Privacy Policy
Last updated: June 2026
This Privacy Policy complies with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth) and addresses GDPR requirements for EU users, COPPA requirements for US users, and the UK Age Appropriate Design Code.
1. Who We Are
Elitified® is a registered trademark of Elitified Pty Ltd (ABN 31 697 619 819), an Australian-based sports technique analysis company located in Queensland, Australia. This policy covers all services provided through elitified.com and getelitified.com.
2. What Personal Information We Collect
- Account data: Name, email address, password (stored as encrypted hash only)
- Payment data: Processed by Stripe — Elitified never stores your card details
- Usage data: Analyses performed, sports and skills selected, similarity scores achieved, subscription tier
- Video data: Videos uploaded by users for analysis (classified as sensitive biometric data under privacy regulations)
- Children's video data: Where a parent or guardian uploads video of their child for analysis — this is treated with the highest level of protection
- Technical data: IP address, device type, browser information, app usage logs
3. How We Collect It
- Directly from users during account signup and app use
- Automatically via app analytics (usage patterns only, no third-party trackers)
- We never collect data from third parties or data brokers
4. Why We Collect It (Purpose Limitation)
What We Do NOT Do:
- We never use video data to train AI models
- We never use personal data for advertising or marketing to third parties
- We never sell or rent your data to anyone
5. How We Store and Protect It
- Data is stored on Supabase infrastructure (servers located in the United States)
- All data is encrypted at rest and in transit using industry-standard TLS/SSL protocols
- Video files are stored in private Supabase storage buckets — not publicly accessible
- Access is strictly restricted to authenticated users for their own data only
- We use Row Level Security (RLS) database policies to enforce data isolation
- We conduct regular security reviews and updates
- Staff access to user data is logged and limited to support purposes only
6. Data Retention
Your uploaded videos are stored securely for as long as your account is active. We keep them so you can watch your own footage alongside your coaching feedback — which is essential for understanding what to improve. You can delete any individual video at any time from your analysis page, or delete all videos at once from your Account Settings or Progress page. Deleting a video never deletes your coaching results or analysis history.
Your similarity scores, coaching feedback, phase breakdowns, drill recommendations and focus points are retained for the life of your account. This powers your progress tracker and improvement history. This data contains no biometric information — it is derived coaching text and numerical scores only.
When you delete your account, all videos, analysis results, scores, drills and personal data are permanently deleted within 30 days of your request.
Financial records retained for 7 years as required by Australian tax law (transaction records only — not card data)
7. Children's Privacy
We take children's privacy extremely seriously and comply with all applicable laws including Australian Privacy Act, COPPA (US), GDPR Article 8 (EU), and the UK Age Appropriate Design Code.
Age Requirements
- Elitified does not permit children under 13 to create accounts under any circumstances
- Children aged 13–17 require verified parental consent through our in-app consent flow
- Users 18 and older may create accounts independently
When Parents Upload Video of Children
- The parent must be the legal parent or guardian of the child
- The parent consents on behalf of the child
- The video is processed solely for sports technique analysis
- Videos are retained for the life of the account and can be deleted at any time; all are removed within 30 days of account deletion
- The video is never used for any other purpose, including AI training
- The video is never shared with third parties (except Google Gemini API for analysis)
- The parent can delete the video at any time from their analysis history
- Only the account holder can view the video and analysis
See our Children's Safety Policy for more details.
8. Sharing Your Data
We only share data with the following trusted service providers:
Videos are sent to Google Gemini for AI analysis only. Google's data processing terms apply. Videos are not retained by Google beyond the API call and are not used for training.
Payment processing. Stripe's privacy policy applies. We never see or store your card details.
Data storage infrastructure and authentication services.
We do NOT share data with:
- Data brokers
- Advertising networks
- Social media platforms
- Any other third parties
9. International Data Transfers
- Data is stored on US-based servers (Supabase infrastructure)
- For EU users: Transfers are made under Standard Contractual Clauses approved by the European Commission
- For Australian users: Transfers comply with APP 8 (cross-border disclosure requirements)
- All international transfers maintain the same level of protection as required by Australian and EU law
10. Your Rights
Rights Available to All Users
- Access: Request a copy of your personal data
- Correction: Request correction of inaccurate data
- Deletion: Delete your account and all data from Account Settings at any time
- Portability: Request export of your data in a common format
Additional Rights for EU/UK Users
- Restriction: Right to restrict processing in certain circumstances
- Objection: Right to object to processing based on legitimate interests
- Complaint: Right to lodge a complaint with your local data protection authority
To Exercise Your Rights:
Email us at privacy@elitified.com
We will respond within 30 days (EU users: within 1 month as required by GDPR)
11. Data Breach Notification
- In the event of an eligible data breach under the Australian Notifiable Data Breaches scheme, affected users and the Office of the Australian Information Commissioner (OAIC) will be notified within 72 hours
- EU users will be notified in accordance with GDPR Articles 33 and 34
- Notifications will include the nature of the breach, likely consequences, and measures taken to address it
12. Cookies and Tracking
- We use essential cookies only for authentication session management
- We do NOT use advertising cookies or tracking pixels
- We do NOT use Google Analytics or similar third-party trackers
- We do NOT track you across other websites
13. Contact and Complaints
Privacy Officer: privacy@elitified.com
Australian Users
You may lodge complaints with the Office of the Australian Information Commissioner (OAIC):
www.oaic.gov.au
EU Users
You may lodge complaints with your local supervisory authority
14. Policy Updates
We will notify you of any material changes to this Privacy Policy by email at least 30 days in advance. Your continued use of the service after the notice period constitutes acceptance of the updated policy.