Privacy Policy

Account: your email address and profile name.

Team & roster: team name, and for each player a name, jersey number, position, height, optional photo and notes.

Match data: scores, rally logs, per-player statistics, lineups and rotations.

Fitness data (optional): self-reported weight, body-fat, resting heart rate, vertical jump, sleep, soreness and energy, and any photo you upload of a scale, watch or app screen for AI to read.

Nutrition data (optional): meal photos, AI-estimated calories and macros, and cut/bulk/maintain goals.

Payments: the top-up pack you choose and the payment screenshot you upload for verification.

Usage & device: basic technical logs needed to run and secure the service.

To provide the app: manage your roster, score matches, track stats, plan training, and run the fitness, task and nutrition features you choose to use.

AI analysis: when you use an AI feature, the relevant data (e.g. a match summary, a fitness/meal photo, or a compact squad summary) is sent to our AI processors to generate the result. We do not sell your data or use it for advertising.

To operate payments and provide support.

Many volleyball players are under 18. Coaches and team admins are responsible for obtaining consent from a parent or guardian before adding a young player's personal or health data (fitness metrics, body/scale photos, meal photos). If you cannot obtain consent, do not enter that data.

Fitness and nutrition figures are approximate performance guidance only and are not medical advice.

Team data is private to your team. Row-Level Security in our database restricts every record to members of that team; other teams and non-members cannot read it.

The operator may access limited data to provide support and to review payment top-ups.

We rely on: Supabase (hosting, database, storage, authentication), OpenRouter and Google (Gemini) for AI processing, and Resend for transactional email. These providers process data on our behalf and may store or process it outside Hong Kong.

We keep data for as long as your account or team is active. You can delete players, records and teams in the app; deleting a team removes its associated data. To delete your account or request full deletion, contact us.

Data is encrypted in transit, access is controlled by Row-Level Security, and payment/AI secrets are kept server-side. No system is perfectly secure, but we take reasonable measures to protect your data.

Under the Personal Data (Privacy) Ordinance you may request access to, or correction of, your personal data. Contact us to make a request.

We may update this policy; material changes will be reflected by the date above.

Questions or requests: vber.app@gmail.com.