This Privacy Policy explains how BELLOSAURUS FOR ONLINE SELLING, a sole establishment licensed in the Emirate of Dubai, United Arab Emirates (commercial licence no. 1629119) (“we”, “us”, “our”), handles information in connection with the Elite Hockey Drills mobile application (the “App”).
If you have any questions, contact us at coach@elitehockeydrills.com.
The short version
- The App is built to work on your device. Your training profile, program, baselines, and workout history are stored locally on your phone by default.
- Cloud backup is optional and off by default. It only turns on if you add your email and verify it with a code; then your profile, program, and (as backup coverage expands) training history are stored with our cloud provider so you can restore them on a new device.
- We do not sell your data and we do not use it for third-party advertising.
- You can delete everything at any time: Settings → Reset App & Delete All Data wipes this device, and Settings → Delete Cloud Account deletes your account and everything we store for you on our servers.
- The App has a Youth mode for younger players; for children under 13 we require verified parental/guardian consent — the parent or guardian confirms by entering a code we email them — before setup can be completed.
1. Information we collect
a) Information you provide during setup and use
To build and adjust your training program, the App asks you for information such as:
- Optional first name or nickname
- Age / date-of-birth bracket, and (for the Youth flow) guardian-consent status
- Body metrics you choose to enter (e.g. height, weight)
- Hockey background, position, goals, available equipment, and training schedule
- Self-assessments, baseline test results, workout logs, and game logs you record
This information is stored locally on your device. We do not receive a copy of it unless and until you choose to use a cloud feature described below.
b) Optional email address
If you choose to provide an email address, you can verify it with a 6-digit code to turn on optional cloud backup (see “Cloud backup” below). Your email is used to sign you in, to back up and restore your training data, and to key your subscription to your account. Providing an email is always optional and the App works fully without one. We never collect a child’s own email address — for players under 13, the only email we hold is the parent/guardian’s.
c) Cloud backup and account data
Cloud backup is optional and off by default. When you enable it — by adding your email and entering the verification code we send — we store your email and a copy of your profile and training program — and, as backup coverage expands, your training history (workout logs, personal records, and baseline results) — with our cloud provider, Supabase, so you can restore them on a new device. If you never sign in, none of this data leaves your device.
d) Usage and diagnostic data
To fix crashes and improve the App, we use PostHog (product analytics) and Sentry (crash reporting) to collect limited, largely de-identified information such as app events (e.g. screens viewed, features used), device model, OS version, and crash reports. Analytics events are keyed to a random anonymous identifier, not to your name or email. You can turn this off at any time in the App under Settings → Share Anonymous Diagnostics. For profiles of children under 13, analytics is disabled until a parent or guardian has completed verified consent. We do not use this data to build advertising profiles.
e) Purchase information
If you buy a subscription or other in-app purchase, the transaction is processed by Apple or Google (and our purchase manager, RevenueCat). We receive your purchase/subscription status (e.g. “active”), not your full payment-card details.
f) Notifications
By default the App uses local notifications — reminders scheduled on your device — for things like workout and game-day prompts. We ask your permission first, and you can turn them off in Settings or your OS.
If you have signed in to a cloud account and notifications are enabled, we also store a push token and a minimal training-state summary with Supabase — your first name, current streak, last training date, scheduled rest days, notification preferences (including quiet hours), and timezone offset — so our server can send you relevant reminders (for example, that your streak is at risk or a retest is due). We never use push notifications for advertising. Turning workout notifications off stops these server-sent messages, and this data is deleted when you delete your cloud account.
g) Permissions we do not use
The App does not request access to your location, camera, microphone, contacts, photos, or health/fitness platforms.
2. How we use information
We use the information above to:
- Generate and continually adjust your personalized training program
- Show your progress, baselines, streaks, and history
- Schedule the local reminders you opt into
- Process and validate in-app purchases
- Diagnose crashes and improve the App
- Respond to your support requests
- Comply with legal obligations
3. Legal bases (UAE PDPL / GDPR where applicable)
Where required, we rely on: your consent (e.g. optional email, notifications, analytics, children’s data); performance of a contract (providing the App and any purchases); and our legitimate interests (keeping the App secure and working). You can withdraw consent at any time (see “Your choices”).
4. Children’s privacy
The App offers a Youth mode designed for younger players, with age-appropriate programming.
- For users under 13, the App requires verified parental or guardian consent before setup can be completed: the parent or guardian provides their email address, we send a confirmation code to that address, and the child’s setup finishes only after the code is entered.
- We collect only the limited information needed to provide age-appropriate training — first name, age, sex, height and weight, position, training availability, injury history, and workout progress — and it is stored on the child’s device. We never collect a child’s own email address; the only email on file is the parent/guardian’s, and any cloud backup of a youth profile is keyed to that verified guardian email.
- Analytics is disabled for under-13 profiles until verified guardian consent is completed.
- We do not sell children’s data, show behavioral advertising, or knowingly collect more than is necessary.
- A parent or guardian can review the information by opening the App on the device and can delete all of it via Settings → Reset App & Delete All Data (this device) and Settings → Delete Cloud Account (our servers), or by contacting us at coach@elitehockeydrills.com.
This is intended to align with the U.S. Children’s Online Privacy Protection Act (COPPA), Apple’s and Google’s kids/family policies, and UAE data-protection requirements. If you believe a child has provided information without the required consent, contact us and we will delete it.
5. How information is shared
We do not sell your personal information. We share information only:
- With Apple / Google / RevenueCat to process in-app purchases
- With PostHog / Sentry for analytics and crash diagnostics
- With Supabase to provide optional cloud backup and, if you sign in with notifications on, server-sent reminders
- With Expo’s push service to deliver those notifications to your device
- When required by law, or to protect rights, safety, and security
- In connection with a business transfer (e.g. merger or acquisition), subject to this Policy
We do not share your information with advertising networks or data brokers.
6. Data storage, security, and retention
- Your training data is stored on your device and remains there until you delete it. Removing the App from your device deletes this local data.
- If you enable cloud backup, that data is stored with Supabase and protected in transit using industry-standard encryption. Deleting your cloud account removes it from our servers.
- We retain information only as long as needed for the purposes above or as required by law. You can delete your data at any time (see below).
7. International transfers
The App is operated from the United Arab Emirates. If a cloud or service provider processes data outside the UAE, we take steps to ensure an appropriate level of protection consistent with applicable law.
8. Your choices and rights
Depending on your location, you may have the right to access, correct, delete, or export your information, to withdraw consent, and to object to or restrict certain processing. You can exercise most of these directly in the App:
- Edit your details in the App’s profile/settings screens
- Delete everything on this device via Settings → Reset App & Delete All Data
- Delete your cloud account via Settings → Delete Cloud Account — this removes your account and every row we store for you on our servers (backup and notification data included)
- Turn off notifications and anonymous diagnostics in Settings
To make any other request, email coach@elitehockeydrills.com. We will respond as required by applicable law (including the UAE PDPL and, where it applies, the GDPR/CCPA).
9. Third-party services
The App relies on the following third parties; their handling of data is governed by their own privacy policies:
- Apple App Store / Google Play (distribution, purchases)
- Expo (app build and update tooling, push-notification delivery)
- RevenueCat (purchase management)
- PostHog (product analytics), Sentry (crash reporting)
- Supabase (optional cloud backup, accounts, and notification state)
10. Changes to this Policy
We may update this Policy from time to time. We will revise the “Last updated” date above and, for material changes, provide notice in the App where appropriate.
11. Contact us
BELLOSAURUS FOR ONLINE SELLING
Al Quoz Industrial Area 1, 203, Dubai, United Arab Emirates
Email: coach@elitehockeydrills.com
See also our Terms of Service.