UAE X 10 — Privacy Policy

UAE X 10 ("we", "us", "our") is an archery performance platform operated from the United Arab Emirates. This Privacy Policy explains what information we collect from users of the uaex10.com website and related mobile / desktop applications (together, the "Service"), how we use it, and your rights over it.

Contact: support@uaex10.com

1. Information we collect

Account information

• Name, email address, and password (stored as a salted hash).
• Role (athlete, coach, club admin, federation admin).
• Optional profile data: date of birth, gender, club, bow type, category.

Performance data

• Training sessions, scores, end-by-end arrow data.
• Competition results and rankings.
• Mental logs (mood, focus, stress) you submit voluntarily.
• Form-analysis videos and pose data, only when you explicitly record a session.

WHOOP integration optional

• If you choose to connect a WHOOP membership, we store OAuth access and refresh tokens securely so we can fetch your Recovery, HRV, Resting Heart Rate, Sleep, and Strain metrics on your behalf.
• We request the scopes read:recovery, read:cycles, read:sleep, read:workout, read:profile, read:body_measurement, and offline.
• You can disconnect WHOOP at any time from your profile. On disconnect, the OAuth tokens are deleted; historical readings remain in your training history unless you delete them.

Technical data

• IP address, browser / device type, pages visited, and timestamps — used for security and fraud prevention.
• Cookies and local storage used to keep you signed in and remember preferences.

2. How we use your information

• To provide the core Service — scoring, training history, analytics, rankings.
• To personalise the AI coaching and performance recommendations shown to you.
• To send you reminders, notifications, and service announcements you've opted in to.
• To process subscription payments via Stripe (payment card data never touches our servers).
• To prevent abuse, investigate security incidents, and comply with UAE law.

3. Sharing

We do not sell your personal data. We share data only with:

• Stripe — for payment processing.
• WHOOP — only if you connect WHOOP; tokens and requests go to their developer API.
• Amazon Web Services (Frankfurt) — our hosting provider. Data is stored in EU infrastructure.
• Your coach / club admin — if you are an athlete attached to a club, the club staff can see your training sessions and performance (not your WHOOP tokens or payment details).
• UAE Archery Federation — aggregate/anonymised rankings and results for sanctioned competitions.

4. Retention

We keep account and performance data as long as your account is active. You can delete your account at any time from Settings. On deletion, personal data is removed within 30 days; anonymised aggregate data (for ranking history) may be retained.

5. Your rights

• Access the data we hold about you.
• Correct or delete your account and personal data.
• Export your training history in standard formats (CSV / PDF).
• Disconnect third-party integrations (WHOOP, Stripe) at any time.
• Opt out of non-essential emails and notifications.

To exercise any of these rights, email support@uaex10.com from your registered address.

6. Children

Cadet-age athletes (under 18) may use the Service only with the consent and supervision of a parent, guardian, or authorised coach. We do not knowingly collect data from children under 13.

7. Changes to this policy

We may update this policy from time to time. Significant changes will be announced in-app and by email. Continued use of the Service after a change constitutes acceptance of the updated policy.