Legal
Privacy notice
Data controller
[TO BE DEFINED: legal name], [TO BE DEFINED: address], is responsible for your personal data in NeuroLoad under Mexico's Federal Law on the Protection of Personal Data Held by Private Parties. Privacy contact: neuroloadapp@gmail.com.
Data we process
- Identity and contact: name, e-mail, date of birth, sport, objective, job title or speciality and team position.
- Training: planned and completed sessions, sets, loads, reps, RPE, times, performance tests, bar velocity and metrics calculated from them.
- Health data (sensitive personal data): wellness and mood (POMS) questionnaires, sleep, pain, injuries and their rehabilitation, clinical notes from the health staff, resting heart rate, body weight, nutrition, habits, psychology tools and, if you turn it on, menstrual cycle information.
- Watch data, only if you connect Apple Health or Health Connect: heart rate, heart rate variability (HRV), sleep, steps and workouts. We only read them; we never write to those apps.
- Content: photos, technique videos, voice notes, messages and comments you exchange in the app.
- Technical data: the device's notification token and app preferences (language, units, theme).
- Coaches with a paid plan: plan, status and dates of the subscription. Card details are received and stored by Stripe, not by NeuroLoad.
What we use them for
Purposes needed to provide the service:
- Create and manage your account and sign you in.
- Show your coach and their staff your plan, your logs and your status, so they can adjust your training and look after your health.
- Calculate load, wellness and performance indicators, and send alerts and reminders.
- Let athletes, coaches and staff communicate.
- Manage coaches' paid plans.
- Answer your requests and keep the platform secure.
We do not use your data for advertising, we do not sell it and we do not use it for research. If we ever want to use it anonymized to improve NeuroLoad or for research, we will ask for a separate, optional consent.
Consent for health data
Health data is sensitive personal data. By creating an athlete account you give your express consent for us to process it for the purposes above. You can revoke it in the app (Legal notice and consents) or by writing to neuroloadapp@gmail.com; once revoked, your coach can no longer use NeuroLoad to follow your wellness and health.
Who sees your data
- Athletes: the coaches who added you and their team's staff, according to the permissions the coach gives each role. No one else inside NeuroLoad.
- Coaches and staff: your athletes see your name and what you share with them; your team sees what the head coach allows.
- Providers that help us run the service and process data only on our behalf: Supabase (servers, database, files and sign-in), Expo (notifications), Google (Google sign-in, if you choose it), RevenueCat and Stripe (coach payments) and Gmail (verification e-mails). [TO BE DEFINED: region of the Supabase servers.] Some providers are outside Mexico, so your data may be transferred to other countries with the safeguards the law requires.
- Authorities, only when a law or court order requires it.
How long we keep them
While your account is active. When you delete your account we erase your data and files immediately; backups are erased within 30 days. We may keep billing records that tax law requires.
Your rights
You can access, correct or delete your data, object to its processing, revoke your consent and limit its use. You can correct most of your data in the app and delete your account from Settings or More → Delete account.
For any other request write to neuroloadapp@gmail.com from your account's e-mail with your name, what you are asking for and, if you act for someone else, proof that you may. We answer within 20 business days.
Minors
If you are under 18, your mother, father or guardian must authorize your use of NeuroLoad and the processing of your data. Coaches and clubs working with minors are responsible for having that authorization.
Security
Each account can only read its own data (access rules in the database), connections are encrypted and files are kept in private storage. No system is infallible: if we detect a breach that affects your rights, we will tell you.
Changes to this notice
If we change this notice we will tell you in the app or by e-mail. The date and version are at the end of the document.