Privacy Policy

Who we are and our role

Liquid Quotient is operated by [TO CONFIRM: legal name of the company and its registered address].

For the website, and for account security, support, analytics and running the service, we decide how personal information is used. For the information an academy puts into the app about its own members, the academy decides why and how it is used, and we process it on the academy's behalf to provide the service. If you have a question about how your academy uses your information, please ask the academy first.

The person responsible for the protection of personal information at Liquid Quotient is [TO CONFIRM: name and title], reachable at support@liquidquotient.com.

What we collect on the website

Only if you accept analytics:

• the pages you view, how long you stay engaged, how far you scroll and which outbound links you click;
• your approximate location (city or region, from your IP address), device type, browser and the site you came from.

If you decline, none of this is collected. We also store your cookie choice itself in your browser.

What we collect in the app

When you create and use an account:

• Account details: your email address, your name, your password (stored in a scrambled form we cannot read), the language you chose and, if you turn it on, the details of your authenticator app for two-step verification.
• Academy details: the academies you belong to and your role in each (for example owner, admin, teacher, student or parent).
• Devices and sessions: when you sign in, the IP address, browser and device description and the time, so you can see where you are signed in and sign a device out, and so we can protect your account. Owners and admins of an academy can see this for the members they manage.
• Usage and errors: which pages you open (without anything after a "?" in the address), a few actions (signing in, signing up, signing out, creating an academy), how long a page was open on screen, and errors you run into, including technical details such as the error message. Each record carries your user ID, your active academy, a random identifier for that browser tab session and your browser's description. It does not include your name or email address.
• Messages you send us, for example when you contact support.

We also send you the emails the app needs to work, such as account confirmation and password reset, and a security notice each time someone signs in to your account. The notice shows when it happened, the device and the IP address, so you can tell whether it was you.

Cookies on the website

The website sets:

• Google Analytics cookies (named _ga and _ga_ followed by an identifier) are set only after you accept analytics. They distinguish visitors and sessions.
• Your cookie choice is kept in your browser's local storage under the name lq_consent. It is necessary to remember your decision.

You can withdraw your analytics choice at any time with "Cookie settings" in the footer. Declining after having accepted removes the Google cookies.

Cookies in the app

The app uses only what it needs to work, and no advertising or third-party tracking cookies:

• Sign-in session cookies that keep you signed in securely.
• A language cookie (NEXT_LOCALE) and an active-academy cookie (lq_tenant) that remember your choices.
• A random identifier in your browser's session storage that groups the usage records of one browser tab. It disappears when you close the tab.

Why we use personal information

• to provide the app: creating accounts, signing you in, and showing each person only what their role allows;
• to keep accounts and the service secure, including detecting misuse;
• to find and fix errors and to understand which parts of the app and the website are used, so we can improve them;
• to answer your questions and send the emails the app needs;
• to meet our legal obligations.

We do not sell personal information, and we do not use it for advertising.

Who we share it with

We share personal information only with the following, and only as needed:

• Supabase, which hosts our database and sign-in system. Our database is located in Frankfurt, Germany.
• Hostinger, which hosts the servers that run the website and the app, located in [TO CONFIRM: country of the server].
• Resend, which delivers the emails we send you.
• Google, which provides Google Analytics for the website, only if you accept analytics. Google may process this information in the United States and other countries.
• The academy you belong to: its owners and admins can see the names, email addresses, roles and sign-in activity of its members.
• Authorities or other parties when the law requires it, or to protect rights, safety and security; and a successor if our business is sold or merged, who would be bound by this policy.

Where information is stored

Because of the providers above, your information may be processed outside your own province or country, including in Germany and the United States. Where required, we take steps to make sure it receives appropriate protection, including through contracts with these providers.

How long we keep it

• Account and academy information: for as long as the account or academy exists. When an account is deleted, we delete or anonymize its personal information, apart from what the law requires us to keep.
• Sign-in sessions: until they expire or you or an admin sign the device out.
• App usage and error records: 180 days, then they are deleted automatically.
• Website analytics: for the retention period we set in Google Analytics, which is [TO CONFIRM: 2 or 14 months].
• Backups: for a limited period after deletion, until they are overwritten.

How we protect it

Connections to the website and the app are encrypted. Passwords are stored in scrambled form. Access to data is limited inside the database itself, so each person can only reach what their role in their academy allows. You can add two-step verification to your account and sign out any device. No system is perfectly secure; if an incident puts your information at risk of serious harm, we will notify you and the authorities as the law requires.

Children and young people

Sports academies work with young people, so students may be children. A child under 14 should not create an account or give us information on their own. The academy, or the child's parent or guardian, is responsible for obtaining any consent required for a young person to use the app. If you believe a child has given us information without the required consent, contact us and we will remove it.

Your rights and choices

Depending on where you live, you have the right to:

• ask whether we hold personal information about you, and get a copy;
• ask us to correct information that is wrong or incomplete;
• ask us to delete your information, or stop using it, where the law allows;
• withdraw a consent you gave, at any time;
• ask for your information in a portable format.

To use any of these rights, write to support@liquidquotient.com. We may need to confirm who you are first, and we will answer within 30 days. If the information is held for an academy, we may direct you to the academy. If you are not satisfied with our answer, you can complain to your data protection authority, for example the Commission d'accès à l'information du Québec or the Office of the Privacy Commissioner of Canada.

Changes to this policy

We will update this page when our practices change and show the date at the top. If a change is significant, for example a new kind of tracking, we will ask for your choice again.

Contact us

Questions or requests about privacy: support@liquidquotient.com.