Privacy Policy

Overview

Develupp ("we", "our", or "us") operates the Develupp app (the "App"), a professional tool used by sports coaches, academies, and clubs to track athlete growth and maturity. This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information.

By using the App, you agree to the practices described in this policy.

Information We Collect

We collect the following categories of information:

Account Information

Name, email address, organisation name, and role within your club or academy. This is provided when you create an account.

Athlete Data

Names, dates of birth, biological sex, standing height, sitting height, body mass, and measurement history for the athletes you register within the App. This data is entered by you, imported from CSV files, or imported from third-party devices (e.g. SonicBone).

For minor athletes, the App also stores guardian contact details (name, email address, and relationship to the athlete) and parental consent status. This information is entered by the coaching professional and is used solely to facilitate and record the parental consent process. Consent records — including the guardian's signed acknowledgement, consent timestamp, and any override decisions made by coaching staff — are retained as an audit trail.

Injury Records

Body part, mechanism (contact or non-contact), laterality, structure type, severity category, recovery status, return dates, and optional notes for injuries you record within the App. Injury records are linked to the athlete's profile and may be correlated with growth and maturation data to produce injury surveillance reports.

Measurement Records

Date, time, and method of each measurement session (AR scan, manual entry, or third-party device import), along with the resulting biometric values. For SonicBone imports, this also includes bone age assessments, ultrasound metrics, and predicted adult height data.

Usage Data

App settings preferences (e.g. dark mode, measurement type), feature usage patterns, and error logs. This data does not include personally identifiable information about athletes.

Device Information

Device model and iOS version, used to ensure compatibility and support LiDAR-based AR scanning where available.

Data on Minors

The App is designed for use by qualified sports professionals, not by minors directly. Users of the App are responsible for ensuring that appropriate consent has been obtained from the parent or legal guardian of any athlete under the age of 18 before entering that athlete's personal or biometric data.

The App includes a built-in parental consent workflow. Coaching professionals can send a consent request to a guardian's email address directly from the App. The guardian receives a secure, tokenised link to a consent form where they can review the data collected — standing & sitting height, body weight, growth and growth velocity, and injury records — and provide their signed electronic consent. Consent status is recorded in the App and accessible to authorised coaching staff at any time.

Providing a guardian email address and sending a consent request does not automatically satisfy your legal obligations under applicable data protection law. You remain responsible for ensuring that the consent obtained is valid, informed, and sufficient for your jurisdiction.

We do not knowingly collect personal information directly from minors. If you believe athlete data has been entered without appropriate consent, please contact us immediately so we can assist with removal.

How We Use Your Information

We use the information we collect to:

• Provide core App functionality — calculating maturity scores, growth velocity, and adult height predictions using validated scientific equations.
• Record and track injury data entered by you, and generate injury surveillance reports at the player, team, and organisation level.
• Correlate injury records with growth and maturation data to provide context such as PHV phase, growth velocity at time of injury, and bio-banding classification. This analysis follows methodologies recommended by the IOC 2020 Consensus Statement on injury surveillance.
• Sync your data securely across devices within your organisation.
• Respond to support requests and troubleshoot issues.
• Improve the App's performance and user experience.
• Optionally train new predictive models from contributed data, subject to your consent choice in Settings → Data & AI Training.

We do not use athlete data for advertising, profiling for commercial purposes, or any purpose beyond operating the App.

Machine Learning & Model Training

The validated equations currently embedded in Develupp — Mirwald, Moore, Fransen, Khamis-Roche, and SITAR — were built on specific populations that may not fully represent your athletes. With your consent, we use contributed measurement data to train new machine learning models that aim to be more broadly applicable, and — where sufficient data is available — organisation-specific.

What data is used

With your consent, the following may be used for model training: standing height, sitting height, body mass, date of birth, parental heights, derived values (maturity offset, predicted adult height, growth velocity), biological sex, and measurement timestamps.

What "de-identified" means here

Before any data is used for training, athlete names, email addresses, and account identifiers are permanently removed. Biometric parameters are retained because they are the input variables the models must learn from — removing them would make the data scientifically useless. This means data is de-identified but not fully anonymous in the traditional sense.

Your choice

You control how your data is used via Settings → Data & AI Training: · Contribute to Research: de-identified data improves predictions for all users. · My Organisation Only: data used only to build models specific to your organisation. · Opt Out: your data is not used for any model training (default).

You can change this preference at any time. Changes take effect immediately for future data processing. Opting out has no effect on any app functionality.

Data Storage & Security

Your data is stored using Supabase, a secure cloud infrastructure provider with PostgreSQL as the underlying database. All data is encrypted in transit (TLS) and at rest (AES-256).

Access to your data is restricted to authenticated users within your organisation, based on the role and permission system configured by your administrator.

We follow industry-standard security practices; however, no system is entirely free from risk. You are responsible for maintaining the security of your account credentials.

Data Sharing

We do not sell, rent, or trade your personal information or athlete data.

We may share data only in the following limited circumstances:

• Service Providers: Supabase is used as our cloud infrastructure provider. They process data on our behalf under a data processing agreement and are contractually prohibited from using your data for any other purpose.
• Legal Requirements: If required by law, court order, or government authority, we may disclose information as necessary to comply.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, data may be transferred to the successor entity under equivalent privacy protections.

No other third-party sharing takes place.

Data Retention

We retain your account and athlete data — including injury records and parental consent records — for as long as your account remains active.

• You may export your data at any time via Settings → Export Maturation Data or Export Injury Data to CSV.
• You may delete individual injury records, or archive or permanently delete individual players and teams within the App. Permanently deleting a player also removes all associated consent records and override logs.
• You may request full account deletion via Settings → Account → Delete Account. This permanently removes all data associated with your account — including all injury records and consent records — from our systems within 30 days.
• Parental consent records that reference a coaching staff member who has since left the organisation retain the consent data but have the staff member reference cleared, preserving the consent audit trail while removing the personal reference.

Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the data we hold about you.
• Rectification: Correct inaccurate or incomplete information.
• Erasure: Request deletion of your personal data ("right to be forgotten").
• Portability: Receive your data in a structured, machine-readable format.
• Restriction: Request that we limit how we process your data in certain circumstances.
• Objection: Object to processing based on legitimate interests.

To exercise any of these rights, please contact us at the address below. We will respond within 30 days.

International Users

The App may be used by organisations in multiple countries. If you are located in the European Economic Area (EEA), United Kingdom, or another jurisdiction with data protection laws, please be aware that your data may be transferred to and processed in countries that may not provide the same level of data protection. We take appropriate safeguards to ensure your data remains protected in accordance with this policy.

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the effective date at the top of this page. For significant changes, we will notify you through the App or by email. Continued use of the App after changes are posted constitutes your acceptance of the updated policy.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy, please contact us at:

DEVELUPP LLC
support@develupp.app