Privacy Policy

• Spimbl is a closed app. There is no public signup. Our staff create every account.
• Athletes do not have their own accounts. Information about an athlete is provided by that athlete's parent or guardian, or by our staff as part of the athlete's enrollment with us.
• Each person only sees what their role allows. Families see their own athletes. Coaches see the programs and levels they coach.
• We never sell personal information, never show ads, and never use athletes' information for advertising or to train AI models.
• Parents and guardians can review, correct, or delete their child's information at any time.

Spimbl only collects information that is needed to run our program:

• Account information for parents, guardians, and staff: name, email address, phone number, role (owner, admin, coach, or parent/guardian), and which athletes a guardian is connected to.
• Athlete profile information: name, date of birth, profile photo, program, level, practice group, season enrollment, emergency contact, competition apparel size, equipment settings (for example, bar and vault settings), and a link to a long-term training plan if one is used.
• Health and safety information a family chooses to share so coaches can respond appropriately: medical or allergy notes and photos of doctor's notes.
• Training and performance records: skill progress and history, physical abilities testing results, coaching notes and focus areas, other items our staff track for the program, attendance, and meet entries, scores, and placements.
• Photos, videos, and files: skill and routine videos, reference videos, and documents such as handbooks, meet packets, forms, and floor music uploaded by staff or families.
• Messages: announcements, level and practice group chats, and direct messages sent in the app.
• RSVPs and notification settings: event responses, which notification channels each person has chosen (push, email, text), and records of which notifications were sent.
• Google Drive (optional, staff only): if a staff member imports a meet results spreadsheet from Google Drive, Spimbl only sees the single file they pick in Google's own file picker. Spimbl does not browse, store, or keep access to anything else in that person's Drive.
• Technical information: sign-in cookies needed to keep you logged in, standard web request data (such as browser type and IP address) kept by our hosting providers, and a device token if you turn on push notifications.

Spimbl does not use advertising cookies, third-party analytics or tracking tools, or precise location tracking. It does not use facial recognition or collect biometric identifiers from photos or videos.

Most of our athletes are minors, and many are under 13. We take the protection of their information seriously and follow the Children's Online Privacy Protection Act (COPPA) as a guide for how we handle it.

• Children do not use Spimbl directly. Athletes cannot create or log in to accounts. We do not knowingly allow anyone under 18 to hold a Spimbl account, and we never collect information directly from a child through the app.
• Parents and guardians are in control. Information about an athlete comes from that athlete's parent or guardian, or from our staff as part of the enrollment and training the parent or guardian has signed the athlete up for. By providing an athlete's information, or by accepting a Spimbl invitation as that athlete's guardian, you confirm that you are their parent or legal guardian and consent to us using it as described in this policy.
• Only what's needed. We do not require more information about a child than is reasonably needed for them to take part in our program. Health notes, photos, and videos are optional.
• No outside use. Children's information is used only to run our program. It is never sold, used for advertising, used to train AI models, or shared with anyone outside the service providers listed below. If we ever wanted to share it for any other purpose, we would ask for your separate consent first.
• Your rights as a parent or guardian. You can review the information we hold about your child, ask us to correct or delete it, and tell us to stop collecting further information about them, by contacting us at xcelteam@deveaus.com or (317) 849-7744. Deleting some information (for example, emergency contacts) may affect our ability to safely coach your athlete, and we will tell you if that is the case.

• To run the app: accounts, rosters, schedules, RSVPs, attendance, messaging, and files.
• To coach and develop athletes: tracking skills and testing, preparing for and recording meets, and sharing progress reports with families.
• To respond appropriately to the health and safety information a family has shared.
• To send the notifications each person has chosen, including event reminders.
• To keep Spimbl secure, fix problems, and improve how it works for our program.
• To meet legal obligations and protect the safety of our athletes, families, and staff.

Access inside the app is based on each person's role:

• Owners and admins (our front desk and program leadership) can see and manage all programs.
• Coaches can see the athletes, families, and records for the programs, levels, and practice groups they are assigned to.
• Parents and guardians can see their own athletes' full records. On team and level rosters, they can also see the names and birthdates of other athletes on the same level or practice group, along with those athletes' guardians' names and contact information. Any guardian can hide their own contact information from other families in Settings.
• Messages and chats are visible to the people they are sent to or who belong to that chat. Please keep in mind that anyone who can see something in the app could share it outside the app, so think before posting.
• Medical notes, doctor's notes, and emergency contacts are available only to our staff and that athlete's own guardians, and links to uploaded documents expire within minutes so they can't be passed around.

We share information only with the service providers that run Spimbl for us, and each receives only what it needs to do its job:

• Supabase: database, sign-in, and private file storage for photos, videos, and documents.
• Vercel: hosting for the Spimbl website and app.
• Resend: email delivery.
• A text message provider (such as Twilio): text messages, only for people who have opted in.
• Your browser or phone maker's push service (for example, Apple, Google, or Mozilla): push notifications, only if you turn them on. Push messages include only a short summary.
• Google: only when a staff member chooses to use the Google Drive import, or when you tap a "Get directions" link, which opens Google Maps. Google's own privacy policy applies to those interactions.

We choose providers that commit to protecting the information they handle. We may also disclose information when the law requires it, to protect the safety of an athlete or anyone else, or to report suspected abuse as required by law and by our Safe Sport obligations. If ownership of our program ever changes, the new owner would be required to keep honoring this policy for information already collected.

Text notifications are optional and are only sent to people who turn them on. Message frequency varies with the team schedule, and message and data rates may apply. Reply STOP to any text to stop receiving them, or HELP for help. You can also change your notification choices in the app at any time.

We keep information only as long as we need it for our program, then delete it:

• While an athlete is active with us, we keep their information so we can coach them and keep their records complete.
• Medical notes, doctor's notes, and emergency contacts are deleted within 90 days after an athlete leaves our program.
• Photos, videos, coaching notes, and skill and testing records are deleted within 2 years after an athlete leaves, in case they return.
• Meet results (name, level, scores, and placements) are kept as part of our team's historical record, since meet hosts publish these results publicly too. A parent or guardian can ask us to remove their athlete's name from our copy at any time.
• Messages and chats are kept for up to 3 years, and notification records for up to 12 months.
• Parent, guardian, and staff accounts are deleted within 90 days after a request, or after no connected athlete has been active for 2 years.

If you want anything deleted sooner, contact us and we will take care of it.

Spimbl uses encrypted connections, role-based access rules enforced by the database itself, and private file storage that can only be reached through short-lived links. Only staff who need information to do their jobs can see it, and staff access ends when someone leaves our team. No system is perfectly secure, but we take reasonable steps to protect this information and review our safeguards regularly. If a security incident ever affects your information, we will notify you as required by law.

• Review and update your own account information in the app.
• Choose which notifications you receive and how (push, email, or text).
• Hide your contact information from other families on the roster, from Settings.
• Request a copy of, a correction to, or the deletion of the information Spimbl holds about you or your athlete.

To make a request, contact us at xcelteam@deveaus.com. We may need to confirm your identity and your relationship to an athlete before acting on a request, and we will respond within 30 days. We offer these rights to everyone, regardless of which state you live in, and we will never treat you differently for using them.

Spimbl may link to other sites, such as meet host pages, map directions, or documents stored elsewhere. We are not responsible for how those sites handle information, so please review their privacy policies.

Spimbl is operated from the United States, and information is stored and processed in the United States by us and our service providers.

If we change this policy, we will update the date at the top of this page. If a change meaningfully affects how we use children's information, we will let families know in the app or by email before it takes effect and ask for consent where the law requires it.

Questions about this policy or how Spimbl handles your information? Reach us at:

DeVeau's School of Gymnastics
9032 Technology Drive, Fishers, IN 46038
(317) 849-7744
xcelteam@deveaus.com