Privacy Policy

We only collect information needed to operate the academy and its programs:

• Account information. Your name and email address, used to create and secure your account. Authentication and passwords are handled by our infrastructure provider (Supabase); we never store passwords in plain text.
• Precise location (coaches only, optional). When a coach checks in at an academy branch, the app may request device location to verify on-site attendance. Location is used only at the moment of check-in, only with your permission, and is not tracked in the background.
• Push notification token. If you enable notifications, we store a device push token (via Apple Push Notification service / Firebase Cloud Messaging) so we can send session reminders and academy updates.
• Program & activity data. Bookings, attendance, schedules, branch and coach assignments, and similar records you or the academy create while using the Services.
• Basic device & diagnostic data. Limited technical information (e.g. crash and error reports) used to keep the app stable and secure.

We do not show third-party advertising, we do not sell your personal data, and we do not use your data for ad targeting.

• Provide and operate academy programs, bookings, and scheduling.
• Authenticate you and keep your account secure.
• Verify coach check-ins at academy branches (location, when granted).
• Send session reminders and academy updates (notifications, when enabled).
• Maintain, troubleshoot, and improve the Services.
• Comply with legal obligations.

We share data only with service providers that help us run the Services:

• Supabase — database, authentication, and secure storage (data processor).
• Apple & Google — delivery of push notifications you opt into.
• Academy staff — coaches and administrators of your academy can see the program data relevant to your participation.

We may disclose information if required by law or to protect the rights, safety, and security of our users and the Services.

Hero Academy serves sports programs that may include minors. Accounts for participants under the age of digital consent in their country are created and managed by a parent, legal guardian, or authorized academy staff, who provide and control that information on the minor’s behalf. We do not knowingly collect personal data directly from children without such consent. If you believe a child has provided us data without authorization, contact us and we will delete it.

We keep your information for as long as your account is active or as needed to provide the Services and meet legal obligations. You may request deletion of your account and associated personal data at any time (see “Your rights”).

Data is transmitted over encrypted HTTPS/TLS connections and stored with our infrastructure provider using industry-standard safeguards. Sensitive credentials on your device are kept in the platform’s secure storage (iOS Keychain / Android Keystore). No method of transmission or storage is 100% secure, but we work to protect your information.

Depending on your location, you may have the right to access, correct, export, or delete your personal data, and to withdraw consent (for example, by disabling location or notification permissions in your device settings). To exercise these rights, contact us at the address below and we will respond within a reasonable timeframe.

We may update this Privacy Policy from time to time. Material changes will be reflected by an updated “Last updated” date on this page and, where appropriate, communicated within the app.

Questions or requests about this policy or your data? Contact us at privacy@hero-academy.app.