Privacy Policy

1. Who we are

The controller of your personal data is Thomas Kanflo Konsult AB (org. nr [ORG NR]), [ADDRESS]. Contact us about anything in this policy at [EMAIL].

2. What we collect

When you use the Clean Skate app we process:

• Account data from Sign in with Apple: a user ID, your email address (or Apple's private relay address) and your name.
• Profile data: username, first and last name, profile picture link, whether you use the app as a skater, a coach or both, and your invite code.
• Skating data you create: programs and their elements, runthroughs with scores, base value and grade of execution, and any notes you write.
• Coach connections: which coaches and skaters you are connected with.
• Subscription data: Apple handles payment and we never see your card details. We link a purchase to your account with an account identifier, and we store promo codes you redeem.
• Technical data: when your account was created and when you last signed in, plus the IP address and device information in our authentication logs.

We do not use advertising, analytics or tracking tools, and we do not sell your data.

The Clean Skate admin website, which is for staff only, sets a sign-in cookie. It sets no other cookies.

3. Why we use it, and our legal basis

• To create your account and provide the app, including saving your programs and scores: performance of a contract (GDPR Art. 6(1)(b)).
• To share your skating data with a coach when you connect with them: performance of a contract, started by you. You choose who you connect with.
• To keep the service secure, give support and understand overall usage (for example how many people are active), through an admin tool that only authorized staff can reach: our legitimate interest in running a safe and reliable service (Art. 6(1)(f)).
• To handle subscriptions: Apple processes payments as an independent controller under its own privacy policy.

4. Who can see your data

• You.
• Coaches you have connected with, who can see the skating data of the skaters they are connected to.
• Authorized staff, through an admin tool protected by multi-factor authentication. Access is limited to what is needed to run and support the service.

5. Service providers (processors)

• Supabase: database and sign-in. Data is stored in the US East (N. Virginia) region.
• Apple: Sign in with Apple, App Store and TestFlight, and payments.
• Vercel: hosting of the Clean Skate website.

They process data only on our instructions, under data processing agreements.

6. Transfers outside the EU/EEA

Our database is in the United States. These transfers rely on the EU–US Data Privacy Framework where the provider is certified, and otherwise on the European Commission's Standard Contractual Clauses.

7. How long we keep it

We keep your data while your account exists. If you ask us to delete your account, we delete your profile and skating data within 30 days. Authentication logs are kept for the period our provider sets, and are then removed.

8. Your rights

You can ask for access to your data, a copy of it, correction, deletion, restriction of its use, and you can object to processing based on legitimate interest. To use any of these rights, email [EMAIL]. We answer within one month.

If you think we handle your data wrongly, you can complain to the Swedish Authority for Privacy Protection (IMY, imy.se) or to your local supervisory authority.

9. Children

In Sweden you must be at least 13 to consent to the processing of your data on your own. If you are younger, a parent or guardian must agree on your behalf. If you believe a child has signed up without this, contact us and we will delete the account.

10. Changes

We may update this policy. The date at the top shows when it last changed, and we will tell app users about material changes.