Privacy Policy

SportBlox ("we", "us") provides AI-generated training plans for athletes and coaches. This policy explains what personal information we collect across our marketing site and the SportBlox app, how we use it, who we share it with, and the choices you have. If anything here is unclear, email us at [email protected].

Information we collect

Account details

When you create an account we collect your name, email address, password, and role (athlete or coach). Coaches also provide a team name. Passwords are stored only as a one-way cryptographic hash — we never store or see your actual password.

Training profile

To generate and refine your training plan we collect the sport, goal, skill level, challenges or weaknesses, performance notes, upcoming events, and schedule constraints you (or your coach, for team plans) provide, along with the training sessions and calendar entries on your plan.

AI chat conversations

When you use the AI plan chat, we store the full conversation — your messages, the assistant's replies, and the plan drafts produced — along with token usage and estimated cost for each conversation. Stored conversations are used to run the feature, to support you if something goes wrong, and to monitor our AI costs.

Information a coach provides about you

Coaches can add athletes to a team roster by name and email before those athletes have a SportBlox account, and can record details such as group membership. If a coach has added you to a roster, we hold that information on the coach's behalf; you'll receive an email invite before any account is created for you. Coaches are responsible for having permission to share an athlete's details with us, including a parent or guardian's permission where the athlete is a minor.

Attendance responses

For in-person team sessions, we store each athlete's attendance response (attending / not attending), which is visible to the team's coaches.

Billing information

Payments are handled by Stripe on Stripe's own hosted pages. We never receive or store your card number. We store your subscription status (tier, billing interval, capacity, and top-up purchases) and, for AI features, usage records such as draft counts, chat turns, token usage, and estimated cost.

Connected services

If you choose to connect Strava, we access the activity data needed to inform your training plan. If you authorize an external AI client to access SportBlox via our MCP integration, that client can read and modify your plans within the same permissions you have in the product. Both are entirely optional and can be revoked at any time.

Usage data and analytics

We use PostHog to collect product usage data — pages viewed, features used, and similar events — on both the marketing site and the app, so we can understand how SportBlox is used and improve it. On the marketing site, PostHog only creates an identified profile for users who sign up or log in. We also log IP addresses for security purposes, such as limiting the rate of new account signups.

How we use your information

• Generating training plans. Your training profile, relevant plan history, and AI chat messages are sent to our AI model provider (Google, via the Gemini API) to generate and refine your plan. We never include your name or email address in what we send to the AI model — it only receives training-related information such as your sport, goal, skill level, schedule, and event dates. We do not use your data to train AI models, and we do not allow our AI provider to train models on it either.
• Running your account. Authentication, password resets, team and coach invites, and restoring your session.
• Transactional email. We send password reset links, team and coach invites, and similar service emails via Resend. We don't send marketing email without your consent.
• Billing. Managing subscriptions, trials, top-ups, and usage allowances.
• Support. Our support staff can view your account, plans, and AI conversations, and can temporarily act as your user (impersonation) to reproduce and fix a problem you've reported. Impersonation is restricted to authorized admins and is time-limited.
• Safety and abuse prevention. Rate limits, spend monitoring, and kill-switches that detect anomalous AI usage.
• Improving the product. Aggregate analytics about how features are used.

Who we share information with

We do not sell your personal data, and we don't share your training data with advertisers. We share information only with the service providers we rely on to run SportBlox:

• Google (Gemini API) — AI plan generation and chat. Receives training-related data only, never your name or email address, and is not permitted to train AI models on your data.
• Stripe — payment processing and subscription billing.
• Resend — transactional email delivery.
• PostHog — product analytics.
• Railway — application and database hosting.
• Strava — only if you connect your Strava account, under Strava's own terms.
• External AI clients — only if you explicitly authorize one via our MCP integration.

The marketing site also loads fonts from Google Fonts, which means your browser sends a standard web request (including your IP address) to Google when a page loads.

We may also disclose information where required by law, or as part of a merger, acquisition, or sale of assets — in which case this policy would continue to apply to your data.

Coaches and teams

If you're an athlete on a coach-managed team, your coaches can see your name, email, group membership, attendance responses, and the team's plan and sessions. Your personal (individually-owned) plans are yours alone: coaches can only access plans owned by teams they belong to, and athletes on a team have read-only access to team plans. Coaches can remove athletes from a roster at any time.

Data retention

We keep your account and training data for as long as your account exists, including while a subscription has lapsed — your plans and calendar remain readable and editable even when paid AI features are off. If you ask us to delete your account, we delete your personal data except where we need to keep limited records to meet legal, tax, or accounting obligations (for example, billing records).

Your rights and choices

• Access and deletion. Email [email protected] to request a copy of your data or deletion of your account.
• Correction. You can edit your training profile and account details in the app, or ask us for help.
• Connections. You can revoke a Strava connection or an authorized external AI client from your account at any time.
• Roster removal. If a coach added you to a team, you can ask the coach — or us — to remove you.

Depending on where you live, you may have additional rights under privacy laws such as the Australian Privacy Act, the GDPR, or the UK GDPR — including rights to object to or restrict certain processing and to complain to your local privacy regulator. We honour these requests regardless of where you're located; contact us and we'll help.

Security

We take reasonable technical measures to protect your data: passwords are hashed with bcrypt, authorization codes and reset tokens are stored hashed and expire after use or a set time, traffic is encrypted in transit, and access to admin tools is restricted to authorized staff. No system is perfectly secure, so if you believe your account has been compromised, contact us immediately.

Children

SportBlox accounts are intended for people aged 16 and over. Coaches who add younger athletes to a team roster must have the consent of the athlete's parent or guardian. If you believe we hold personal information about a child without appropriate consent, email us and we'll delete it.

International transfers

Our service providers may store or process data outside your country, including in the United States. Where they do, we rely on their standard safeguards for international data transfers.

Changes to this policy

We'll update this policy as SportBlox evolves. If we make a material change to how we handle your personal data, we'll notify account holders by email or in the app before it takes effect. The "last updated" date at the top always reflects the current version.

Contact

Questions, requests, or complaints about privacy at SportBlox: [email protected].