This Privacy Policy explains how LVL·UP Tennis ("we", "us", "our") collects, uses, and protects information when you use the LVL·UP coaching planner ("the Service"). We take your privacy seriously and will never sell your data.
We collect the following information when you use the Service:
We do not use your coaching data for any purpose other than delivering the Service to you.
Your account and coaching data is stored securely using Supabase, a hosted database platform. Data is encrypted in transit and at rest. Supabase infrastructure is hosted on AWS and complies with SOC 2 standards.
Some data is also stored locally on your device using your browser's localStorage for offline functionality. If you set a location for the weather card, its place name and coordinates are saved in your account settings and synced to your other devices.
Injury and health information may constitute special-category personal data under the EU/UK GDPR and equivalent privacy frameworks. Because of this, the full injury log (diagnosis, severity, notes, return-to-play) is available only for players you have explicitly confirmed as 18 years of age or older in their profile.
The full injury log is disabled at the application level for any player who has not been marked as 18+. For an under-18 player, LVL·UP stores limited injury information only with the parent or guardian's consent:
Each time a coach saves or changes a restriction, the app prompts the coach to send the parent a copy. This opens the coach's own email app — LVL·UP itself sends nothing. If the copy is not sent, the coach sees a reminder after 24 hours. A restriction record is visible only to the coach who entered it; on club accounts it is not shown to the club director or to other coaches. The parent can ask for any restriction to be deleted at any time by replying to the coach or emailing hello@lvluptennis.com. The coach can delete it at any time. A cleared restriction is deleted automatically 12 months after it is cleared.
As the coach using the Service, you are the data controller for information about your players, including the obligation to obtain any consent required under applicable law (such as GDPR Art. 9 for special-category data, GDPR-K parental-consent requirements, or US state privacy laws). LVL·UP acts as a data processor on your behalf for that data.
We use the following sub-processors to operate LVL·UP. Each is named, with its country of operation and purpose:
Where your data is held. The primary database, including every player record, is hosted by Supabase on Amazon Web Services in the United States (us-east-2, Ohio). It is not hosted in the European Union. Data is encrypted in transit (TLS) and at rest.
International transfers. If you are in the EEA, the UK or Switzerland, your personal data and the player data you enter are transferred to the United States. Each transfer is made under the European Commission’s Standard Contractual Clauses (and, for UK data, the UK International Data Transfer Addendum) as incorporated in the relevant sub-processor’s data processing agreement: Supabase (database), Anthropic (the voice assistant in Section 4a, two accounts only), Netlify (hosting) and Lemon Squeezy (billing). Encryption in transit and at rest, row-level access controls and the data-minimisation rules in Section 1 are the supplementary measures. Copies of each sub-processor’s clauses are available from the privacy pages linked above or from us on request.
Service providers outside Canada. LVL·UP is operated from Alberta, Canada. Under the Alberta Personal Information Protection Act (s. 13.1) and PIPEDA we tell you that personal information is stored and processed by service providers located in the United States, as listed above, for the purposes described in this Policy. While outside Canada it is subject to the laws of that country, including lawful access by courts, law enforcement and national-security authorities there. Questions about this go to hello@lvluptennis.com.
Revision note, 6 October 2026: earlier versions of this Policy described the primary database as EU-hosted. That was incorrect; the database has been hosted in the United States. The description above is accurate as of the date shown.
Revision note, 11 October 2026: earlier versions of this Policy described two buttons, "AI Draft" on a development-plan milestone and "Suggest a draft" on a Player Update, that sent coaching data to Anthropic when a coach tapped them. Both were removed from LVL·UP on 11 October 2026. Earlier versions did not describe the voice assistant, which has run on the owner’s own account since 5 October 2026; Sections 4 and 4a now do.
No feature available to coaches sends data to an AI provider. LVL·UP has one AI feature: a voice assistant that is not offered to coaches. It is switched on only for the coaching account of LVL·UP’s owner and one coach testing it at the owner’s invitation; for every other account the server refuses it before anything is sent. On those two accounts, when the account holder speaks to it, what they say and the data from their own account it needs to answer (listed in Section 4) are sent through a Netlify Function to Anthropic’s API, which returns the spoken reply. No other account’s data is ever sent. Anthropic’s API does not train on submitted data by default.
LVL·UP sets no cookies. Your sign-in is kept in your browser’s local storage on that device and is cleared when you sign out. Visit analytics (Umami) are cookieless. We do not use advertising or tracking cookies. Lemon Squeezy, which runs checkout, may set its own cookies on its checkout pages under its own policy.
If you are located in the EEA, the UK, or another jurisdiction with equivalent data-protection law, you have the right to:
To exercise any of these rights, email us at hello@lvluptennis.com and we will respond within 30 days.
We retain your data for as long as your account is active. If you delete your account, your data is removed from our systems within 30 days, except where we are required to retain it for legal or financial compliance purposes.
LVL·UP accounts are for coaches (adults) only — you must be 18 or older to register. We do not knowingly collect personal information directly from children.
Player profiles created by coaches may include junior players' names, sex (male / female, used to compare results with the right professional averages) and basic coaching information. This data is entered by the coach in their capacity as data controller, and the coach is responsible for obtaining any consent required by applicable law (including GDPR Art. 8 parental-consent requirements where relevant) and for managing this data appropriately.
As described in Section 3a, the full injury log is only available for players the coach has confirmed as 18 or over. For an under-18 player, the Service stores only a restriction record (no diagnosis) and off-court injury details, and only with the parent or guardian's consent. These controls sit at the application level and apply regardless of jurisdiction.
US COPPA notice: LVL·UP is not directed at children under 13 and does not collect personal information directly from them. For a full explanation of how information about under-13 players is handled, parental rights under COPPA, and our verifiable consent process, see our Children's Privacy Notice (COPPA).
Parents and guardians (EU/UK): For GDPR-specific rights regarding your child's data, see the Junior Player Privacy Notice.
We may update this Privacy Policy from time to time. We will notify you by email or in-app notice before material changes take effect. Continued use of the Service after changes constitutes acceptance.
Questions about this Privacy Policy? Email us at hello@lvluptennis.com
LVL·UP Tennis is operated by Robert Senic, Beaumont, Alberta, Canada.