Privacy Policy

1. Overview

Derived Athletics, LLC ("we," "us," or "our") operates FencR. This Privacy Policy explains how we collect, use, store, and share information about you when you use our platform. By using FencR, you agree to the practices described here. If you are a parent or guardian creating an account for a minor, this policy also applies to the information you provide on their behalf.

2. Information We Collect

Information you provide directly:

• Account information: name, email address, password.
• Profile information: date of birth, profile photo.
• Payment information: billing details processed via Stripe (we do not store raw card numbers).
• Club and schedule data entered by coaches and administrators.
• Communications you send us (support requests, feedback).

Information collected automatically:

• Log data: IP address, browser type, pages visited, timestamps.
• Device information: operating system, device identifiers.
• Usage data: features accessed, actions taken within the platform.
• Cookies and similar tracking technologies (see Section 7).

Information from third parties:

• If you sign in with Google or Apple, we receive your name and email from those providers.
• Payment and transaction data from Stripe.

3. How We Use Your Information

We use the information we collect to:

• Create and manage your account and authenticate you.
• Provide and improve the FencR platform and its features.
• Process payments and send billing-related communications.
• Send transactional emails (booking confirmations, invoices, reminders).
• Respond to support requests and communicate with you about your account.
• Detect, investigate, and prevent fraud or policy violations.
• Comply with legal obligations.
• Analyze usage to improve performance and develop new features.

We do not sell your personal data to third parties. We do not use your data for targeted advertising.

4. How We Share Your Information

We may share your information with:

• Your club or organization: Club administrators and coaches can see member profiles, booking history, and payment status for members of their organization.
• Service providers: Third-party vendors who help us operate the platform (Supabase for database/auth, Stripe for payments, Vercel for hosting). These providers only access your data to perform services on our behalf.
• Law enforcement or legal process: If required by law, court order, or to protect the rights, property, or safety of FencR, its users, or the public.
• Business transfers: In connection with a merger, acquisition, or sale of assets, in which case user data may be transferred as a business asset with prior notice to affected users.

5. Children's Privacy

FencR allows clubs to manage minor athletes with parent or guardian consent. We do not knowingly collect personal information directly from children under 13 without verifiable parental consent. Minor accounts are linked to a parent's account, and parents retain control over their child's data, including the ability to view, update, or delete it.

If you believe we have inadvertently collected information from a child under 13 without proper consent, please contact us at info@derivedathletics.com and we will delete it promptly.

6. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the service. If you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain it for legal or accounting purposes (for example, billing records may be retained for up to 7 years). De-identified or aggregated data may be retained indefinitely.

7. Cookies

FencR uses cookies and similar technologies to maintain your session, remember your preferences, and analyze platform usage. Strictly necessary cookies (for authentication and security) cannot be disabled. You can control non-essential cookies through your browser settings, though disabling them may affect platform functionality.

8. Data Security

We implement industry-standard security measures including encryption in transit (TLS), encryption at rest, row-level security in our database, and access controls limiting who can view your data. No method of transmission over the internet is 100% secure, however, and we cannot guarantee absolute security. Please notify us immediately at info@derivedathletics.com if you suspect unauthorized access to your account.

9. Your Rights and Choices

Depending on your location, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete information.
• Delete your account and associated personal data.
• Portability — receive a copy of your data in a structured format.
• Object to processing in certain circumstances.
• Withdraw consent where processing is based on consent.

To exercise these rights, go to your account settings or contact us at info@derivedathletics.com. We will respond within 30 days.

10. International Transfers

FencR is operated in the United States. If you access the platform from outside the US, your data will be transferred to and processed in the United States. By using FencR, you consent to this transfer. We rely on standard contractual clauses and other lawful mechanisms for transfers from the European Economic Area where applicable.

11. Third-Party Links

FencR may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties and encourage you to review their privacy policies before providing any personal information.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy and revising the effective date. We encourage you to review this page periodically. Continued use of FencR after changes are posted constitutes your acceptance of the revised policy.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact: