Privacy Policy

This Privacy Policy explains how Speed Power Play (“SPP”, “we”, “us”) collects, uses, shares, and protects personal data. It covers the Speed Power Play mobile app (Apple App Store and Google Play, app ID com.fit3k.spp2), the SPP web app, and this website (https://spp-x.com).

1. Who we are

Speed Power Play is operated by SPPx Pty Ltd (“SPPx”), the company behind the Speed Power Play platform. For privacy enquiries, contact privacy@spp-x.com.

For individuals in the EU/UK, SPPx Pty Ltd is the data controller for personal data processed through individual subscriptions (SPP Lite, SPP Pro and SPP Pro.Max). Where Speed Power Play is provided to a club, academy, or organisation, that organisation may be the controller and SPP a processor — see §13.

2. Who this service is for

Speed Power Play is built for coaching and performance professionals and is intended for adults (18 and over). It is not directed to children, and we do not knowingly create accounts for, or collect personal data directly from, anyone under 18.

Coaches use SPP to plan and deliver training. Where a coach records information about the athletes they work with, the coach is responsible for having a lawful basis and any necessary consents to do so, and for only entering data they are permitted to enter.

A dedicated schools / minors offering, with parental-consent and additional safeguarding controls, is a separate future product and is not provided through the current app or covered by this policy. If you believe a minor has provided us personal data, contact privacy@spp-x.com and we will delete it.

3. What we collect, and why

We collect only what we need to run the service. We do not use third-party advertising SDKs, and we do not sell your personal information.

4. How we use your data, and our legal bases

We use the data above to provide and maintain the service; generate program drafts with Sensei; authenticate and secure accounts; provide support; analyse and improve the product; and comply with our legal obligations.

Where the GDPR or UK GDPR applies, our legal bases are: performance of our contract with you (providing the service); our legitimate interests in securing, maintaining, and improving the product, balanced against your rights; your consent where required (for example, certain analytics or optional notifications); and, for any health-related information, your explicit consent or another applicable Article 9 condition. You can withdraw consent at any time.

5. Sensei and AI processing

Sensei is our in-product assistant that drafts training programs. It is grounded in our Core Principles methodology and a curated expert corpus — not the open internet. To generate a draft, the context you provide is processed by Google's Gemini models via Firebase AI Logic. We do not use your identifiable content to train third-party or our own foundation models without a separate lawful basis. Sensei produces drafts for a human coach to review, refine, and approve; it does not act autonomously.

6. How we share data — service providers & sub-processors

We share personal data only with vendors that process it on our behalf under contract, and only as needed to run the service. We do not sell personal data, and we do not share it for cross-context behavioural advertising. Our key sub-processors:

• Google (Firebase / Google Cloud) — authentication, database (Firestore), file storage, serverless functions, analytics, crash reporting, and app-attestation.
• Google Gemini (via Firebase AI Logic) — AI program drafting (see §5).
• Cloudflare — hosting and content delivery for this website.
• Plausible Analytics — cookieless, aggregated visit statistics for this website, hosted in the EU.
• Resend — sending account emails, such as sign-up confirmations, account setup, and purchase emails. Resend receives your email address and the message content only to deliver it.
• Anthropic (Claude) — AI analysis of movement captures (Sensei Lens): frames from the video and the measurements taken from it, used to write the coach's analysis.

We may also disclose data where required by law, to protect our rights or the safety of users, or in connection with a merger, acquisition, or sale of assets (with notice where required).

7. International data transfers

We operate across Australia, the EU/UK, and the United States, and our providers may process data in those regions. Where we transfer personal data internationally, we rely on appropriate safeguards — such as the European Commission's Standard Contractual Clauses and the UK Addendum — together with our providers' compliance frameworks.

8. Data retention and minimisation

We keep personal data for as long as your account is active or as needed to provide the service, then delete or anonymise it within a defined period, unless a longer period is required by law. We minimise sensitive data: where movement video is analysed, our design preference is to keep the derived metrics and minimise retention of the raw clip. Where we hold different kinds of data for different periods, we keep each for no longer than its purpose requires.

9. How we protect your data

We protect data with encryption in transit and at rest, app-attestation (App Check), and role-based, organisation-scoped access controls so people only see the data they are entitled to. No system is perfectly secure, but we work to protect your information and to notify you and regulators of a breach where the law requires.

10. Your rights and choices

Depending on where you live, you may have the right to access, correct, delete, export (port), or restrict the processing of your personal data, to object to certain processing, and to withdraw consent. We honour these wherever we can, regardless of region.

• EU / UK (GDPR): access, rectification, erasure, restriction, portability, objection, and the right to lodge a complaint with your supervisory authority.
• California (CCPA / CPRA): the right to know, delete, and correct, and to opt out of the “sale” or “sharing” of personal information (we do neither), without discrimination.
• Australia (Privacy Act / APPs): access and correction of your personal information.

To exercise any right, contact privacy@spp-x.com. We may need to verify your identity before we act.

11. Deleting your account and your data

You can delete your account and associated personal data at any time:

• In the app: Settings → Account → Delete account — this removes your account and personal data, subject to limited records we are required to keep by law.
• By request: email privacy@spp-x.com from your account address with the subject “Delete my account”, and we will action it within 30 days.

If you are a member of a club, academy, or organisation, in-app deletion is not available: ask your organisation administrator, or contact support@spp-x.com, and see §13.

If you created your own free workspace through a campaign link, you are its administrator: emailprivacy@spp-x.com from your account address to delete your account and workspace, and we will confirm when it is done.

This section also serves as the account- and data-deletion information required by the Google Play Store.

12. Children's privacy

Speed Power Play is intended for adults (18+) and is not directed to children. We do not knowingly collect personal data from children. If we learn that we have collected personal data from a child without appropriate consent, we will delete it. The separate schools / minors product — with parental consent and additional safeguards — is governed by its own terms and is not offered through the current app.

13. Organisations & clubs

Where Speed Power Play is provided to a club, academy, or organisation, that organisation may act as the data controller for the athlete and staff data it manages, and SPPx acts as a data processor under a Data Processing Agreement. In that case, the organisation's own privacy notice governs its handling of that data; contact your organisation administrator to exercise your rights. We enter into a Data Processing Agreement with organisation customers where one is required.

14. Changes to this policy

We may update this policy as the product evolves or the law changes. We will post the new version here with an updated date and, where the change is material and the law requires, notify you directly.

15. Contact us

SPPx Pty Ltd (ACN 686 946 841), registered office in Dee Why NSW 2099, Australia. Privacy enquiries: privacy@spp-x.com.