Privacy Policy

This Policy explains what Ignite Goals ("Ignite", "we", "us") collects, why we collect it, who we share it with, and the rights you have. It applies to users in the United States and Canada, including Quebec.

1. Who's responsible

Ignite Goals is operated as a youth performance app. Our Privacy Officer can be reached at privacy@ignitegoals.app.

2. What we collect

• Account info — email, name, avatar (if signing in with Google), the role and sport you pick at onboarding, and your date of birth (used to confirm you meet the minimum age and to flag minor accounts; we don't share it).
• Guardian email — for users aged 13–17, the email of a parent or guardian so we can notify them.
• App data — goals, weekly mental check-ins (confidence, focus, nerves, sleep, motivation, notes), training logs, team memberships, and consent timestamps.
• Technical data — basic device/browser info and error logs needed to operate the service.

3. Why we collect it (legal basis)

• Consent — you accept this Policy at signup. Athletes give an additional explicit consent before joining a team.
• Necessary to provide the service — for example, syncing your data across devices.
• Legal obligation — to meet privacy laws such as PIPEDA, Quebec Law 25, COPPA, and US state laws.

4. How we use it

• Run the app and sync your data across devices.
• Share your goals and mental check-ins with the coaches on teams you've explicitly joined.
• Send you notifications you've opted into (e.g. a Sunday check-in nudge).
• Generate sport-specific content (quotes, photos, mental-skill suggestions) using AI.
• Debug, secure, and improve the product.
• Comply with legal obligations and respond to lawful requests.

5. Who can see your data

Coaches on teams you've joined can see the goals and check-ins you've logged while a member of that team. You can leave a team anytime to revoke that access. We do not sell your personal information, we do not share it for cross-context behavioural advertising, and we do not show third-party ads.

6. Sub-processors

We use the following service providers to operate Ignite. Each is bound by a data-processing agreement:

• Supabase (database, authentication, storage) — primary data store.
• Lovable Cloud (hosting + AI Gateway) — runs the app and generates sport-specific content.
• Google — optional OAuth sign-in.
• Cloudflare — edge network and DDoS protection.

7. Where we store it & cross-border transfers

Your data is stored with our backend provider and may be processed on servers in the United States. Canadian users — including users in Quebec — acknowledge that their personal information may be transferred to and processed in the US, which has different privacy laws than Canada. We use contractual safeguards with all sub-processors to protect your data during transfer.

8. Retention

• Account profile — kept until you delete your account.
• Check-ins, goals, training logs — kept while your account is active; deleted within 30 days of account deletion.
• Team memberships — removed when you leave a team; coaches retain a record of historic check-ins logged during your time on the team unless you ask us to delete them.
• Technical/error logs — kept up to 90 days.

9. Your rights

Regardless of where you live, you can:

• Access a copy of your data (CSV/JSON export).
• Correct inaccurate information via your profile.
• Delete your account and associated data.
• Withdraw consent for coach visibility by leaving a team.
• Object or restrict processing of your information.
• Appeal a decision by replying to our privacy email.

Do Not Sell or Share My Personal Information: we do not sell or share your personal information for cross-context behavioural advertising. There is nothing to opt out of, but you have the right to confirm this and request that we do not change this position.

To exercise any right, email privacy@ignitegoals.app. We respond within 30 days (45 days for complex requests, with notice).

10. Minors

Ignite is not for children under 13. We block accounts for users under 13 at signup. For users aged 13–17, we collect a parent/guardian email and notify them of the account. We minimise what we collect from minors and limit visibility to coaches on teams the minor has joined.

11. Security

Data is protected with row-level security so only authorised accounts can read it. We use encrypted connections, breached-password checks at signup, rate limits on sensitive operations, and defence-in-depth permission checks in code. No system is perfectly secure — if a breach affects you, we will notify you and the appropriate regulator (in Canada, the Office of the Privacy Commissioner) as required by law.

12. Cookies & tracking

We use only the cookies and local storage required to keep you signed in. We do not use third-party analytics or advertising cookies. If we add analytics in the future, we will update this Policy and offer a clear opt-out.

13. Changes

If we make material changes we will update the version above and notify you in-app or by email. Continued use after the effective date means you accept the updated Policy.

14. Contact

Privacy Officer · privacy@ignitegoals.app
General support · hello@ignitegoals.app