1. Who We Are

Fencer IQ is a product of EXADreams LLC. References to "Fencer IQ," "we," "us," or "our" in this policy refer to EXADreams LLC operating the Fencer IQ platform. Fencer IQ is a fencing development platform that provides assessment, scoring, AI-powered growth planning, progress tracking, messaging, and coaching tools for fencers, coaches, parents, and clubs. This Privacy Policy explains how we collect, use, and protect your information.

2. Information We Collect

2.1 Account Information

• Registration data: name, email address, role (athlete, coach, parent, club), and password (encrypted). If you sign in with Google, we receive your name and email from Google.
• Profile photo: optional profile picture you upload, cropped and stored securely.
• Notification preferences: your email opt-in/out settings for assessment, plan, and invitation notifications.

2.2 Athletic Profile Data

• Weapon (foil, epee, sabre), competition level, age category, club affiliation, and coaching credentials.

2.3 Assessment Data

• Responses to self-assessments, parent insight surveys, and coach evaluations.
• Calculated dimension scores (Technical, Tactical, Mental, Discipline, Support, Nutrition).
• Overall score and tier classification.

2.4 AI-Generated Content

• Growth plans and follow-up questions generated by our AI system based on your assessment data.
• AI chatbot interactions within the platform.

2.5 Progress Tracking Data

• Training journal: entry type, title, notes, mood rating, energy level, duration, and tags.
• Media uploads: photos and videos attached to journal entries (stored securely in cloud storage).
• Competition media: Photos, videos, and PDF documents (bout sheets, pool results, etc.) uploaded to competition entries. These files are stored in Supabase cloud storage buckets and are accessible to the fencer, their connected coaches, and (for minors) their linked parent.
• Media Analysis videos: Video clips uploaded for AI-powered technique analysis are stored in Cloudflare R2 (US-based) for up to 90 days and then automatically deleted. The video is sent to Google's Gemini Vision API for processing under Google's paid API terms (your data is not used to train AI models). The structured analysis results (corrections, scores, drills) are stored indefinitely as part of your development profile. Full details are in the Media Analysis Agreement.
• Goals: target scores per dimension, target dates, and completion status.
• Weekly check-ins: training sessions count, competitions, focus areas, wins, struggles, and self-ratings.
• Competition results: event name, date, placement, pool record, DE results, and rating earned.
• Training sessions: scheduled sessions, drills, duration, and intensity.

2.6 Messaging Data

• Direct and group messages exchanged between users (coaches, athletes, parents, clubs).
• Conversation membership, timestamps, and read status.

2.7 Custom Content

• Custom drills: drills created by coaches including name, description, category, and equipment.

2.8 Contact and Communication Data

• Information submitted through our contact form (name, email, phone, message).
• Email addresses used for transactional emails (verification, password reset, progress reports, invitations).

2.9 Physical & Health-Adjacent Data

To personalize training plans and drill recommendations, we may collect the following optional information:

• Date of birth: Used for age-appropriate training recommendations, COPPA compliance, age category classification, and determining whether a fencer is a minor (under 18). For minors, DOB triggers additional safeguards including parent/guardian account linking requirements and age-gated content restrictions.
• Gender: used for physiological training considerations.
• Height and weight: used for drill intensity calibration and conditioning load.
• Physical limitations: injury history and mobility restrictions — used to exclude contraindicated exercises.
• Mental considerations: focus challenges and competition anxiety — used for training plan adaptation.

Important safeguards for health-adjacent data:

• All fields listed above are entirely optional — you can fully participate in Fencer IQ without providing any of them.
• Each field can be individually opted in or out at any time via your profile settings.
• Separate consent is required for health-adjacent data collection, beyond general Terms acceptance.
• This data is used only for personalizing training plans and drill recommendations.
• This data is never shared with other users. Coaches see training plan adjustments (e.g., "avoid lunges"), not the underlying health data.
• This data is never sent to third-party AI providers in identifiable form. When used in AI plan generation, it is transmitted without names, emails, or other identifying details.
• For users under 13, parental consent is required before any health-adjacent data is collected (see Section 3).
• Not medical records: Fencer IQ is not a HIPAA-covered entity. Health-adjacent data collected on this platform is not protected health information (PHI) under HIPAA. It is collected and used solely for training personalization within the Fencer IQ platform.

2.10 Billing Data (Future)

• Subscription plan and billing history. Payment card details are processed directly by Stripe and are never stored on our servers.

2.11 Device Sensor Data

• Camera (Lunge Analysis): When you use the Lunge Analysis feature, your device camera captures video that is processed entirely on-device using Google MediaPipe pose estimation. 33 body joint coordinates are extracted in real-time for technique feedback. No video frames, images, or raw camera data are uploaded, stored, or transmitted to any server. Only derived pose metrics (joint angles, timing data) may be saved to your training journal if you choose to log the session.
• Microphone (Wolfy Voice Assistant): When you activate the Wolfy Voice Assistant, your device microphone captures speech that is transcribed to text. Only the text transcript is transmitted to our servers, where it is sent to Anthropic Claude Haiku for natural language parsing. Raw audio recordings are never stored or transmitted.

2.12 Bulk Import Data

Coaches and club administrators may upload CSV files to onboard multiple fencers at once. By uploading a CSV file, the coach or administrator confirms that they have authorization to provide the personal data (names, emails, and other profile fields) included in the file. The CSV file is processed server-side to create individual accounts, then the original file is discarded and not retained in storage. For minors included in a bulk import, the importing coach or club administrator must ensure that parental consent has been obtained prior to import.

3. Children's Privacy (COPPA Compliance)

We take the privacy of minors seriously. Fencer IQ may be used by athletes under 13 years of age. For users under 13:

• A parent or legal guardian must create and manage the account.
• We collect only information necessary for the fencing development service.
• Date of birth is collected to verify the athlete's age category and ensure age-appropriate content and protections.
• Parents may review, modify, or delete their child's data at any time through the Settings page or by contacting us.
• We do not knowingly collect personal information from children under 13 without verifiable parental consent.
• Journal entries, media uploads, and messages involving minors are subject to the same protections.
• Health-adjacent data (height, weight, physical limitations, mental considerations) for minors under 13 requires explicit parental consent via a separate consent flow, independent of general Terms acceptance.
• Parents can view, modify, and delete their child's health-adjacent data at any time through the profile settings or by contacting us.
• Verifiable parental consent: For users under 13, we obtain verifiable parental consent through email-based consent verification. The parent or guardian must create the child's account using their own verified email address and explicitly confirm their relationship and consent.
• Device permissions for minors: Camera access (Lunge Analysis) and microphone access (Wolfy Voice Assistant) for users under 13 require parental consent. These features process data on-device and do not upload video or audio, but parents should be aware their child may be using device sensors.
• Fencer ID for minors: Digital Fencer ID cards for athletes under 13 display the child's name, weapon, and club on a publicly accessible verification page. Parents may opt out of Fencer ID issuance for their child by contacting support@fenceriq.ai.
• AI chatbot for minors: When users under 13 interact with the Wolfy Chatbot, their training context data is sent to Anthropic Claude AI under the same conditions as adult users (Section 5.1). Parents may restrict chatbot access for their child through Settings.

4. How We Use Your Information

We use collected information to:

• Provide assessment scoring and development reports.
• Generate AI-powered growth plans personalized to each athlete.
• Enable coaches to track and evaluate their athletes.
• Enable parents to participate in the tri-perspective assessment model.
• Facilitate messaging between connected coaches, athletes, parents, and clubs.
• Generate and send monthly progress report emails to parents.
• Track training progress through journals, goals, check-ins, and competition results.
• Display your profile photo to connected users within the platform.
• Send transactional emails (verification, password reset, invitations, progress reports).
• Improve our platform and assessment algorithms.
• Train and improve the SaFE AI engine (our proprietary fencing development model) using anonymized, aggregated data — see Section 5.2 below.

5. AI Processing

5.1 Third-Party AI (Anthropic Claude)

We use Anthropic Claude AI services for multiple platform features. Data sent to Anthropic varies by feature:

• Growth Plans & Assessments: Assessment data and athlete profile information are sent to Anthropic Claude to generate growth plans, adaptive follow-up questions, and coaching insights.
• Wolfy Voice Assistant: Text transcripts of your spoken commands are sent to Anthropic Claude Haiku for intent parsing and command execution. Only the text transcript is sent — never raw audio.
• Wolfy Chatbot: When you interact with the Wolfy Chatbot, contextual athlete data — including session history, goals, scores, assessment results, and training progress — is sent to Anthropic Claude to generate personalized coaching responses.
• AI Growth Plans: When generating personalized 90-day training plans, your assessment scores, goals, competition history, and (if you have consented) anonymized health parameters are sent to Anthropic Claude.

For all AI features, data sent to Anthropic is: transmitted securely through an authenticated server-side proxy; processed in real-time and not stored by the AI provider beyond the request; not used by Anthropic to train their AI models; and subject to per-user daily rate limits.

5.2 SaFE Engine — Internal AI Model Training

Fencer IQ is building its own proprietary AI engine called SaFE (Sabre · Foil · Epee), specifically designed for fencing development. To improve this engine, we may use platform data under the following strict conditions:

• Anonymized and aggregated only. No personally identifiable information (names, emails, profile photos) is ever included in training data. Data is stripped of all identifying details before any model training.
• Data never leaves the platform. All training happens within Fencer IQ's infrastructure. No assessment data is exported to external AI providers for training purposes.
• Purpose-limited. Training data is used solely to improve fencing-specific capabilities: score prediction, drill recommendations, development pattern recognition, and assessment question optimization.
• Opt-out available. You may opt out of contributing your anonymized data to SaFE model training at any time via Settings → Notifications → "Contribute to SaFE AI." Opting out does not affect your access to any features.
• Minors' data excluded by default. Data from accounts managed by parents (under-13 athletes) is not included in model training unless the parent explicitly opts in.

6. Data Sharing

We do not sell, rent, or share your personal information with third parties for marketing purposes. Data is shared only:

• Between linked accounts (e.g., a coach can see assessments for athletes they are connected to; message participants can see each other's messages).
• With AI service providers (Anthropic) as described above, solely for generating plans and insights.
• With email service providers (Resend) for delivering transactional emails.
• With payment processors (Stripe) for billing, when applicable.
• With authentication providers (Google) when you use Google sign-in.
• When required by law or to protect the safety of our users.

6.1 Publicly Accessible Data

The following data is accessible without authentication:

• Fencer ID Verification: Each Fencer ID card contains a QR code linking to a public verification page. This page displays the fencer's name, weapon, club, and membership status. No other personal data (email, DOB, scores, health data) is displayed.
• Digital Member IDs: Your FIQ-XXXXXXXX member identifier is derived from your internal account ID and may be visible on ID cards and verification pages. This identifier alone cannot be used to access your account or private data.

For minors: Parents should be aware that their child's name, weapon, and club will be publicly visible via the Fencer ID verification page. Parents may opt out by contacting support@fenceriq.ai.

7. Third-Party Services

We use the following third-party services to operate the platform:

• Supabase: database hosting, authentication, and file storage. Data is hosted in US-East (North Virginia). Media files (photos, videos, PDFs) are stored in Supabase Storage buckets with access controls.
• Cloudflare: website hosting and server-side functions.
• Anthropic: AI processing for growth plans and adaptive assessments.
• Google: OAuth authentication (optional sign-in method).
• Resend: transactional email delivery.
• Stripe: payment processing (when billing is active).
• AskFred: Tournament search and event data. When you use the Tournament Browser, we query AskFred's public tournament database. No personal data is sent to AskFred — only search parameters (location, date range, weapon).

8. Data Security

We protect your data using industry-standard measures including:

• Encrypted database connections with row-level security (RLS) on all tables.
• HTTPS-only transmission for all data.
• Secure authentication with encrypted passwords.
• API keys stored in server-side environment variables, never exposed to browsers.
• Profile photos and media stored in access-controlled cloud storage.
• Content Security Policy (CSP) headers to prevent cross-site attacks.

8.1 Administrative Access

Fencer IQ platform administrators ("super admins") employed by or contracted by EXADreams LLC have the ability to: view and edit any user's profile information; modify user roles and permissions; access assessment data, training records, and competition entries for platform support and moderation purposes; and suspend or terminate accounts that violate the Terms of Service.

Administrative access is limited to authorized EXADreams LLC personnel, logged for audit purposes, and used only for platform operations, user support, content moderation, and enforcement of Terms of Service. Administrators do not access health-adjacent data except when required for technical support at the user's request.

9. Data Retention and Deletion

Your data is retained while your account is active. You may delete your account and all associated data at any time through the Settings page. Upon account deletion, all personal data — including assessments, growth plans, journal entries, messages, media uploads, and profile photos — are permanently removed within 30 days.

Media retention: Uploaded media files (photos, videos, PDFs) associated with journal entries and competition entries are stored in Supabase cloud storage for as long as your account is active. Upon account deletion, all media files are permanently removed within 30 days. Individual media files can be deleted at any time by the user who uploaded them.

10. Your Rights

You have the right to:

• Access and view all your personal data through the platform.
• Correct inaccurate information via the Settings page.
• Export your assessment data as JSON.
• Delete your account and all associated data.
• Remove your profile photo at any time.
• Opt out of non-essential email notifications.
• Request a complete copy of all personal data we hold about you by contacting support@fenceriq.ai. We will respond to data access requests within 30 days.
• Request deletion of specific data categories (e.g., health data only, competition media only) without deleting your entire account.

Parents have these same rights regarding their children's data. To exercise these rights, use the Settings page or contact us at support@fenceriq.ai.

10.1 Health Data Rights

In addition to the general rights above, you have the following rights specific to health-adjacent data (Section 2.9):

• Withdraw consent independently: You may withdraw consent for health-adjacent data collection at any time without deleting your account. Withdrawing health data consent does not affect your access to any other features.
• Transparency: You have the right to see which training plans and drill recommendations were influenced by your health-adjacent data.
• Accelerated deletion: Upon consent withdrawal, your health-adjacent data is permanently deleted within 7 days (compared to the 30-day window for general account deletion).

11. Cookies, Local Storage, and On-Device Data

Fencer IQ does not use third-party analytics, advertising trackers, or marketing cookies. However, the platform uses the following browser storage mechanisms to function:

• Authentication tokens: Supabase authentication stores a session token in localStorage to keep you signed in between visits.
• User preferences: Theme settings, notification preferences, and UI state may be stored in localStorage.
• Feature flags: Feature availability settings may be cached in localStorage.
• Tournament readiness: Tournament preparation checklist progress is stored in localStorage on your device.

No tracking cookies or cross-site identifiers are used. You can clear browser storage at any time through your browser settings, which will sign you out of the platform.

12. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be communicated via email or an in-app notice. Continued use of the platform after changes constitutes acceptance.

13. Contact

For privacy-related questions or concerns, contact EXADreams LLC at support@fenceriq.ai.

← Back to Home