Privacy Policy

1. What we collect

• Your contact details. Name, email and, if you give it, phone number.
• What you tell us on the forms. On the intake form: sport, position, level, age range, your goals, your training load, and anything you write about injuries or concussion history. On the coaching form: why you are interested and what you need.
• Your purchase. Which plan, when, and the amount. Card details go straight to Stripe. We never see or store a full card number.
• Your training data. Scores and session history, held on the NeuroTracker platform.
• Standard server logs from our host, including IP address and browser type.

We do not run advertising trackers or third-party analytics on this site.

2. Health information you volunteer

The intake form asks about concussion history, vision and injuries, because it changes how a program is built. You do not have to answer. If you do, we treat those answers as sensitive, use them only to build and adjust your program, and do not sell or share them for advertising.

We are not a healthcare provider and this is not medical record keeping.

3. Why we hold it

• To give you the service you paid for and build your programs.
• To take payment and handle refunds.
• To contact you about your account, your build, or your booking.
• To keep the records the law requires us to keep.

4. Who else sees it

We use these companies to run the service. They only get what they need to do their part.

• Stripe. Takes payment and stores card details. We never see or store a full card number.
• Vercel. Hosts this website and records standard server logs, including IP addresses.
• Supabase. Stores your account, your plan, and the answers you give us on the intake and coaching forms.
• NeuroTracker. Runs the training platform itself and holds your training scores and session history.
• GoHighLevel. Sends email and SMS, and holds your contact details for scheduling and follow-up.

We do not sell your personal information. We do not share it for cross-context behavioural advertising.

5. Children

Accounts are for adults. If the trainee is under 18, the account must belong to a parent or guardian, who provides any information about the child and supervises the training.

We do not knowingly collect personal information directly from a child under 13. If you believe a child has given us information on their own, email contactus@aibewellthy.com and we will delete it.

6. How long we keep it

We keep your account and program information while you are a customer and for [RETENTION PERIOD, e.g. 2 years] afterwards, so we can answer questions and reinstate access. Payment records are kept as long as tax and accounting law requires.

7. Your rights

Email contactus@aibewellthy.com and we will, within a reasonable time and free of charge:

• tell you what we hold about you,
• correct anything wrong,
• delete it, except what we must keep by law,
• send you a copy.

Deleting your data ends your access, because the account is the data.

If you are in California, the EU or the UK, you have additional rights under your own law. [CONFIRM WHETHER YOU SELL OUTSIDE THE US, THEN HAVE A LAWYER ADD THE RIGHT CCPA / GDPR SECTION]

8. Security

The site runs over HTTPS and our database is locked so that only our own server can read or write it. No system is perfectly secure, and we will not pretend otherwise. If a breach affects you, we will tell you.

9. Changes

If we change this policy in a way that matters, we will tell account holders by email before it takes effect.