Privacy Policy

We use the information we collect to: • Provide, maintain, and improve the Service • Process your membership subscription and manage your account • Deliver AI-powered fencing analysis features (Club membership and above) • Send transactional emails: account confirmation, membership receipts, expiry notices • Respond to support requests and feedback • Monitor for fraud, abuse, and security incidents • Analyze aggregate usage patterns to improve app features and user experience • Comply with applicable laws and legal obligations We do not use your video footage or private notes for any purpose other than delivering the Service to you, unless you explicitly grant permission.

We do not sell your personal information. We do not share your payment information, video footage, or private notes with third parties except as described below. We may share information with: • Service providers who assist us in operating the Service (cloud hosting, video processing, payment processing, email delivery). These providers are contractually bound to use your data only as directed by us. • Marketing and promotional partners: We may share your email address with carefully selected partners for relevant fencing-related marketing and promotional communications. You may opt out of such sharing at any time by updating your notification preferences in Settings or by emailing us at privacy@fencingvault.app. • Analytics providers: We share anonymized, aggregated usage data to understand how the Service is used and to improve it. • Law enforcement or government authorities: when required by law, court order, or to protect the rights and safety of this application, its users, or the public. • In connection with a merger, acquisition, or sale of assets: your information may be transferred as part of that transaction. We will notify you prior to any such transfer. We never share your uploaded video footage unless you explicitly use the in-app sharing feature to share a specific video.

We use the following subprocessors to operate the Service. Each acts under contract solely to provide its named function and is bound by data-processing terms consistent with this Privacy Policy. Amazon Web Services (AWS) — cloud infrastructure provider: • AWS Cognito — user account authentication and password management • AWS S3 — encrypted storage of uploaded videos and profile images • AWS CloudFront — content-delivery network used to serve videos and images • AWS MediaConvert — video transcoding for cross-device playback • AWS Lambda — background processing jobs (notifications, scheduled tasks) • AWS SES — transactional and marketing email delivery Supabase — managed PostgreSQL database hosting (account records, video metadata, fencer notes, link codes). Render — application hosting for the FencingVault API. Anthropic — AI processing for the AI Quick Prep coaching feature. See "AI Analysis & Data Processing" for what is and is not transmitted. Apple App Store / Google Play Store — payment processing and subscription management for in-app purchases. We do not receive your payment card details from these platforms. We do not transfer your personal information to any other third party except as required by law or with your explicit consent. If we add or change a subprocessor, we will update this list and, where required by law, provide notice in advance.

All membership purchases are processed exclusively through the Apple App Store or Google Play Store. this application does not store, transmit, or have access to your full credit card number, CVV, or billing address. We retain only the following payment-related data: • Your membership tier and billing cycle • Transaction IDs for support purposes Refunds are subject to the refund policy of the Apple App Store or Google Play Store through which your purchase was made. For questions about a charge, please contact support@fencingvault.app and we will assist you in initiating a refund request with the appropriate platform.

Video footage you upload to this application is private by default. Your videos are: • Stored securely in encrypted cloud storage • Never shared with other users without your explicit action • Not submitted to AI providers for model training and not shared with third parties • Accessible only to you, unless you use the in-app sharing feature (Club membership and above) Private fencer notes you create within the app are visible exclusively to your account and are never shared with any other user, including the fencers your notes reference. Upon membership cancellation: • Access to videos stored in your Cloud Vault ends at the close of your current membership period • Uploaded videos and associated metadata may be permanently deleted from our servers following the close of your membership period • We do not provide an export or bulk-download service; please keep your own copies of any video you wish to retain before cancelling • Deletion is irreversible If your account is terminated for violation of our Terms of Service, deletion may occur sooner at our discretion.

When a Parent account and a Fencer account are linked, certain Cloud Vault data becomes shared between the two accounts. This subsection explains how the link is established, what is shared, and how to revoke it. How a link is established: • One party generates a six-character invite code from within the app • The code is valid for ten minutes and then expires automatically • The other party enters the code to complete the link — no link is created without action from both parties What becomes shared: • A link is scoped to a single USA Fencing Name chosen by the fencer at the time the link is created • Only Cloud Vault bouts associated with that USA Fencing Name are shared between the linked accounts • Both linked accounts can view, upload, and download shared bouts • Private fencer notes, account information, billing data, and bouts under other USA Fencing Names are not shared What is visible on the linked-accounts list: • A parent sees the linked fencer's display name on the linked-accounts row; the underlying USA Fencing Name is not displayed there • A fencer sees the linked parent's display name • The link applies to the bouts themselves, not to other profile fields Revoking a link: Either party can remove a link at any time from within the app (which calls our DELETE link endpoint). Once a link is revoked, no further bouts will be shared between the two accounts. Bouts that were already shared before revocation remain on whichever account uploaded them and can be deleted individually by that account. Multiple links: A Parent account may link to more than one Fencer account, and a Fencer account may link to more than one Parent account. Each link is independently established and independently revocable.

When you upload a video to this application — whether from your phone's photo library or recorded directly — your device may have embedded GPS coordinates and a recording timestamp into the video file as metadata (also called EXIF or location metadata). this application reads this embedded data to help identify which fencing tournament or event the video is associated with. How we use it: • The GPS coordinates and recording date extracted from your video are compared against our database of fencing tournaments to suggest the correct tournament, event, and location for that video • This saves you from having to manually enter tournament details on every upload • The suggested tournament and location are shown to you for review before saving — you can edit or remove them at any time What we store: • The city, state, and country derived from your video's GPS data may be stored as part of the video's metadata record • Raw GPS coordinates (latitude/longitude) are not stored permanently — they are used only during the event-matching process and discarded • The recording date extracted from the video is stored to help organize your vault chronologically What we do not do: • We do not use video GPS data to track your location in real time • We do not share your video location data with advertisers or third parties • We do not build a location history or movement profile from your video metadata Opting out: If you prefer not to have GPS data read from your videos, you can disable location tagging on your device's camera before recording, or clear the suggested location fields on the upload screen before saving. Disabling GPS extraction will not affect your ability to upload videos — you can still enter tournament and location details manually.

this application uses an AI model to power the AI Quick Prep feature. AI is only used in this specific feature. When you request an AI analysis: • The fencer name, position, and coaching prompt are sent to Anthropic's API • No video footage is transmitted to Anthropic — analysis is based on your contextual inputs • Analysis responses are not stored permanently beyond your current session • Anthropic processes this data in accordance with their own privacy policy We use aggregated, anonymized interaction data from AI analysis features to improve the quality of our coaching prompts. Individual analyses are not reviewed by this application staff unless you report a problem.

We retain your personal information for as long as your account is active or as needed to provide the Service. • Account data: retained for the duration of your account plus 90 days after deletion • Uploaded videos: retained until you delete them or cancel your membership (see Video Content section) • Payment transaction records: retained for 7 years for tax and legal compliance • Support communications: retained for 3 years • Usage analytics: retained in anonymized form indefinitely You may request deletion of your account and associated data at any time through Settings → Delete Account or by contacting privacy@fencingvault.app.

We implement industry-standard technical and organizational measures to protect your information, including: • Encryption of data in transit (TLS 1.2 or higher) • Encryption of video content at rest (AES-256) • Access controls limiting staff access to user data • Regular security assessments and vulnerability monitoring • Secure credential storage using hashed passwords No method of transmission or storage is 100% secure. In the event of a data breach that affects your personal information, we will notify you as required by applicable law.

this application requires users to be 13 or older to create their own account. Our signup process collects date of birth and blocks account creation for users under 13. Children under 13 are supported exclusively through a Parent account. A parent or guardian creates an account, selects the Parent role, and manages the fencer's videos and profile on the child's behalf. No personal account is created for the child, and no personal data is collected directly from them. We do not knowingly collect personal information from children under 13 outside of this Parent account model. If you are a parent or guardian and believe your child has provided us with personal information without a Parent account, please contact us at privacy@fencingvault.app and we will promptly delete that information. Users between the ages of 13 and 17 may create their own account. By creating an account, users aged 13–17 represent that they have obtained parental or guardian consent to use the Service. COPPA — Children's Online Privacy Protection Act. We comply with COPPA for U.S. users under the age of 13. • Verifiable parental consent: When you create a Parent account, you confirm that you are the parent or legal guardian of any minor whose information you enter into the Service, and that you consent to our collection and use of that information as described in this Policy. We record the timestamp and IP address of this consent for our compliance records. • What we collect about a managed child: first name, last name, fencing role, club, weapon, and any videos or notes the parent uploads on the child's behalf. We do not request or collect a child's email, phone number, password, precise geolocation, contacts, or social-network identifiers. • How we use that information: only to operate the Service for the parent (storing the child's videos and notes, displaying tournament/event suggestions, and processing membership purchases). We do not use a managed child's information to deliver advertising, build profiles for marketing, or share with analytics providers. • No third-party sharing: we do not sell, rent, or disclose a managed child's personal information to third parties for their own purposes. Service providers (cloud storage, payment processing, email delivery) act under contract solely to operate the Service. • Parental rights: a parent may at any time review the information we have collected about their child, request correction or deletion, or refuse further collection. To exercise these rights, email privacy@fencingvault.app with the subject "COPPA Request" or use Settings → Delete Account, which removes the parent account and all managed-child data. • Retention: a managed child's information is retained for as long as the parent account is active. Upon deletion, all child profile data, videos, and notes are removed in accordance with our Data Retention policy. If you have questions about our COPPA practices, contact us at privacy@fencingvault.app.

Depending on your jurisdiction, you may have the following rights regarding your personal information: • Access: Request a copy of the personal information we hold about you • Correction: Request correction of inaccurate information • Deletion: Request deletion of your account and associated personal data • Portability: Request your data in a structured, machine-readable format • Objection: Object to certain types of processing, including direct marketing • Opt-out of email sharing: Opt out of having your email shared with marketing partners at any time To exercise any of these rights, contact us at privacy@fencingvault.app. We will respond within 30 days. California residents may have additional rights under the California Consumer Privacy Act (CCPA). EU/EEA residents may have additional rights under the General Data Protection Regulation (GDPR). Please contact us for jurisdiction-specific requests.

The this application does not use browser cookies. We use the following analytics and tracking technologies: • Crash reporting tools to identify and fix app errors • Anonymous usage analytics to understand feature adoption We do not read or use device advertising identifiers (such as Apple's IDFA or Google's GAID). We do not serve third-party advertising within the this application application. We do not allow advertisers to pay to promote their products or services through AI or this application features.

We may update this Privacy Policy from time to time. When we make material changes, we will: • Update the "Last Updated" date at the top of this policy • Notify you via email or an in-app notification prior to the change taking effect • For significant changes, request your renewed consent where required by law Continued use of the Service after a policy update constitutes your acceptance of the revised terms.