Privacy Policy

Last updated: July 5, 2026

NDO Squad (“we”, “us”, “our”) is a private, invite-only app that lets sports teams log workouts and compete on leaderboards. This policy explains what we collect, how we use it, who can see it, and your choices. Questions? Email support@ndosquad.com.

1. Information we collect

Account information. When you sign in with Google (or Apple), we receive your name and email address from that provider. We never see your Google or Apple password.
Profile information you provide. Display name, profile photo, height, weight, goals, and playing position.
Activity you create. Workouts (exercises, sets, reps, weights, durations, distances, notes), workout photos, comments, likes, and challenge participation.
Health-related data. The height and weight you enter, and the history of weight entries you choose to log.
Notification data. If you enable push notifications, we store a push subscription for your device along with its browser/user-agent.
Technical data. Standard server logs (such as IP address and timestamps) generated by our hosting provider.

About photos: we resize every image in your browser before it’s uploaded, which removes embedded metadata such as GPS location. We do not store where your photos were taken.

2. How we use your information

Run the app — show your profile and activity to your team and calculate points, leaderboards, streaks, and challenges.
Send the push notifications you’ve opted into (likes, comments, challenges).
Keep the community safe by scanning uploaded images for inappropriate content (see section 4).
Maintain, secure, and improve the service.

We do not sell your personal information, and we do not use it for advertising.

3. Who can see your information

Your teammates. Your display name, profile photo, workouts, workout photos, comments, and leaderboard standing are visible to members of teams you belong to. Your weight is private by default and is only shown if you turn on weight sharing.
Service providers. Companies that process data on our behalf: Supabase (database, file storage, authentication), Vercel (hosting), Google (sign-in and Google Cloud Vision for image-safety scanning), and the web-push service operated by your browser’s vendor to deliver notifications.
Legal. We may disclose information if required to by law.

4. Image safety

Uploaded photos are automatically scanned with Google Cloud Vision SafeSearch to detect and block explicit or violent content before it is stored. A team owner or coach can also remove any workout photo.

5. Data retention and deletion

We keep your information while your account is active. At any time you can:

Edit or remove most profile information within the app.
Delete individual workout photos you posted.
Request deletion of your account and associated data by emailing support@ndosquad.com. We will delete your profile, workouts, photos, and related data (we may retain limited records where the law requires).

6. Security

We protect your data with encrypted connections (HTTPS), row-level security so you can only access data for teams you belong to, and private storage for avatars and workout photos served through short-lived signed links. No system is perfectly secure, but we take reasonable steps to protect your information.

7. Children’s privacy

NDO Squad is used by youth athletes, and some may be under 13. We ask that a parent or guardian review this policy and provide consent before a child under 13 uses the app. For children under 13 we collect only the information reasonably needed to use the app (name and the profile/activity data described above). Parents and guardians may review their child’s information, ask us to correct or delete it, or refuse further collection by emailing support@ndosquad.com. If we learn we have collected personal information from a child under 13 without appropriate parental consent, we will delete it.

8. Your choices

Update your profile, goals, and measurements in the app.
Keep your weight private (the default) or share it with your team.
Turn push notifications on or off, by type, in your profile settings.
Request account deletion via support@ndosquad.com.

9. Changes to this policy

We may update this policy from time to time. We’ll post the new version here and update the “Last updated” date above.

10. Contact

Questions or requests? Email support@ndosquad.com.