Privacy Policy
Effective date: [TBD — set on the day the App Store listing goes live] · Last updated: September 13, 2026
NAP (Neuro Athletic Performance) is a mental performance coaching app for hockey players. Most of the athletes who use it are under 18, so this policy is written to be read by an athlete and by a parent. It explains what we collect, why, who else touches it, and how to get it deleted.
1. Information we collect
We collect only what the app needs to coach you.
Account information
- Email address and password credential, used to create and sign in to your account. Passwords are handled by our authentication provider and stored in hashed form — we never see your password.
Profile answers you type
- Your name or nickname, age bracket, sport, position, and experience level.
- The free-text answers you give during setup and afterward — your goals, the moment you're working toward, the hardest moment you've had in your sport, and the "best self" identity you build in the app.
Your conversations with the coach
- The messages you send to the in-app coach and the coach's replies, so your conversations stay there when you come back and so the coach can refer to what you've already worked on.
- A short set of coach notes derived from those conversations (what you're working on, what's coming up) used to keep the coach's responses relevant to you.
Routine and schedule information
- The pre-ice and post-ice routines you build and run, and when you ran them.
- Ice times, practices, and games you enter so the app can prompt you around them, plus your notification preferences.
- Journal entries, check-ins, and reflections you write after a session.
Progress information
- Lessons completed, quiz and module test results, streaks, experience points and level, gems earned in the app, and the gear your character has unlocked and equipped.
Basic technical information
- App version and device platform, and error and crash information, so we can fix what breaks.
For legal review — sensitive-category characterization
Free-text answers ("hardest moment") and coach conversations are performance coaching content, not clinical records, and NAP makes no medical claims. Counsel should confirm how this content should be characterized under applicable law — and whether any of it should be treated as sensitive personal information for the purposes of consent, retention limits, or breach notification.
2. What we do not do
- We do not show ads in NAP.
- We do not sell or rent your personal information to anyone, and we do not share it for cross-context behavioral advertising.
- We do not embed third-party advertising or analytics trackers that follow you across other apps and websites.
- There are no real-money purchases in the app. Gems are earned inside the app and cannot be bought; gear unlocks by level, never by payment. We do not collect payment card information.
- We do not use your conversations with the coach to train third-party AI models. See the processors section below for the commitment we rely on.
3. How we use your information
- To create your account and let you sign back in.
- To personalize the coaching — the curriculum path, the routines, and the coach's replies — around your answers and your progress.
- To send the reminders and notifications you turned on.
- To keep your progress, streaks, and record accurate.
- To fix bugs, keep the service running, and prevent abuse.
4. Service providers
We use a small number of vendors to run NAP. They process your information only to provide their service to us, under contract, and are not permitted to use it for their own purposes.
- Hosting, database, and authentication provider — stores your account, profile, conversations, routines, and progress.
- AI model provider — receives the text of your coach messages, plus relevant context from your profile and progress, in order to generate the coach's reply.
- Text-to-speech provider — turns session and exercise scripts into audio. Guided-audio scripts are pre-rendered and are not personal to you.
- App distribution and push notification platform — delivers the app and its notifications.
Vendor names, the countries their processing takes place in, and their data-retention and no-training terms will be listed by name in the final policy.
For legal review — processor disclosure and cross-border transfer
Decisions needed: (a) whether each processor must be named individually or may be described by category; (b) the disclosure required for Canadian users when data is stored or processed outside Canada, since our providers are US-based and the first market is Canadian minor hockey; (c) whether a data processing agreement and a documented no-training commitment are in place with the AI model provider before launch.
5. Children's privacy
NAP is built for youth athletes. The only age bracket the app records is under 18 — we do not ask for a date of birth.
United States (COPPA)
The Children's Online Privacy Protection Act applies to children under 13. NAP does not knowingly collect personal information from a child under 13 without verifiable parental consent. If we learn that we have, we will delete it. A parent or guardian may contact us to review what we hold about their child, ask us to delete it, or refuse further collection.
Canada (PIPEDA)
For Canadian users, personal information is collected, used, and disclosed under the Personal Information Protection and Electronic Documents Act and applicable provincial law. Consent for a minor may need to come from a parent or guardian depending on the athlete's age and province.
For legal review — parental consent mechanism (open decision)
Status: TBD. NAP currently records a single under 18 bracket and requires the athlete to acknowledge the mental-health disclaimer before any data is collected. It does not yet collect a parent's email or run a verifiable parental consent flow. Counsel to decide, before launch:
- Whether to set a minimum age (for example 13+) and enforce it at sign-up, or to build a verifiable parental consent flow for under-13 athletes.
- Which consent method satisfies COPPA for our data set, and what Quebec and other provinces require on top of PIPEDA.
- Whether parents get a standing right to review their child's coach conversations, and how that squares with the athlete's expectation of a private place to think.
- Whether NAP falls within any school or minor-sport-organization data rules if teams adopt it collectively.
- Whether push notifications to minors require separate consent.
6. How long we keep it, and how to delete it
We keep your information while your account is active, because the app's value depends on it — your season record and your coach's memory are built out of it.
You can delete your account from inside the app: Profile → Delete account. Deleting your account removes your profile, your conversations with the coach, your routines and schedule, your journal entries, and your progress. Deletion is not reversible, and we do not keep a copy so you can change your mind.
If you cannot reach that screen, email support@neuroathleticperformance.com from the address on the account and we will delete it for you. A parent or guardian can make the same request on behalf of their athlete.
Backups are overwritten on a rolling schedule, so deleted content can persist briefly in backup copies before it is fully gone.
For legal review — retention and deletion windows
Needed: a stated backup retention window, whether any record must be retained after deletion (such as the disclaimer acknowledgment timestamp or a safety-related record) and on what basis, the deadline we commit to for email-initiated deletion requests, and whether a data export or access right should be offered alongside deletion.
7. Security
Your information is stored with an established cloud provider, encrypted in transit and at rest, behind row-level access rules so an account can reach only its own data. No system is perfect, and we will not claim otherwise.
8. Changes to this policy
If we change this policy, we will update the effective date at the top and, for material changes, notify you in the app.
9. Contact us
Questions, requests, or parental inquiries: support@neuroathleticperformance.com
For legal review — remaining open items
- Legal entity name and mailing address to appear as the data controller, and whether a privacy contact must be named.
- Whether US state privacy laws (for example California) require additional disclosures or rights language given a minor user base.
- Whether a separate Terms of Service and an AI-disclosure section covering the coach's limitations should be linked from here.
- Whether the mental-health disclaimer acknowledgment recorded at onboarding needs to be described in this policy as processing.