Privacy Policy

• Account and profile information — name, email, business or display name, branding, and settings.
• Athlete and training data — athlete profiles, intake questionnaire responses, programs, logged sets, bodyweight, wellness check-ins, messages, and progress metrics.
• Health and fitness data — including any data you choose to connect from Apple Health or Health Connect, used to power readiness, weigh-ins, and similar features. This can be sensitive; see “Health and fitness data.”
• Payment information — processed by Stripe. Overlode does not store full card numbers; we receive limited billing metadata (such as status, plan, and customer or account identifiers) needed to operate billing.
• Usage and device information — log data, device and browser type, IP address, and diagnostics used to operate, secure, and improve the Service.
• Communications — messages you send through the Service and correspondence with us.
• Cookies and similar technologies — used for sign-in, security, and preferences.

• To provide, operate, and maintain the Service and its features;
• To process subscriptions and facilitate athlete payments through Stripe;
• To provide support, send service and transactional messages, and respond to you;
• To secure the Service, prevent abuse, and enforce our terms;
• To analyze usage and improve and develop features;
• To comply with legal obligations and protect rights and safety.

We do not sell personal information, and we do not use athlete training or health data for advertising.

Where data-protection laws such as the GDPR apply, we rely on these bases for processing of coach data: performance of our contract with you; our legitimate interests in operating, securing, and improving the Service; your consent where required; and compliance with legal obligations. For athlete personal data, the coach (as controller) is responsible for the legal basis, including any consent required for health or fitness data; Overlode processes it under the coach’s instructions.

Some data processed through the Service relates to health and fitness and may be treated as sensitive under applicable law. We process it to provide the features the coach and athlete use, on the coach’s instructions and, where required, with the athlete’s consent obtained by the coach. Data you connect from Apple Health or Health Connect is used only for the features you enable and is handled in line with those platforms’ requirements; it is not used for advertising and is not sold.

• With service providers who help us run the Service under contract — including Stripe (payments), our cloud hosting and database providers, and our email and push-notification providers — limited to what they need to perform their services.
• With the relevant coach — an athlete’s data is shared with the coach who invited them, who controls that data.
• For legal reasons — to comply with law, respond to lawful requests, or protect rights, safety, and the integrity of the Service.
• In a business transfer — in connection with a merger, acquisition, financing, or sale of assets, subject to this Policy.

We do not sell your personal information.

If you are an athlete, your coach is the controller of the personal data you provide through the Service and decides how it is used. Overlode processes it on the coach’s behalf. To access, correct, delete, or limit your training data, or to ask how it is used, contact your coach. We will assist coaches in responding to such requests as their processor. You can also contact us at privacy@getoverlode.com and we will route your request appropriately.

We keep personal information for as long as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. When a coach closes an account, we make data available for export for a reasonable period and then delete or de-identify it, except where retention is legally required.

We use technical and organizational measures designed to protect personal information, including tenant isolation enforced at the database level, encryption in transit, and access controls. No system is perfectly secure; we cannot guarantee absolute security, and you are responsible for safeguarding your account credentials.

Depending on where you live, you may have rights to access, correct, delete, port, or restrict your personal information, to object to certain processing, and to withdraw consent. Coaches can exercise these directly or by contacting privacy@getoverlode.com. Athletes should contact their coach (see above). We do not sell personal information or share it for cross-context behavioral advertising, and we will not discriminate against you for exercising your rights.

We and our providers may process information in countries other than yours, including the United States. Where required, we use appropriate safeguards (such as standard contractual clauses) for international transfers. [CONFIRM TRANSFER MECHANISMS WITH COUNSEL.]

The Service is not directed to children under [13/16], and we do not knowingly collect their personal information directly. A coach who works with minor athletes is responsible for obtaining any parental or guardian consent required by law before collecting their data through the Service. If you believe a child’s data has been provided without proper consent, contact us at privacy@getoverlode.com.

We use cookies and similar technologies necessary for sign-in, security, and preferences, and limited analytics to understand and improve the Service. You can control cookies through your browser; disabling some may affect functionality.

We may update this Policy from time to time. We will post the updated version with a new effective date and, for material changes, provide additional notice where required.

For privacy questions or to exercise your rights, contact privacy@getoverlode.com. [ADD POSTAL ADDRESS / EU OR UK REPRESENTATIVE / DPO IF REQUIRED.]