Legal

Privacy policy

What we collect, why, who else touches it, and how to make us delete it. Written so an actual 14-year-old or their parent can read it without a law degree.

Last updated: April 26, 2026

Quick summary

Your recordings are private to you by default. We don't sell your data. We don't train AI models on your voice. Raw audio is deleted within 30 days; the structured insights you build over time stay with your account.

If you're under 18, your parent or legal guardian must consent before you use AthleticX. Parents can review or delete their child's data at any time by emailing us.

What we collect

Account info: your name, email, locale, age range, and (for under-18 athletes) your parent's email.

Voice and reflection data: audio you record, the transcript we generate, and the structured insights (minutes, mental-game language, etc.) we extract.

Usage data: the pages you visit, the features you use, and basic device information. We use this to make the product better, not to sell to anyone.

How we use it

We use your data to operate the product (transcribing, generating trends, surfacing insights), to keep your account secure, and to communicate with you about AthleticX. That's it.

What we share — and what we don't

We don't sell your data. We don't share your recordings or transcripts with anyone outside AthleticX unless you explicitly choose to share a session.

We do work with carefully chosen vendors (our 'subprocessors') who help us run the product. They handle your data only on our instructions and are bound by contracts that require them to protect it.

Named subprocessors

OpenAI — speech-to-text transcription and AI extraction. Our agreement with OpenAI prohibits training on your data.

Anthropic — AI extraction and coaching dialogue. Our agreement with Anthropic prohibits training on your data.

Supabase — database, authentication, and audio storage.

Vercel — application hosting and content delivery.

PostHog — privacy-respecting product analytics, configured with anonymous identifiers and opt-out support.

Sentry — error monitoring, configured to scrub personal data from error reports.

Resend — transactional email delivery (magic links, account notifications).

How long we keep your data

Raw audio: deleted automatically within 30 days of upload.

Transcripts and structured insights: kept for the life of your account so your trends remain continuous.

When you close your account, we delete everything within 30 days, except where we're legally required to retain something (rare).

Your rights

You can export a copy of your data, correct inaccurate data, or ask us to delete your account at any time. Email us and we'll get it done within 30 days.

Depending on where you live, you may have additional rights under laws like GDPR or the California Consumer Privacy Act (CCPA). We honor those rights for everyone.

Children under 18

AthleticX is for athletes 13 and up. We don't knowingly collect data from children under 13. If you believe a child under 13 has given us data, email us and we'll delete it.

For athletes under 18, we require verifiable parental consent before account creation. Parents can review, correct, or delete their child's data at any time by emailing us.

Security

We encrypt data in transit (HTTPS) and at rest. We use Supabase's row-level security so each athlete's data is only readable by that athlete (and the parent who consented, where applicable). No system is perfect, but we take this seriously and we won't pretend otherwise.

Changes to this policy

When we make material changes, we'll notify you in the app or by email at least 14 days before the change takes effect. The 'last updated' date at the top of this page always reflects the current version.

Contact

Questions, concerns, or requests? Email support@athleticx.ai. AthleticX is a product of nCore Consultancy Services LLC.

Privacy policy — AthleticX · AthleticX