Privacy Policy

We collect information from multiple sources, including directly from users, from connected third-party services (such as WHOOP), and automatically through your use of the Services.

We collect and process your data based on the following grounds:

• Your explicit consent: for health and wearable data, including all WHOOP data. You provide this consent during onboarding when connecting your WHOOP account and agreeing to data storage. Consent can be withdrawn at any time by deleting your account.
• Contract performance: for account information, subscription management, and service delivery necessary to provide the Services you have signed up for.
• Legitimate interests: to detect, prevent, and address fraud, security breaches, and misuse of the platform.
• Legal obligation: for retaining payment records as required by applicable tax and accounting law.

All data protection enquiries should be directed to info@sportsvector.co.

Sports Vector LLC uses collected information for the following purposes:

• To provide, operate, and improve the Services
• To generate athlete readiness, workload, and consistency insights
• To support coaching decision-making and performance monitoring
• To personalise dashboards and user experience
• To manage subscriptions and process payments
• To communicate service updates, security notices, and support messages
• To maintain platform security and prevent misuse
• To comply with legal and regulatory obligations

We do not use wearable or biometric data for advertising or marketing purposes.

Vector Connect supports organisation-based coaching. The following rules govern how coach and player data interact:

• Players must explicitly opt in to sharing their data with a coach by joining a team during onboarding. This is a separate consent action, distinct from creating a Vector Connect account.
• Coaches may view the recovery scores, sleep metrics, strain data, and derived analytics of players who have actively joined their team. Coaches may not access data from players outside their team.
• Players can withdraw at any time by leaving their team, which removes their data from the coach's dashboard view.
• Coaches are responsible for ensuring they have a lawful basis to process player data within their own coaching practice. Sports Vector LLC processes player data on behalf of coaches solely to deliver the Vector Connect service. Coaches may request a Data Processing Agreement (DPA) by contacting info@sportsvector.co.

Sports Vector LLC does not sell personal, wearable, or biometric data. Information may be shared only in the following circumstances:

• With your team's coach: as described in Section 4 above, subject to your explicit opt-in consent during onboarding.
• With service providers (sub-processors): we share data with trusted infrastructure partners who process data solely on our behalf and are bound by confidentiality and data protection obligations. Our current sub-processors are:
  • Supabase Inc. (United States) — database hosting, authentication, and row-level security
  • Railway Corp. (United States) — application hosting and deployment
  • Lemon Squeezy (United States) — subscription and payment processing

  For material changes to this sub-processor list, we will give you 30 days' notice via email or in-app notification and an opportunity to object before the change takes effect.

• With your explicit consent or at your direction
• When required by law, regulation, or valid legal process

Vector Connect integrates with WHOOP via the official WHOOP API. In compliance with the WHOOP API Terms of Use:

• WHOOP data is accessed only with your explicit OAuth authorisation
• WHOOP data is never sold, sublicensed, leased, or shared with third parties beyond what is strictly necessary to deliver the Vector Connect service
• WHOOP data is not used in any advertisements
• Sports Vector LLC is not affiliated with, endorsed by, or a replacement for WHOOP

Sports Vector LLC is based in Qatar. Our sub-processors (Supabase, Railway, Lemon Squeezy) operate primarily in the United States. When your data is transferred outside Qatar, we ensure adequate protections are in place by working only with providers that maintain appropriate data protection and security standards. You may request details of the safeguards we rely on by contacting info@sportsvector.co.

Sports Vector LLC retains data only for as long as necessary to provide the Services or meet legal requirements. Specific retention periods are as follows:

• Account, WHOOP, and derived analytics data: retained while your account is active and deleted within 30 days of account deletion.
• OAuth access tokens: revoked and deleted upon account deletion or WHOOP disconnection.
• Anonymised usage data: may be retained indefinitely as it cannot identify you.

Depending on your location and applicable law, you may have the following rights regarding your personal data:

• Access: request a copy of the personal data we hold about you
• Rectification: correct inaccurate or incomplete data
• Erasure: request deletion of your personal data
• Data portability: receive your data in a structured, machine-readable format
• Withdraw consent: withdraw consent for health data processing at any time, without affecting the lawfulness of prior processing
• Restrict processing: request that we limit how we use your data

Self-service deletion: you can delete your account and all associated data directly from Settings → Delete Account within Vector Connect. Deletion is permanent and irreversible. All WHOOP data, profile information, derived analytics, and OAuth tokens are removed immediately. Payment records are retained for the legally required period.

To exercise any right, contact us at info@sportsvector.co. We will respond within one calendar month.

The Services are not intended for children under the age of 16 without verified parental or guardian consent. If we become aware that data has been collected from a child without proper consent, we will take steps to delete it promptly. Coaches who work with players under 16 are responsible for obtaining appropriate parental or guardian consent before those players join their team on Vector Connect.

In the event of a personal data breach, Sports Vector LLC will notify WHOOP at apisupport@whoop.com as soon as possible, in accordance with the WHOOP API Terms of Use §2.4.

Our Services integrate with third-party platforms such as WHOOP and Lemon Squeezy. You are responsible for reviewing the privacy policies of those third-party services. Sports Vector LLC cannot control or be held liable for the data practices of third parties.

We may update this Privacy Policy periodically. Changes will be posted with a revised "Last Updated" date. For material changes, we will notify you via email or an in-app notification at least 14 days before they take effect. Continued use of the Services after updates constitutes acceptance of the revised policy.