Privacy Policy

1. Introduction

LaxForge (“we”, “us”, “our”) operates the LaxForge website at laxforge.app and the LaxForge mobile application (collectively, the “Service”). This Privacy Policy explains what personal information we collect, how we use it, and the rights you have over it. By using the Service you agree to this policy.

We are based in [TODO: jurisdiction (e.g. Delaware, USA)]. The data controller is [TODO: legal entity name], contactable at privacy@laxforge.app.

2. Information we collect

2.1 Account information

When you create an account or join our preorder list we collect your email address and (if you sign in with a social provider) the minimum profile fields the provider returns to us.

2.2 Video and motion data

When you record a session in the LaxForge mobile app we capture video frames and derive 2D/3D pose landmark data from them on-device. By default, raw video does not leave your device. Pose-landmark summaries and shot-level scores may be uploaded to our backend for your review history and for product improvement, as described below.

2.3 Sensor data

If you use a LaxPod sensor we receive IMU samples (accelerometer, gyroscope) over Bluetooth, summarized into per-shot features. Raw IMU streams are [TODO: retained for X days / discarded after shot extraction].

2.4 Payment information

Preorder deposits and any future purchases are processed by our payment processor ([TODO: Stripe / other]). We do not store full card numbers; we receive only a tokenized reference, the last four digits, billing zip code, and the transaction status.

2.5 Analytics & diagnostics

We use [TODO: Firebase Analytics, Vercel Analytics, etc.] to understand which features are used and to detect crashes. Where required, we obtain consent before loading non-essential analytics.

3. How we use your information

• To provide the Service and your account features.
• To process preorders, subscriptions, and refunds (see our Terms of Service).
• To improve our shot-classification and coaching models. Where we use your data for model training we [TODO: aggregate / de-identify / require opt-in].
• To send transactional emails (order confirmations, account notices). Marketing emails are sent only with your consent and you can opt out at any time.
• To prevent fraud, abuse, and to enforce our Terms.
• To comply with legal obligations.

4. Sharing & third-party processors

We do not sell your personal information. We share it only with the processors below, each bound by a data-processing agreement:

• Firebase (Google) — authentication, Firestore storage, Cloud Functions, and analytics. [TODO: region(s)]
• [TODO: Payment processor (e.g. Stripe)] — payment processing.
• [TODO: Email/transactional provider (e.g. Postmark, SendGrid)] — transactional email delivery.
• Vercel — website hosting and edge analytics.
• [TODO: Other processors as added — keep this list current.]

We may disclose information when required by law (subpoena, court order) or to protect the rights, safety, or property of LaxForge, our users, or the public.

5. Retention

We retain account information for as long as your account is active. Pose-landmark summaries and shot data are retained for [TODO: X months / years] for your review history. Payment records are retained for [TODO: seven years] to comply with tax and accounting obligations. You may request deletion of your account at any time (see Section 9).

6. Children under 13 (COPPA)

LaxForge is intended for athletes of all ages but we treat data from users under 13 with additional care under the U.S. Children’s Online Privacy Protection Act (COPPA). Before a user under 13 may create an account or use the LaxForge mobile app, we obtain verifiable parental consent via [TODO: method (e.g. email-plus, credit-card verification)].

A parent or guardian may at any time review the personal information we have collected from their child, request its deletion, or refuse to permit its further collection by emailing privacy@laxforge.app.

For users under 13 we do not [TODO: use behavioural advertising, show third-party ads, or share data with third parties except essential service providers].

7. Your rights under GDPR (EU/UK users)

If you are in the European Economic Area or the United Kingdom you have the right to access, rectify, port, restrict, object to, and delete the personal information we hold about you. Our lawful bases for processing are: (a) performance of a contract — to provide the Service you signed up for; (b) legitimate interests — to improve our product, prevent fraud, and secure our systems; (c) consent — for marketing email and non-essential analytics. To exercise any right email privacy@laxforge.app. You also have the right to lodge a complaint with your supervisory authority. Our [TODO: EU representative / DPO contact] is [TODO: name & address].

8. Your rights under CCPA (California users)

California residents have the right to know what personal information we collect, to request deletion, to correct inaccurate information, and to opt out of any “sale” or “sharing” of personal information. We do not sell your personal information. To exercise CCPA rights email privacy@laxforge.app. We will not discriminate against you for exercising these rights.

9. How to exercise your rights

Email privacy@laxforge.app from the address associated with your account. We respond within [TODO: 30 days]. We may need to verify your identity before fulfilling certain requests.

10. Cookies, analytics & email lists

We use a small number of strictly-necessary cookies for authentication and to remember your preferences. We use analytics cookies (see Section 2.5) only with your consent where the law requires it.

When you submit your email to our preorder list, we use it solely to send a single launch announcement plus essential transactional messages about the preorder you placed. We do not sell or share email lists with third parties. You can unsubscribe from any non-essential message via the link in the email or by contacting us.

11. Security

We protect your information with industry-standard measures including encrypted transport (HTTPS/TLS), encryption at rest for our managed databases, scoped access controls, and audit logging on administrative actions. No system is perfectly secure; if you believe your account has been compromised, contact us at security@laxforge.app.

12. International transfers

Our backend providers operate primarily in the [TODO: United States / region list]. If you access the Service from outside that region, your information may be transferred to, stored, and processed there. Where such transfers are subject to European data-protection law, we rely on [TODO: Standard Contractual Clauses or other lawful transfer mechanisms].

13. Changes to this policy

If we make material changes we will notify you by email and/or by a banner in the app at least [TODO: 14 days] before the change takes effect. Continued use of the Service after the effective date constitutes acceptance.

14. Contact us

Questions about this policy or about your data: privacy@laxforge.app
Security disclosures: security@laxforge.app
General support: support@laxforge.app
Postal address: [TODO: street, city, state, postal code, country]