Privacy Policy

Effective date: August 2026

This privacy policy describes how MNK Solutions LLC ("we", "us", "our") collects, uses, and protects information through the Supertrainer mobile application ("the App") and its optional cloud sync service ("Formation").

Summary

Supertrainer works fully offline without an account. You only share data with us if you opt into the paid Sync subscription, at which point your data is synced to our servers so it is available on your other devices. We do not sell your data. There are no advertising identifiers and no third-party analytics or tracking SDKs in the App.

What we collect

Free tier (offline)

When you use the App without a Sync subscription, we collect nothing. All data stays on your device. The App does not transmit anything to our servers and does not require an account.

Sync tier (paid subscription)

If you subscribe to Sync, we process the following categories of data so we can replicate your coaching data across your devices:

• Account information: email address (required for sign-in and password recovery) and a hashed password. We do not store your password in readable form.
• Subscription information: the Google Play purchase token, subscription status, and renewal/expiry dates. Google Play Billing handles the actual payment; we never see your credit card number.
• Coaching data you enter: drill library entries (including any photos you attach), practice plans, game schedules, player rosters (names, squad numbers, positions), and session notes.
• Player wellness data you enter: check-in scores (sleep, soreness, fatigue, mood), session RPE, injury reports, availability status.
• Player contact data (optional): if you enable the wellness-survey email feature, you may enter a player's email address and/or phone number for delivering the survey link. These fields are only populated with explicit parent/guardian consent, which you record via a consent checkbox in the App.
• App feedback: free-form feedback text you submit through the in-app Feedback screen, tagged with the App version you were running.

Wellness survey respondents

Players (or their parents/guardians) who receive a wellness-survey email click a magic link and submit check-in scores. From that page we store:

• The four check-in scores (sleep, soreness, energy, mood) and the date they apply to.
• Anything typed into the optional "Anything else?" box. This is free text, limited to 500 characters, and it is deleted after 90 days. The page asks respondents not to enter medical details or other players' names.
• A record that the respondent confirmed they are 18 or older, or the player's parent or guardian, with the time they confirmed it. The page will not accept a submission without that confirmation.

We do not collect the respondent's IP address, browser identifier, or any other passive data.

What we do not collect

• Device identifiers (no advertising ID, no IMEI, no Android ID)
• Precise or approximate location
• Browsing history outside the App
• Contact lists from your phone
• Photos or files beyond what you explicitly attach to a drill

How we use your data

Data you enter into the Sync tier is used only to run the Sync service: replicating your coaching data across your devices, sending the wellness-survey emails you request, and password recovery. We do not use your data for advertising, profiling, or any purpose unrelated to the service you subscribed to.

Data sharing

We do not sell, rent, or share your data with any third parties for their own purposes. We rely on a small number of service providers to operate the Sync service, and they process data only on our behalf:

• Fly.io hosts our Formation backend and PostgreSQL database.
• Resend delivers wellness-survey emails, password-reset emails, and similar transactional mail.
• Google Play Billing processes your subscription payment and notifies us of subscription lifecycle events (renewal, cancellation, refund).

We may disclose information if required to do so by law, subpoena, or other valid legal process.

Data storage and retention

Synced data is stored on servers located in the United States. While your Sync subscription is active, we retain your data for as long as you use the service. If your subscription lapses:

• Sync continues to work for a 7-day grace period so you can renew without interruption.
• After the grace period, sync requests are refused but the data is kept for 12 months so you can resume where you left off if you re-subscribe.
• After 12 months of inactivity, we may permanently delete the data. We will send a notice to your registered email at least 30 days before deletion.

You may request immediate deletion of your account and data at any time. See Account Deletion for instructions.

Player wellness data (children's data retention policy)

Wellness data describes minors in most cases, so it is deleted on a schedule rather than kept for as long as the account lives.

Why we collect it. Wellness check-in scores are collected for one purpose: to show a coach how their squad is feeling before a session, so they can adjust that session. Notes typed into the optional box are collected so a parent can pass the coach something the scores don't capture. We do not use either for advertising, profiling, or any purpose beyond the session it informs, and we do not disclose them to third parties.

When we delete it. A job runs daily and removes:

• Free-text notes from the wellness check-in page, after 90 days. The scores they were attached to remain.
• Wellness check-in records in full, after 12 months. The longest calculation the app performs on them looks back 28 days.
• Used and expired wellness-survey links, 30 days after they expire.

This happens automatically and applies whether or not the subscription is still active. Records of parental consent are kept for as long as the player is on a roster, because they are the evidence that we were permitted to collect anything at all.

Data security

We use industry-standard measures to protect data in transit and at rest: TLS for all network traffic to Formation, Argon2 for password hashing, and bearer tokens that are hashed server-side. However, no method of electronic transmission or storage is perfectly secure, and we cannot guarantee absolute security.

Children's privacy

The App is designed for use by adult coaching staff. Coaches may enter data about players, including minors (for example, a U12 team roster). Before we collect anything from a player or their family, three things have to happen in order:

1. The coach records consent. They tick a box confirming the player's parent or guardian agreed, against a named contact. Our server refuses to do anything for a player without it, and we store when the flag was set and which coach set it.
2. We ask the parent ourselves. The first time a coach requests a check-in for that player, the contact does not receive a check-in link. They receive a notice explaining what we would collect, how it is used, how long we keep it, and how to refuse, with a link to give permission. We follow that with a separate confirmation email, so that if somebody other than the parent clicked the link, the parent still hears about it. Until both of those steps complete, no check-in link is ever sent and nothing about the player is collected.
3. The person answering confirms who they are. The check-in page will not accept a submission unless the respondent ticks a box saying they are 18 or older, or the player's parent or guardian.

A parent or guardian can withdraw permission at any time using the link in any email we have sent them, without going through the coach. Coaches can also withdraw it on a parent's behalf. Withdrawal stops all future check-in emails immediately.

If you are a parent or guardian and you want your child's wellness data deleted, or you want to withdraw consent, email us at privacy@mnksolutions.dev and we will remove it. You do not need an account with us to make that request, and you do not need to go through the coach.

Your rights

You may:

• Request a copy of the data we hold about you.
• Correct or update your data. Most of it is directly editable in the App; for the rest, contact us.
• Delete your account and data (see Account Deletion).
• Cancel your subscription at any time through the Google Play Store. Cancelling stops future charges; the subscription remains active until the end of the current billing period.

Changes to this policy

We may update this policy from time to time. Material changes will be posted on this page with a revised effective date. Continuing to use the Sync service after a change constitutes acceptance of the updated policy.

Contact us

If you have questions about this privacy policy, your data, or want to exercise any of the rights above, please contact us at privacy@mnksolutions.dev.