Privacy

Priveo holds health information about athletes, some of whom are children. That is the most sensitive category of personal data there is, and this page is written on the assumption that you will be asked to justify using us.

What we store

• About you (the practitioner): your email address, your practice name, and your billing record with Stripe. That is all.
• About athletes: name, date of birth, position, body mass, and the clinical data you enter — daily check-ins, session loads, strength tests, injuries and rehab progress.
• What we never ask for: addresses, phone numbers, national identifiers, medical record numbers, photographs, or GPS location.

We do not train anything on your data

There is no machine learning in Priveo, so there is nothing to train. Every clinical output is a deterministic calculation against published thresholds. Your squad’s data is not a product input, it is not sold, and it is not shared with advertisers.

Anonymous benchmarks

If we ever show you how your squad compares to others, the comparison is built from cohort statistics only — no athlete, practice or date is stored in it, and a cohort is never published unless it contains at least 25 practices. Below that threshold no number is shown at all, because a small cohort can be reverse-engineered back to a person.

Where it lives

On Supabase infrastructure in the EU (Frankfurt), and served through Vercel. Every row is protected by row-level security in the database itself, so a practice can only ever read its own athletes — not as an application rule that could be bypassed, but as a database rule that applies to every query.

Who else touches it

A short list, named in full on the sub-processors page. We do not add one without updating that page.

Errors and analytics

• Error reports are scrubbed before they leave your browser. Names, emails, pain sites, wellness scores, diagnoses, notes and tokens are stripped, and session replay is switched off entirely.
• Product analytics record events as numbers and true/false values only. No free text, no identifiers, no session recording, and no automatic capture of what you clicked.

How long we keep it

Clinical records are kept while your practice is active, because a rehab history two seasons old is exactly the history that matters. Athletes you archive are retained and then removed on a fixed schedule. When you delete your practice, the athlete records go with it.

Getting your data out, and getting it deleted

Every athlete’s complete record exports as JSON from inside the app, at any time, including after you cancel. Deletion can be requested from your settings and is recorded and actioned — you do not have to email anyone and wait.

Athletes’ own rights

An athlete consents when they accept their invite, and the consent version is stored with the timestamp. They can ask you, or us, for a copy of their record or for it to be deleted. Where an athlete is a minor, that consent is the club’s and the guardian’s to obtain — Priveo records it, it does not replace it.

Contact

Get in touch and a person answers. There is no ticket queue.