Plyomat · Legal
Privacy Policy
Last updated: May 26, 2026
The short version
We collect athlete jump data and the email + display name you create your account with. We use that data to render your workspace and reports for you and your assistant coaches. We don't sell it, we don't share it with advertisers, and we don't train AI on it.
You can export everything you've recorded at any time and you can delete your account whenever you want. Doing so permanently removes your data from our active servers within seven days.
What we collect
From you (the coach)
- Email address (account login + password reset)
- Display name (shown in your workspace)
- Organization name (shown in reports + PDF headers)
- Settings preferences (units, sensitivity, RSI formula, etc.)
- Audit-log entries when you take destructive actions (erase data, delete org) — for your own review
About your athletes
- First + last name
- Optional: gender, body weight, sport, position, group memberships
- Captured jumps: flight time, contact time, jump height, RSI
- Session metadata: which mat captured it, which mode, timestamps
We do notcollect date of birth, age, contact info (athlete email/phone), photos, or health records. The product is intentionally limited to what's needed for performance measurement.
Automatically
- Standard server logs (IP, browser, timestamp) for security + abuse prevention. Retained 90 days.
- Bluetooth pairing identifier of any Plyomat controller you pair with — so we can recognize the same controller across sessions without you re-pairing.
- Crash diagnostics (via Sentry) when the app encounters an unhandled error — stack trace + your user ID + email if signed in, so we can reproduce the bug. No IPs, cookies, breadcrumbs, or performance data.
How we use it
- To run your workspace — render rosters, sessions, leaderboards, reports.
- To deliver webhook events you've subscribed to (partner integrations).
- To send transactional email — password resets, security alerts, important account changes.
- To diagnose issues — server logs help us debug. We don't look at session content unless you ask us to.
What we don't do
- We don't sell your data.
- We don't share with advertisers.
- We don't train machine-learning models on your athlete data.
- We don't use your data for any product outside Plyomat without your consent.
Where it lives
Data is stored in our database, hosted in the United States. The app communicates over TLS. Passwords are stored as one-way hashes (we cannot read them back; if you forget, you reset).
We use sub-processors for hosting (Vercel), database + authentication (Supabase), transactional email (Supabase Auth's default mail transport), and crash diagnostics (Sentry). Sentry receives only unhandled-error stack traces; when you're signed in we attach your user ID + email so we can reproduce your bug, but no IPs, cookies, breadcrumbs, or performance data are sent. All sub-processors are bound by standard data-processing agreements.
Your controls
- Export. Settings → Data Management → Export all data. Bundles every athlete, group, session, and rep into a CSV ZIP.
- Erase categories. Settings → Data Management → Erase categories. Selectively delete sessions, athletes, custom assessments, etc.
- Delete your org. Settings → Data Management → Delete org. We send a confirmation link to your email; the org enters a 7-day grace period before final deletion.
- Data subject requests (access / rectify / erase) for athletes covered by GDPR, CCPA, or similar laws: email dev@plyomat.com.
Eligibility & children
Account holders must be 18+. You need to be at least 18 years old (or the age of legal majority in your jurisdiction) to create a Plyomat account. The app is intended for professional coaches and athletic department staff — not for minors as account holders.
Athletes you add to your roster. Plyomat is sold to coaches and athletic departments, not directly to athletes. If you're a coach using Plyomat to record performance for athletes under 13 (or under 16 in the EU/UK), you're responsible for obtaining parental / guardian consent under applicable law before adding those athletes to your roster. We don't collect a date of birth field, so the age determination is yours.
Changes
We'll update this page when our practices change, with the “Last updated” date at the top reflecting the change. For material changes that affect existing data, we email account owners at least 30 days before the change takes effect.
Contact
Questions, concerns, or requests: dev@plyomat.com.