Privacy Policy

Last updated: April 23, 2026

This Privacy Policy describes how Piste IQ (“the app,” “we,” “us,” or “our”) collects, uses, and shares information when you use our iOS application. We value your privacy and have tried to write this policy to be clear and readable rather than padded with legalese.

Summary: The app stores the information you add — your account details and the opponent scouting data you create — on a secure cloud backend so you can access it across devices and share it with teammates you approve. Nothing is public, nothing is sold, and you can delete your account and all associated data from within the app at any time.

1. Information We Collect

Account information:

Email address (required for account creation and password recovery)
Display name (set at sign-up, editable later)
Optional username / handle (lets friends find you in the app)
Password, stored as a salted hash by our authentication provider. We never see your plain password.

Authentication identifiers — only if you use Sign in with Apple or Sign in with Google:

An opaque user identifier from the authentication provider
The email address provided by the authentication provider
Your full name, if you choose to share it on first authorization (Apple only shares this once)

Content you create in the app:

Databases of opponent profiles and the scouting data you record for each opponent
Bout history, tournament events, and pool results
Videos you attach (either as URLs pointing to external services, or as uploads stored in our secure storage bucket)
Tags, notes, and your own fencer profile
Friend connections and share records

Diagnostic information:

We do not use any third-party analytics SDKs. We do not track your usage patterns, click behavior, or device fingerprint information. The app communicates with our backend only for the authenticated API calls needed to load and save your data.

2. How We Use Your Information

We use your information to:

Authenticate you and maintain your session
Store and sync your content across your devices
Enable sharing with other users when you explicitly initiate it
Send you password reset emails when you request them

We do not use your information to:

Advertise to you
Build behavioral profiles
Sell to third parties
Train machine learning models

Your information is shared only in the following ways:

With our backend service provider. The app is built on Supabase, which hosts our database, authentication, and file storage. Supabase acts as our data processor and is contractually bound to handle your data only on our behalf. Supabase’s privacy policy is available at https://supabase.com/privacy.

With Apple and Google — only when you sign in via those providers. They handle the authentication exchange and share a minimum set of identifying information with our backend.

With other users you approve. When you share a database with a friend, the friend can view (but not edit) every opponent in that database and the attached videos, bouts, tags, and notes. When you share an individual opponent profile, the recipient gets a read-only copy they can accept into their own database. All sharing is initiated by you, by invitation only, and can be revoked at any time from within the app.

For legal reasons. We may disclose information to comply with valid legal process, respond to governmental requests, enforce our terms of service, or protect the rights, property, and safety of users or the public.

We do not sell your information, trade it, or share it with advertisers.

4. Information About Third Parties (Opponents)

The app allows you to record information about other fencers you have competed against or observed. This may include their names, clubs, countries, age categories, and your subjective ratings and notes about how they fence. These third parties are not users of the app and have not directly provided this information to us.

The following principles govern how we handle this data:

Visibility is restricted to you and users you explicitly share with. A named opponent’s profile is never made public, never indexed by search engines, and never included in any searchable directory inside the app.

You are responsible for the information you record. We encourage users to limit recorded information to publicly observable facts (results, styles, clubs of record) and personal impressions formed during competition.

Right to deletion. If you are named as an opponent in someone’s database and you would like your information removed, email us at the address below. Upon verified request, we will identify any profiles that reference you and either remove them or substitute generic identifiers.

No aggregation. We do not aggregate data about named third parties across user databases, and we do not use it for any purpose beyond display within the app.

5. Data Retention

We retain your account information and content for as long as you maintain an active account. When you delete your account from within the app, all of your personal content — opponent profiles, bouts, videos, tags, notes, friend connections, and any shared-database memberships — is permanently deleted. Deletion propagates through our backend’s cascade rules and removes your data from our primary database. Backup copies are overwritten on our standard backup retention cycle, typically within 30 days.

6. Your Rights

You have the following rights regarding your information:

Access. View all information about you from within the app. Your profile, content, and friend connections are fully surfaced in the UI.
Correction. Edit any profile or content field directly in the app.
Deletion. Delete your account from the app’s Profile screen. This is permanent.
Portability. On written request, we can provide your content in a portable format. Contact us at the email below.
Withdrawal of consent. You can withdraw consent for any specific processing by deleting your account or contacting us about specific data elements.

Users in the European Union and United Kingdom have additional rights under the GDPR, and users in California have rights under the CCPA, including the right to know what information we hold about you and the right to have it deleted. These rights are exercised through the contact address below.

7. Security

We use industry-standard protections to safeguard your information:

All data transmitted between the app and our backend is encrypted using TLS.
Our backend provider stores your data on servers with encryption at rest.
Passwords are stored as salted hashes. We never see your plain password.
Our backend enforces row-level security policies that restrict every user to only the data they own or have been explicitly granted access to.

No system is perfectly secure, and we cannot guarantee absolute protection of your information. If a security incident occurs that affects your data, we will notify you as required by applicable law.

8. Children’s Privacy

The app is intended for users 13 years of age and older. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has created an account, please contact us and we will promptly delete the account and associated data.

Parents should be aware that the app allows users to record information about opponents of any age, including youth fencers. Information about youth opponents follows the same principles described in Section 4 (Information About Third Parties) and is subject to the same deletion-on-request process.

9. International Users

The app is operated from the United States. If you are located outside the United States, your information may be transferred to and stored on servers in other countries. By using the app, you consent to this transfer.

For users in the European Economic Area and United Kingdom, the legal basis for our processing is:

Contract performance — the processing is necessary to provide the service you signed up for.
Legitimate interests — some processing is based on our legitimate interest in operating and improving the app.
Consent — specific processing you have explicitly agreed to.

You may lodge a complaint with your local data protection authority if you believe our processing violates applicable law.

10. Changes to This Policy

We may update this policy from time to time. The “Last updated” date at the top reflects the date of the most recent change. We will notify users of material changes through the app or by email. Your continued use of the app after a material change indicates your acceptance of the updated policy.

11. Contact Us

For any question about this policy, to exercise any of the rights described above, or to request the removal of information about you from the app:

Email: pisteiq@gmail.com

We typically respond within 7 business days.

Piste IQ is an independent app. This policy was last updated on April 23, 2026.