Privacy Policy
Last updated: 2025. GDPR / DSGVO compliant.
1. Controller
2. Data We Collect
We collect the following categories of data when you use powrplays:
- Account data: Email address and password (hashed) when you register.
- Usage data: Pages visited, features used, session duration (anonymised via Vercel Analytics — no cookies, no persistent identifiers).
- Video files: Videos you upload for biomechanical analysis. These are processed and stored securely, then deleted after analysis delivery unless you choose to save them.
- AI coaching sessions: Text exchanges with the AI coach, stored to provide session history and personalisation.
- Payment data: Processed via Stripe. We do not store full card details.
3. Legal Basis (GDPR Art. 6)
- Contract fulfilment (Art. 6 I lit. b): Account, video analysis, coaching sessions.
- Legitimate interest (Art. 6 I lit. f): Anonymised usage analytics to improve the product.
- Consent (Art. 6 I lit. a): Any optional communications (newsletters, product updates).
4. Hosting & Infrastructure
powrplays is hosted on Vercel Inc. (440 N Barranca Ave #4133, Covina, CA 91723, USA). Data transfer to the USA is covered by standard contractual clauses (SCCs) pursuant to Art. 46 GDPR.
Vercel Analytics is used for anonymised, cookie-free traffic analysis. No personal data is transmitted; no IP addresses are stored. See Vercel Privacy Policy.
5. Video Data Retention
Uploaded videos are processed immediately and deleted from our servers within 30 days unless you explicitly save them to your account. Analysis reports (PDFs) are retained for the duration of your account.
6. Your Rights (GDPR)
You have the right to:
- Access your personal data (Art. 15 GDPR)
- Rectify incorrect data (Art. 16 GDPR)
- Erasure ("right to be forgotten") (Art. 17 GDPR)
- Restrict processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Object to processing (Art. 21 GDPR)
- Withdraw consent at any time without affecting prior processing
To exercise your rights, contact: hello@powrplays.com
7. Complaints
You have the right to lodge a complaint with the supervisory authority responsible for your place of residence, place of work, or place of the alleged infringement. For Germany: your state data protection authority (Landesdatenschutzbeauftragter).
8. Changes
We may update this policy as our product evolves. We will notify registered users of material changes via email. The current version is always available at powrplays.com/privacy.