Sports Vector LLC ("we", "our", or "us") is a technology company based in Doha, Qatar (QSTP, Doha, Qatar). We provide software tools to help coaches, teams, and athletes gain performance insights from wearable and training data. Our platform, Vector Connect, enables coaches and players to connect wearable devices, visualise health metrics, and make data-informed decisions around training and recovery.
We are committed to protecting your privacy and handling your information in a transparent, secure, and responsible manner. This Privacy Policy explains how we collect, use, store, share, and protect information when you access or use Vector Connect, its integrations (including WHOOP), website, and related services (collectively, the "Services").
By using our Services, you acknowledge and consent to the collection and use of your information as described in this Privacy Policy.
01 Information We Collect
We collect information from multiple sources, including directly from users, from connected third-party services (such as WHOOP), and automatically through your use of the Services.
1.1 Personal Information
- Full name
- Email address
- Account login credentials
- User role (e.g., coach, player)
1.2 Athlete and Team Information
- Team names and affiliations
- Athlete profiles and identifiers
- Training schedules and session metadata
- Coach-entered notes or annotations
1.3 WHOOP and Wearable Data
If you choose to connect your WHOOP account, Sports Vector LLC accesses and processes data made available through the WHOOP API, subject to your explicit authorisation via the WHOOP OAuth flow. This data may include:
- Recovery score, resting heart rate, and heart rate variability (HRV)
- Sleep duration, sleep stages, and start/end times
- Day strain and accumulated workout strain
- Activity type and training session data
- WHOOP profile information (username, display name)
- Body measurements (height, weight, maximum heart rate)
To power the Vector Connect dashboard, this data is stored on our secure cloud servers (Supabase) and retained for as long as your account is active. We also store the OAuth access token provided by WHOOP to enable ongoing data synchronisation. Neither your WHOOP login credentials nor your WHOOP password are ever shared with or accessible to Sports Vector LLC.
WHOOP data is accessed and stored solely for the purpose of generating performance insights, readiness indicators, and workload context for athletes and coaches.
1.4 Derived and Computed Analytics
From raw wearable data, Vector Connect generates derived analytics including trend analyses, rolling averages, recovery zone classifications, training load calculations (e.g., ACWR), consistency ratings, and performance readiness scores. These derived insights are classified as sensitive health data and subject to the same protections as raw wearable data. They are deleted alongside source data when your account is deleted.
These analytics are informational only. Coaches review all analytics before acting on them; Sports Vector LLC does not make automated decisions with significant effects on users.
1.5 Payment Information
Subscription payments for Vector Connect are processed by Lemon Squeezy. We do not store credit card numbers or bank details on our servers. Lemon Squeezy processes your payment information in accordance with PCI DSS standards. We receive only your subscription status, customer reference, and billing email from Lemon Squeezy.
1.6 Infrastructure Logs
Our hosting provider (Railway Corp.) retains standard HTTP server logs (request timestamps, IP addresses) as part of normal infrastructure operations. Sports Vector LLC does not access, process, or store this data in our application database.
1.7 User-Submitted Content
This includes any files, documents, images, text, or other content voluntarily uploaded or entered into the platform.
02 Legal Basis for Processing
We collect and process your data based on the following grounds:
- Your explicit consent: for health and wearable data, including all WHOOP data. You provide this consent during onboarding when connecting your WHOOP account and agreeing to data storage. Consent can be withdrawn at any time by deleting your account.
- Contract performance: for account information, subscription management, and service delivery necessary to provide the Services you have signed up for.
- Legitimate interests: to detect, prevent, and address fraud, security breaches, and misuse of the platform.
- Legal obligation: for retaining payment records as required by applicable tax and accounting law.
All data protection enquiries should be directed to info@sportsvector.co.
03 How We Use Your Information
Sports Vector LLC uses collected information for the following purposes:
- To provide, operate, and improve the Services
- To generate athlete readiness, workload, and consistency insights
- To support coaching decision-making and performance monitoring
- To personalise dashboards and user experience
- To manage subscriptions and process payments
- To communicate service updates, security notices, and support messages
- To maintain platform security and prevent misuse
- To comply with legal and regulatory obligations
We do not use wearable or biometric data for advertising or marketing purposes.
04 Coach and Player Data Relationship
Vector Connect supports organisation-based coaching. The following rules govern how coach and player data interact:
- Players must explicitly opt in to sharing their data with a coach by joining a team during onboarding. This is a separate consent action, distinct from creating a Vector Connect account.
- Coaches may view the recovery scores, sleep metrics, strain data, and derived analytics of players who have actively joined their team. Coaches may not access data from players outside their team.
- Players can withdraw at any time by leaving their team, which removes their data from the coach's dashboard view.
- Coaches are responsible for ensuring they have a lawful basis to process player data within their own coaching practice. Sports Vector LLC processes player data on behalf of coaches solely to deliver the Vector Connect service. Coaches may request a Data Processing Agreement (DPA) by contacting info@sportsvector.co.
05 Data Sharing and Disclosure
Sports Vector LLC does not sell personal, wearable, or biometric data. Information may be shared only in the following circumstances:
- With your team's coach: as described in Section 4 above, subject to your explicit opt-in consent during onboarding.
- With service providers (sub-processors): we share data with trusted infrastructure partners who process data solely on our behalf and are bound by confidentiality and data protection obligations. Our current sub-processors are:
- Supabase Inc. (United States) — database hosting, authentication, and row-level security
- Railway Corp. (United States) — application hosting and deployment
- Lemon Squeezy (United States) — subscription and payment processing
- With your explicit consent or at your direction
- When required by law, regulation, or valid legal process
06 WHOOP Compliance
Vector Connect integrates with WHOOP via the official WHOOP API. In compliance with the WHOOP API Terms of Use:
- WHOOP data is accessed only with your explicit OAuth authorisation
- WHOOP data is never sold, sublicensed, leased, or shared with third parties beyond what is strictly necessary to deliver the Vector Connect service
- WHOOP data is not used in any advertisements
- Sports Vector LLC is not affiliated with, endorsed by, or a replacement for WHOOP
07 International Data Transfers
Sports Vector LLC is based in Qatar. Our sub-processors (Supabase, Railway, Lemon Squeezy) operate primarily in the United States. When your data is transferred outside Qatar, we ensure adequate protections are in place by working only with providers that maintain appropriate data protection and security standards. You may request details of the safeguards we rely on by contacting info@sportsvector.co.
08 Data Retention
Sports Vector LLC retains data only for as long as necessary to provide the Services or meet legal requirements. Specific retention periods are as follows:
- Account, WHOOP, and derived analytics data: retained while your account is active and deleted within 30 days of account deletion.
- OAuth access tokens: revoked and deleted upon account deletion or WHOOP disconnection.
- Anonymised usage data: may be retained indefinitely as it cannot identify you.
09 User Rights
Depending on your location and applicable law, you may have the following rights regarding your personal data:
- Access: request a copy of the personal data we hold about you
- Rectification: correct inaccurate or incomplete data
- Erasure: request deletion of your personal data
- Data portability: receive your data in a structured, machine-readable format
- Withdraw consent: withdraw consent for health data processing at any time, without affecting the lawfulness of prior processing
- Restrict processing: request that we limit how we use your data
Self-service deletion: you can delete your account and all associated data directly from Settings → Delete Account within Vector Connect. Deletion is permanent and irreversible. All WHOOP data, profile information, derived analytics, and OAuth tokens are removed immediately. Payment records are retained for the legally required period.
To exercise any right, contact us at info@sportsvector.co. We will respond within one calendar month.
10 Children's Privacy
The Services are not intended for children under the age of 16 without verified parental or guardian consent. If we become aware that data has been collected from a child without proper consent, we will take steps to delete it promptly. Coaches who work with players under 16 are responsible for obtaining appropriate parental or guardian consent before those players join their team on Vector Connect.
11 Data Breach Notification
In the event of a personal data breach, Sports Vector LLC will notify WHOOP at apisupport@whoop.com as soon as possible, in accordance with the WHOOP API Terms of Use §2.4.
12 Third-Party Services
Our Services integrate with third-party platforms such as WHOOP and Lemon Squeezy. You are responsible for reviewing the privacy policies of those third-party services. Sports Vector LLC cannot control or be held liable for the data practices of third parties.
13 Changes to This Privacy Policy
We may update this Privacy Policy periodically. Changes will be posted with a revised "Last Updated" date. For material changes, we will notify you via email or an in-app notification at least 14 days before they take effect. Continued use of the Services after updates constitutes acceptance of the revised policy.
14 Contact Information
Sports Vector LLC
QSTP, Doha, Qatar
info@sportsvector.co
This Privacy Policy is effective as of May 13, 2026 and governs your use of Sports Vector LLC's Services.