1. Introduction
At AthletIQ, we understand that player biometric data is exceptionally sensitive. Your trust is paramount, and we treat data security and privacy as foundational principles of our platform. This Privacy Policy explains how we collect, use, store, and protect your data.
2. Data We Collect
AthletIQ collects the following categories of data:
- Biometric Data: Heart rate, HRV, sleep scores, recovery metrics, workload indices from wearables and wellness systems.
- Performance Data: GPS tracking, speed, distance, acceleration, positioning from suppliers like Catapult and STATSports.
- Player Information: Name, position, squad number, injury history, and performance notes.
- Account Data: Club name, administrator contact information, subscription details.
3. How We Use Your Data
We use collected data solely for:
- Wellness check-ins, training load (including ACWR), and squad readiness views
- Training planning, messaging, and club communication features
- Optional AI-assisted chat, meal analysis, and coach tools (where the club and user have consented)
- Push notifications when enabled
- Operating, securing, and improving the service
We do not: sell personal data, use player data for unrelated marketing, or present AthletIQ as medical advice. Clubs remain responsible for how they use data in their own programs.
4. Data Security & Protection
We design AthletIQ with security and tenant isolation in mind. Typical safeguards include:
- TLS (HTTPS) for data in transit between clients and our services
- Organization-scoped data in the application database (clubs do not share one another's rosters)
- Role-based access for staff and players; passkey and token-based sign-in options
- Hosted production infrastructure in Norway (see our processor arrangements in agreements with clubs)
- GDPR-oriented tooling such as export and erasure requests, subject to club processes
5. Where data is stored
Production AthletIQ for our club customers runs on managed infrastructure in Norway (PostgreSQL database, application services, and object storage for media). Backup and retention practices are described in our agreements with each club.
Other deployment models (for example dedicated hosting) are only offered when agreed in writing. Contact us if your club has specific residency or IT requirements.
6. Data Retention & Deletion
Clubs retain ownership of all player data. You may:
- Request data export at any time in standard formats (CSV, JSON, XML)
- Delete specific player records or entire datasets upon request
- Set automatic retention policies (e.g., archive after 24 months, purge after 36 months)
- Retrieve historical data even after player departure
We comply with all deletion requests within 30 days. Backups are retained per your backup policy; once purged, data is removed from all systems.
7. Third-Party Integrations
When you connect wearable or GPS providers (Whoop, Catapult, STATSports, etc.), their data sharing agreements apply:
- We only access data you explicitly authorize through their APIs
- We do not sell or share third-party data
- Each provider's privacy policy remains in effect for their platform
- You can revoke access at any time without affecting other data in AthletIQ
8. Your Rights & Club Control
As a club using AthletIQ, you have the right to:
- Access all data collected on your players
- Correct inaccurate information
- Export your data in machine-readable format
- Request deletion of any records
- Audit our security practices and certifications
- Receive notice of any data breach or incident
9. Data Breach Notification
In the unlikely event of a confirmed data breach, we will notify affected clubs within 72 hours with details of the incident, scope, and remediation steps taken. We maintain comprehensive incident response procedures and cyber liability insurance.
10. Children's Data
If your club tracks player data for youth academies or players under 18, we apply enhanced protections and comply with child data protection regulations (COPPA in the US, GDPR Article 8 in the EU). Parental/guardian consent may be required per local law.
11. Changes to This Policy
We may update this Privacy Policy as our services evolve. Any material changes will be communicated to your club via email. Your continued use of AthletIQ implies acceptance of changes. You may always request a version of this policy effective at any prior date.
12. Contact & Support
For questions, requests, or concerns regarding your data and privacy:
- Email: privacy@athletiq.one
- General Support: hello@athletiq.one
- Data Subject Requests: Submit via your admin dashboard or email privacy@athletiq.one
We aim to respond to all privacy inquiries within 5 business days.