Legal

Privacy Policy

Effective Date: March 22, 2026 · Last Updated: March 22, 2026

Elite Athlete is committed to protecting your personal data. This policy explains what we collect, how we use it, how long we keep it, and your rights — including the right to have your data permanently deleted.

1. Who We Are

Elite Athlete ("we," "us," "our") is a premium athletic performance platform. Our app is accessible at the-elite-athlete.netlify.app. For privacy inquiries, contact us at support@elite-athlete.app.

2. Information We Collect

Account & Profile Data

Name, email address, and password (hashed — never stored in plain text)
Physical stats: height, weight, body fat percentage, age
Sport, position, and performance goals
Profile photos (before/after progress images)

Performance & Health Data

Daily check-ins: recovery, energy, sleep, soreness, mood scores
Workout logs: exercises, sets, reps, load, session notes
Nutrition logs: calories, macronutrients, water intake
Weight and body composition history
Injury selections and recovery progress
Performance benchmarks and test results

Journal & Notes

Personal journal entries and progress notes you choose to write

Payment Data

Subscription status and plan type (stored in our database)
Payment processing is handled entirely by Stripe — we never store card numbers, CVVs, or bank details

Technical Data

Browser type and device type (collected only in bug reports you submit voluntarily)
App usage patterns (module visits, feature use) — used only for product improvement

3. How We Use Your Data

To provide the service: Generating your meal plans, workout programs, injury recovery protocols, and AI coaching responses
To personalize your experience: Tailoring content to your sport, position, goals, and logged history
To process payments: Managing your subscription through Stripe
To improve the product: Anonymized, aggregated usage data helps us fix bugs and improve features
To communicate with you: Subscription confirmations, renewal reminders, and support responses

We do not sell your data. We do not use your data for advertising. We do not share your personal or health data with third parties except as described in Section 5.

4. Data Retention

We retain your data only as long as necessary to provide the service or as required by law. You may request deletion at any time — see Section 7.

Active Accounts

All profile, performance, journal, and health data is retained for the duration of your active account. Within the app, you can access your full 90-day history. Data older than 90 days is archived (not deleted) and remains accessible to us for account recovery purposes.

After Account Cancellation

If you cancel your subscription, your account and all associated data are retained for 30 days after your final billing date. This grace period allows you to reactivate your account and recover your data. After 30 days, your data enters our standard deletion queue and is permanently removed within 90 days.

Inactive Accounts

Accounts with no login activity for 24 consecutive months are considered inactive. We will send an email notification 30 days before initiating deletion. If there is no response, all data associated with the account is permanently deleted within 90 days of the notification date.

Payment Records

Transaction records are retained for 7 years to comply with financial and tax regulations. These records contain only transaction amounts, dates, and subscription tier — not payment card data, which is never stored by us.

Bug Reports

Voluntarily submitted bug reports are retained for 12 months then permanently deleted.

Backups

System backups are retained for 30 days on a rolling basis. After a deletion request is fulfilled, your data will be absent from all new backups within 30 days and fully purged from all backup media within 60 days of the request.

5. Data Sharing

We share your data only with the following trusted service providers, strictly for the purpose of operating Elite Athlete:

Supabase — database and authentication (data stored on AWS infrastructure, US region)
Stripe — payment processing (PCI DSS Level 1 certified)
Anthropic (Claude AI) — Powers the Elite Coach feature. When you use Elite Coach, we send your training data to Anthropic to generate personalized coaching responses, including: daily check-ins (recovery, energy, sleep, soreness), workout logs and training loads, nutrition logs, body metrics, and performance benchmarks. This data is used solely to produce coaching responses. We obtain your explicit in-app consent before any data is shared with Anthropic, and you may decline while continuing to use all other features of the app. Anthropic's handling of this data is governed by their privacy policy (anthropic.com/legal/privacy).
Netlify — hosting and serverless functions (US-based infrastructure)
EmailJS — email delivery for reports you choose to send

We do not share your data with advertisers, data brokers, analytics companies, or any other third parties beyond the above.

6. Security

All data in transit is encrypted using TLS 1.2 or higher (HTTPS enforced)
Passwords are hashed using bcrypt — we cannot see your password
API endpoints are rate-limited and origin-locked to prevent unauthorized access
Payment card data is never stored on our servers — handled entirely by Stripe's PCI-compliant infrastructure
All serverless functions validate input and reject requests from unauthorized origins

7. Your Rights — Including the Right to Data Deletion

You have the right to request permanent, complete deletion of all your personal data from our systems at any time, with no questions asked.

Right to Access

You may request a complete export of all personal data we hold about you. We will provide this in a machine-readable format (JSON) within 14 days of your request.

Right to Correction

You may update your profile, health stats, and account information directly within the app at any time. For corrections to data not editable in-app, contact us and we will make changes within 7 days.

Right to Deletion ("Right to Be Forgotten")

You have the right to request permanent deletion of all your personal data. To submit a deletion request:

Email support@elite-athlete.app with the subject line "Data Deletion Request"
Include the email address associated with your account
We will confirm receipt within 48 hours and complete the deletion within 30 days
You will receive a written confirmation when deletion is complete

Upon a verified deletion request, we will permanently remove: your profile and health data, workout and nutrition logs, journal entries and progress notes, check-in history, photos, and all account identifiers. The only data retained after deletion is transaction records required by law (7 years, as described in Section 4), which contain no health or personal performance data.

Right to Restriction

You may request that we restrict processing of your data (for example, keeping your account but pausing all AI coaching features) by contacting us at the email above.

Right to Portability

You may request your data in a portable format at any time. We will provide a JSON export of all data we hold within 14 days.

Right to Opt Out of AI Processing

If you do not wish your logged performance data to be used to generate AI coaching responses, you may opt out by not using the AI Coach feature. Your data is only sent to Anthropic's API when you actively use the AI Coach tab.

8. Children's Privacy

Elite Athlete is not intended for users under the age of 16. We do not knowingly collect personal data from anyone under 16. If you believe a minor has created an account, please contact us immediately at support@elite-athlete.app and we will delete the account promptly.

9. Cookies & Local Storage

We use browser local storage (not cookies) to save your theme preference (dark/light mode) and notification settings. This data never leaves your device and is not transmitted to our servers. We do not use tracking cookies or third-party analytics cookies.

10. Changes to This Policy

If we make material changes to this Privacy Policy, we will notify you by email at least 14 days before the changes take effect. Continued use of the app after that date constitutes acceptance of the updated policy. The "Last Updated" date at the top of this page will always reflect the most recent revision.

11. Contact

For all privacy-related inquiries, data access requests, or deletion requests:

Email: support@elite-athlete.app
Subject line for deletion: "Data Deletion Request"
Response time: 48 hours for acknowledgment, 30 days for fulfillment