Privacy Policy

1. Introduction

GrindWell Coaching Hub ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Platform.

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, phone number, username, password
• Coach Information: Bio, coaching experience, certifications, pricing, availability, profile photos
• Parent Information: Athlete names, ages, skill levels
• Payment Information: Processed and stored by Stripe (we do not store credit card numbers)
• Session Information: Session notes, booking details, lesson summaries

2.2 Information Collected Automatically

• Usage Data: Pages viewed, features used, time spent on Platform
• Device Information: IP address, browser type, operating system
• Cookies: We use cookies for authentication and analytics

3. How We Use Your Information

We use your information to:

• Provide and improve the Platform
• Process bookings and payments
• Send transactional emails (booking confirmations, session summaries)
• Send marketing communications (you can opt out)
• Detect and prevent fraud
• Comply with legal obligations
• Analyze usage patterns and improve user experience

4. How We Share Your Information

4.1 With Other Users

• Coach profiles are public (name, bio, experience, pricing)
• Parents can see coach availability and offerings
• Coaches can see parent/athlete names for booked lessons

4.2 With Service Providers

• Stripe: Payment processing (see Stripe Privacy Policy)
• Supabase: Database hosting and authentication
• Vercel: Platform hosting
• OpenAI: AI-powered session notes generation
• Resend: Transactional email delivery

4.3 Legal Requirements

We may disclose your information if required by law, court order, or to protect rights, property, or safety.

5. Data Security

We implement appropriate technical and organizational measures to protect your data, including:

• Encryption in transit (HTTPS/TLS)
• Encryption at rest (database encryption)
• Row-level security policies
• Regular security audits
• Limited employee access to personal data

However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

6. Data Retention

We retain your information for as long as your account is active or as needed to provide services. You can request deletion of your account and data at any time by contacting support@grindwell.ai.

We may retain certain information for legal compliance, fraud prevention, or dispute resolution purposes.

7. Your Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your data
• Portability: Request data in a portable format
• Objection: Object to certain data processing
• Opt-Out: Opt out of marketing communications

To exercise these rights, contact us at support@grindwell.ai.

8. Children's Privacy

The Platform is not intended for children under 13. We do not knowingly collect personal information from children under 13. Athletes using the Platform must be supervised by parents/guardians who create and manage accounts.

9. International Data Transfers

Your information may be transferred to and processed in the United States or other countries where our service providers operate. By using the Platform, you consent to these transfers.

10. Cookies and Tracking

We use cookies and similar technologies for:

• Authentication (keeping you logged in)
• Analytics (understanding how you use the Platform)
• Preferences (remembering your settings)

You can control cookies through your browser settings. Disabling cookies may affect Platform functionality.

11. Third-Party Links

The Platform may contain links to third-party websites. We are not responsible for their privacy practices. Please review their privacy policies.

12. GDPR Compliance (EU Users)

If you are in the European Union, we process your data based on:

• Consent: You have given clear consent for specific processing
• Contract: Processing is necessary to fulfill our agreement with you
• Legal Obligation: Processing is required by law
• Legitimate Interests: Processing is in our legitimate business interests

13. CCPA Compliance (California Users)

If you are a California resident, you have additional rights under the California Consumer Privacy Act:

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to say no to sale of personal information (we do not sell your information)
• Right to delete personal information
• Right to non-discrimination for exercising your rights

14. Changes to Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or prominent notice on the Platform. Continued use after changes constitutes acceptance.

15. Contact Us

For questions about this Privacy Policy or to exercise your rights, contact us at:

Email: support@grindwell.ai
Address: GrindWell Coaching Hub, Austin, TX (address available upon request)

By using GrindWell, you acknowledge that you have read and understood this Privacy Policy.