.
• To send transactional email — submission received, footage rejected, report ready, and account or billing notices.
• To process payments and issue credits.
• To keep the service secure, debug faults, and comply with legal obligations.

• We do not use your footage, athlete profile, or reports to train AI models.
• We do not sell or rent your data.
• We do not use your footage or your name in marketing without asking you first and getting your explicit consent.
• We do not send marketing email unless you opt in; transactional email about your own sessions is not marketing.
• We do not share footage with other users, other coaches, or third parties beyond the service providers listed in section 7.

Videos and reports are stored in private storage buckets. Nothing is publicly listable or guessable by URL. Access is granted through short-lived signed links generated only for someone entitled to view that file.

Access is scoped by role, enforced at the database level:

• Riders see only their own athletes, sessions, videos, and reports.
• Coaches see only the students on their own roster and those students' sessions and reports — never another coach's roster.
• Admins (surfbaby staff operating the review queue) can access submissions in order to review footage and deliver reports.

Share links. A delivered report can be opened without signing in via an unguessable per-report link. That link is a secret: anyone who has it can view that one report. You can ask us to revoke a share link at any time and we will issue a new one or disable sharing for that report.

• Raw video files are deleted 30 days after your report is delivered (or 30 days after rejection, if the footage was unusable).
• Marked-up frames included in a report are kept with the report, because they are part of the deliverable.
• Reports, athlete profiles, and session history are retained for as long as your account is open, so later reports can reference earlier ones — until you ask us to delete them.
• Billing records are retained as long as required by tax and accounting law.
• Logs are kept for a short operational period and then discarded.

Email us and we will delete your account and associated data — athletes, sessions, videos, and reports — or export a copy of your data in a portable format. We will confirm your identity first and complete the request within 30 days.

You can also ask us to correct inaccurate data, restrict or object to particular processing, or withdraw a consent you previously gave. Coaches may request deletion for a student on their roster; the student may also request it directly.

Depending on where you live you may have additional statutory rights, including the right to complain to your local data protection authority.

We use a small number of third-party providers to run the service. They process data only on our instructions and under contract:

• Cloud hosting and application platform — runs the website and application.
• Managed database and file storage provider — stores accounts, athlete profiles, sessions, videos, and reports.
• Authentication provider — handles sign-in, including Google sign-in if you use it.
• Transactional email provider — delivers submission, rejection, and report-ready notifications.
• Payment processor — handles card payments where payments are enabled.

Report analysis is carried out by our own offline coaching engine. Your footage is not sent to third-party AI services.

Accounts are for adults. Footage of a rider under 18 may only be submitted where a parent or legal guardian has given consent, and the submitting coach or rider is responsible for having obtained that consent before uploading.

A guardian may contact us at any time to review or delete footage and reports concerning their child, and we will remove it. If we learn that footage of a minor was submitted without guardian consent, we delete it.

We operate internationally, and our providers may store or process data in countries other than your own, including the United States and the European Union. Where data leaves your jurisdiction we rely on appropriate safeguards — such as standard contractual clauses or an adequacy decision — to keep protection equivalent to that in your home country.

Data is encrypted in transit and at rest, file access is granted only through short-lived signed links, and row-level access rules are enforced in the database rather than only in the app. No system is perfect; if a breach affects your data we will notify you and any relevant regulator as required by law.

We will update the "last updated" date above when this policy changes and notify account holders of material changes by email or in-app.

Privacy questions, deletion requests, and export requests: wyy.11.world@gmail.com.