Last updated: 26 May 2026
Protocol ("we", "us", "our") operates the Protocol web application. This policy explains how we collect, use, and protect your personal information when you use our service.
We collect the following information when you use Protocol:
We use your information to:
Your training data is shared with your assigned coach. We do not sell your personal information to third parties. We may share data with service providers (Supabase for database hosting, Vercel for web hosting) who process data on our behalf under strict confidentiality agreements.
Your data is stored securely using Supabase (hosted on AWS). We use row-level security policies to ensure athletes can only access their own data. All data is transmitted over HTTPS. Authentication uses industry-standard methods including magic links, password hashing, and optional two-factor authentication.
You have the right to:
We use essential cookies for authentication and session management. We do not use tracking or advertising cookies.
We may update this policy from time to time. We will notify you of significant changes via email or in-app notification.
If you have questions about this privacy policy, contact us at privacy@protocolapp.uk.