1. Information we collect
Personal information you provide
- Identity, contact, and profile data
- Payment method details processed by Stripe or Razorpay (we do not store raw card numbers)
- Authentication data (password hashes; Google / Apple / LinkedIn OAuth)
- Coach credentials and payout information via Stripe Connect
Usage & technical data
- Device, IP, app activity, performance/error logs (Sentry)
- Approximate location from IP; precise location only with permission
- Fraud/risk signals (hashed) for payment fraud prevention — not advertising
- Session music play events (track id, duration, actor) when Session Soundtrack is enabled
Content you create
- Session recordings (with consent), messages, reviews
- Photos/videos stored primarily in Google Cloud Storage (signed URLs), with Supabase Storage as fallback/legacy
- Social wall posts and original soundtrack uploads / rights attestations (when enabled)
2. How we use information
To provide bookings and live sessions, manage accounts, communicate (Resend / FCM / APNs), personalize recommendations, prevent fraud, improve the product, and meet legal obligations. Marketing requires consent and can be opted out.
3. How we share information
With session participants (profile visibility), contractually bound processors, and when required by law. We do not sell personal information for third-party marketing.
4. Security
- TLS 1.3 in transit; AES-256 at rest (Supabase, Google Cloud)
- PCI-DSS Level 1 processors for payments; LiveKit SRTP/DTLS for media
- Material breaches: notify affected users within 72 hours where GDPR applies
5. Your rights
Access, update, portability, deletion, marketing opt-out, and restriction requests via App Settings or sc-support@consultcraftinc.com. Account deletion: https://sportscove-7feda.web.app/account-deletion.
6. Regional rights
GDPR (EU/EEA/UK), CCPA/CPRA (California), DPDPA 2023 (India), and PIPEDA (Canada) rights are honored for applicable users. Data Fiduciary for India: Anviga Pvt. Ltd.
7. Children
SportsCove is for users 18+ only. We do not knowingly collect data from minors.
8. Third-party providers (summary)
- Backend / Auth: Supabase; Google / Apple / LinkedIn Sign-In
- Payments: Stripe, Razorpay, Apple IAP / mobile store billing
- Realtime video: LiveKit
- AI Trainer: Google Gemini (optional cloud), ML Kit / MediaPipe (on-device)
- Storage & hosting: Google Cloud Storage (primary media), Firebase Hosting / Google Cloud (web), Supabase Storage (fallback)
- Email / push: Resend, FCM, APNs
- Analytics / errors: Firebase Analytics, Sentry
- Music licensing (when enabled): rights-cleared catalog + royalty play logs; embed sync uses YouTube/SoundCloud on-device only
9. Live language features (future / optional)
If live captions or dubbed translation are offered, audio or transcripts may be processed by contracted ASR / translation / TTS providers under DPAs with short retention. Human interpreters may join as participants in high-stakes sessions.
10. Contact
Support: sc-support@consultcraftinc.com
General: info@consultcraftinc.com
Related: Terms · Support · Data deletion.