Privacy Policy
Effective date: July 13, 2026
This Privacy Policy explains how VolleyLab ("VolleyLab", "we", "us", or "our") collects, uses, discloses, and safeguards information when you use volleylab.pro, the VolleyLab web and installable (PWA) application, and related services (collectively, the "Service"). By using the Service you agree to this Policy. If you do not agree, please do not use the Service.
1. Who we are & data controller
VolleyLab is the data controller for personal data processed through the Service. You can contact us at hello@volleylab.pro for any privacy-related request.
2. Information we collect
- Account data: name, email address, authentication identifiers (e.g. Google OAuth ID), profile settings.
- Training data you provide: position, level, goals, equipment, program preferences, coaching prompts, jump metrics, and any content you submit to the AI coach.
- Subscription & billing data: handled by our payment processor (Stripe). We store subscription status and internal IDs; we never store full card numbers.
- Device & usage data: browser type, operating system, language, pages viewed, referring URL, approximate location derived from IP, timestamps, and diagnostic logs.
- Push notification data: if you opt in, we store your browser's push subscription endpoint and per-device preferences.
- Cookies & similar technologies: see Section 7.
3. How we use your information
- Provide, operate, personalize, and maintain the Service.
- Generate personalized training programs, AI responses, and content recommendations.
- Process subscriptions, invoices, refunds, and prevent fraud.
- Send transactional emails and, if enabled, push notifications for training reminders and new blog content.
- Improve reliability, security, and user experience through analytics.
- Comply with legal obligations and enforce our Terms of Service.
4. Legal bases (GDPR / UK GDPR)
We rely on the following legal bases: (a) performance of a contract with you; (b) your consent (for optional cookies, marketing, and push notifications); (c) our legitimate interests in operating and securing the Service; and (d) compliance with legal obligations.
5. Sharing your information
We do not sell your personal data. We share data only with:
- Service providers ("sub-processors"): hosting and database (Supabase / Cloudflare), payments (Stripe), AI model providers used to generate coaching responses, analytics (Google Analytics), consent management (iubenda), and push infrastructure. Each is bound by contractual data-protection terms.
- Legal & safety: when required by law, subpoena, or to protect the rights, property, or safety of VolleyLab, our users, or others.
- Business transfers: in connection with a merger, acquisition, or asset sale, subject to standard confidentiality protections.
6. International transfers
Your data may be processed in countries outside your own, including the United States and the European Union. Where required, we rely on Standard Contractual Clauses or equivalent safeguards.
7. Cookies & tracking
We use strictly necessary cookies to operate the Service and, subject to your consent, analytics and functional cookies. You can manage preferences at any time via the cookie banner powered by iubenda.
8. Data retention
We retain personal data for as long as your account is active and as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. You may request deletion at any time (see Section 10).
9. Security
We use industry-standard technical and organizational measures including TLS in transit, encrypted storage at rest, row-level security on our database, scoped API keys, and least-privilege access controls. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.
10. Your rights
Depending on your jurisdiction (including GDPR, UK GDPR, and CCPA/CPRA), you may have the right to access, correct, delete, port, restrict, or object to processing of your personal data, and to withdraw consent at any time. To exercise these rights, email hello@volleylab.pro. You also have the right to lodge a complaint with your local data protection authority.
11. Children's privacy
The Service is not directed to children under 13 (or under 16 in the EEA/UK) and we do not knowingly collect personal data from them. If you believe a child has provided us data, contact us and we will delete it.
12. AI-generated content
Portions of the Service use large language models to generate coaching plans, blog posts, and drills. AI output may be inaccurate or incomplete; do not rely on it as medical, health, or professional advice. Always consult a qualified professional before starting any new training program.
13. Changes to this Policy
We may update this Policy from time to time. Material changes will be posted on this page with a new effective date; where required, we will notify you by email or in-app notice.
14. Contact
Questions or requests? Email hello@volleylab.pro.
