Privacy Policy
Effective date: October 20, 2026
FormLab (“we”, “our”, or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and share information about you when you use our video coaching platform.
1. Information We Collect
We collect information you provide directly and information generated through your use of the Service:
Account Information
When you create an account, we collect your name, email address, role (coach or athlete), and date of birth. We collect your date of birth to confirm that you meet the 18+ eligibility requirement in our Terms of Service. Your date of birth is stored separately from your profile, is not shown on your public profile, and is not visible to other users. This information is required to provide the Service.
Profile Information
Coaches may optionally provide a bio, specialties, location, and profile photo. Athletes may optionally provide similar profile details. This information is used to personalize your experience and, for coaches, to populate your public profile page.
Video Content
Athletes upload video recordings for coach review. Coaches create feedback recordings in response. Within the app, these videos are visible only to the relevant coach-athlete pair, except where you have agreed that a specific video may be shown publicly, in which case it may appear on your coach’s FormLab profile page. That permission covers only the video you agreed to and only on FormLab; it does not allow us to sell your content or use it for advertising. They are stored and delivered by our hosting and video providers, listed in Third-Party Services below. A small number of FormLab staff can access video files where it is necessary to operate, support or troubleshoot the Service. FormLab does not use your videos to identify you and does not create biometric identifiers from them, such as face geometry, voiceprints or facial-recognition templates.
Payment Information
Payment processing is handled by Stripe. We do not store your credit card numbers or full payment details on our servers. We receive confirmation of successful payments and may store transaction identifiers for record-keeping.
Usage Data
We collect information about how you use the Service, including page views, features accessed, and referring URLs. This data helps us understand how coaches acquire athletes and improve the platform.
2. How We Use Information
We use the information we collect to:
- Provide, operate, and maintain the coaching platform
- Confirm your eligibility to use the Service using your date of birth
- Process payments between athletes and coaches via Stripe
- Send transactional emails (account verification, subscription confirmations, coaching notifications)
- Display your public coach profile to potential athletes (coaches only)
- Analyze platform usage to improve features and user experience
- Communicate with you about updates, changes, or issues with the Service
- Prevent fraud and ensure the security of the Service
- Comply with legal obligations
3. Third-Party Services
FormLab uses the following third-party services to operate the platform. Each service has access only to the data necessary to perform its function:
Stripe
Purpose: Payment processing and Stripe Connect for coach payouts
Data received: Payment card details (handled directly by Stripe), account identity information for Stripe Connect verification, transaction amounts
Privacy policy: stripe.com/privacy
Supabase
Purpose: Database hosting, user authentication, and video file storage
Data received: All user data including account information, profile data, messages, and uploaded videos
Privacy policy: supabase.com/privacy
Vercel
Purpose: Application hosting and deployment infrastructure
Data received: Web request logs, IP addresses (standard server logs)
Privacy policy: vercel.com/legal/privacy-policy
Resend
Purpose: Transactional email delivery
Data received: Your email address and the content of transactional emails (verification codes, subscription confirmations, notifications)
Privacy policy: resend.com/legal/privacy-policy
Cloudflare
Purpose: Video encoding, storage and playback delivery
Data received: Athlete-uploaded videos and coach feedback videos, together with the technical metadata needed to encode and play them back
Privacy policy: cloudflare.com/privacypolicy
Daily
Purpose: Live video sessions between a coach and an athlete
Data received: Your camera and microphone streams for the duration of a live session, and technical connection information. We do not record live sessions.
Privacy policy: daily.co/privacy-policy
Sentry
Purpose: Error and performance monitoring, so we can find and fix faults
Data received: Technical diagnostic reports when something goes wrong, which can include your account identifier, the page you were on and browser details. We do not use Sentry’s session replay, so your screen is not recorded.
Privacy policy: sentry.io/privacy
5. Data Retention
We retain your data for as long as necessary to provide the Service:
- Account data: Retained while your account is active. Upon account deletion, personal data is removed within 30 days.
- Videos: Stored until deleted by the user. Deleted videos are removed from active storage immediately and from backups within 90 days.
- Usage analytics: Retained in aggregated or anonymized form for service improvement.
- Payment records: Transaction records retained for 7 years as required by financial regulations.
6. Your Rights
You have the following rights regarding your personal data:
- Access: You may request a copy of the personal data we hold about you.
- Deletion: You may request deletion of your account and associated personal data at any time.
- Correction: You may update your account information at any time through the Service settings.
- Data portability: You may request an export of your data in a machine-readable format.
- Opt-out: You may opt out of non-essential communications by following unsubscribe instructions in emails. Note: transactional emails (account security, subscription updates) cannot be opted out of while your account is active.
To exercise any of these rights, contact us at support@formlabapp.com. We will respond within 30 days.
7. Data Security
We implement industry-standard security practices to protect your data:
- All data transmission uses HTTPS encryption (TLS)
- Authentication is handled through secure, industry-standard protocols via Supabase Auth
- Video files are stored with access controls preventing unauthorized viewing
- Database access is restricted with role-based permissions
- We do not store payment card details — all payment data is handled by Stripe’s PCI-compliant infrastructure
8. Children’s Privacy
FormLab is intended for adults. You must be at least 18 years old to create an account or use the Service, as a coach or as an athlete. We do not knowingly collect personal information from anyone under 18. If we become aware that an account belongs to someone under 18, we reserve the right to immediately terminate the account and delete its information.
In particular, FormLab is not directed at children under the age of 13, and we do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will delete it within 30 days. If you believe we may have collected information from a child under 13, or from anyone under 18, please contact us at support@formlabapp.com.
9. Changes to This Policy
We may update this Privacy Policy from time to time. When we make changes:
- We will update the “Effective date” at the top of this page
- We may notify you by email for material changes
- We may also display an in-app notice summarizing what changed
- We encourage you to review this policy periodically
Your continued use of the Service after changes are posted constitutes your acceptance of the updated policy.
10. Contact
If you have questions or concerns about this Privacy Policy or our data practices, please contact us:
Email: support@formlabapp.com