1. Who we are
SpringUp is a training management app for trampoline (TRA) and double mini-trampoline (DMT), for coaches and gymnasts. The data controller is the app developer, based in Portugal, reachable at the email address in section 13. We process personal data under the EU General Data Protection Regulation (GDPR) and Portuguese law.
2. Data we collect
We only collect what the app needs to work:
| Data | Why | Required |
|---|---|---|
| Name, email, password | Your account. The password is stored hashed, never in plain text. | Yes |
| Role (coach or gymnast) | Shows the right features for you | Yes |
| Date of birth, height, weight | Profile and training analysis | Optional |
| Resting heart rate | Physical stats | Optional. Health data, see below |
| Training sessions, turns, routines, scores, time of flight, notes, attendance | The core function of the app | Created as you use the app |
| Competitions and results, evaluations, training plans | The core function of the app | Created as you use the app |
| Club membership, invite codes, groups | Clubs | If you are in a club |
| Coach notes about gymnasts | Coaching | Written by coaches |
| Push notification token | Sending notifications | Optional, only if you allow notifications |
| Subscription status (plan, expiry date) | Unlocking paid features | If you subscribe |
Health data. Resting heart rate is health data, a special category of personal data under the GDPR. Entering it is optional. We only process it if you enter it, with your explicit consent, and only to show your physical stats. You can delete it at any time in the app.
3. What we don't collect
We don't collect your location, and we don't access your camera, microphone or contacts. We don't use advertising identifiers and don't collect browsing data.
Payment details are never seen by SpringUp. Payments are handled entirely by Apple or Google.
This website uses no cookies and no trackers.
4. Veriflite and local network
To read time of flight, the app connects to Veriflite sensors on your local network. This is why iOS asks for local network access. The readings go straight from the sensors to the app. No data is sent to Veriflite.
5. How we use data
- To give you access to your account and the app (performance of the contract with you).
- To show training history, statistics and progress, and let coaches follow the gymnasts in their club (performance of the contract).
- To manage your subscription and unlock paid features (performance of the contract).
- To send push notifications, if you allow them (consent, which you can withdraw in your phone settings).
- To process health data you choose to enter (explicit consent).
- To meet legal obligations, such as keeping billing records (legal obligation).
We don't use your data for advertising, we don't sell it, and we don't use tracking or analytics tools.
6. Service providers
We use a small number of providers (processors) to run SpringUp. Each one only gets the data it needs:
| Provider | What it does | Data it gets |
|---|---|---|
| Supabase | Database and login | All app data, stored in the European Union |
| RevenueCat | Subscription management | Your account ID, purchase and subscription status |
| Apple App Store, Google Play | Payments | Payment and purchase data. Their own privacy policies apply. |
| Expo (push notification service) | Delivers notifications | Push token and notification text |
| Cloudflare | Runs the Claude connector, and hosts this website | Requests from Claude, only if a coach creates a connection |
| Anthropic (Claude) | AI assistant | Only the data a coach asks Claude about, only if the coach connects Claude. Anthropic's privacy policy applies. |
Connect Claude is optional. Nothing is shared with Cloudflare or Anthropic unless a coach creates a connection in the app. The coach can revoke the connection at any time.
7. Transfers outside the EU
Some providers (for example RevenueCat, Expo, Cloudflare and Anthropic) may process data outside the European Economic Area. When that happens, the transfer is covered by appropriate safeguards, such as the European Commission's Standard Contractual Clauses or the EU-US Data Privacy Framework.
8. Storage and security
App data is stored on Supabase servers in the European Union. All communication uses HTTPS. Passwords are stored hashed and never in plain text. We take reasonable technical and organisational measures to protect your data.
9. Retention and deletion
We keep your data while your account exists. When you delete your account in the app, your data is deleted immediately. Deletion requests by email are processed within 5 days. Purchase records are kept by Apple, Google and RevenueCat as billing law requires. See Delete your account for the details.
10. Your rights
Under the GDPR you have the right to:
- access the data we hold about you;
- correct inaccurate data;
- have your data deleted;
- receive your data in a portable format;
- object to or restrict processing;
- withdraw consent at any time, where processing is based on consent.
To exercise any of these rights, write to us at the email below. You can also file a complaint with the Portuguese data protection authority, the CNPD (Comissão Nacional de Proteção de Dados).
11. Minors
Many gymnasts are under 18. The minimum age to use SpringUp is 13, the age of digital consent in Portugal. Gymnasts aged 13 to 17 should register with the knowledge of a parent or guardian. The app may be used by minor gymnasts under the supervision of their coach or legal guardian. Minors' data is handled with the same level of protection as all other users' data.
12. Changes to this policy
We may update this policy. When we do, we change the "Last updated" date at the top of this page. Significant changes are announced in the app.
13. Contact
For privacy questions or to exercise your rights:
support@springupapp.com