Last updated: August 15, 2026
Orca Sports ("we", "our", or "the app") is a fitness coaching platform that connects coaches with clients for aqua therapy and sports training. This policy explains how we handle your information.
Your account, database, and uploaded-file data is hosted using Supabase in the European Union (EU-West-1). We use encrypted connections, private file storage, and role-, ownership-, and assignment-based access controls. Clients can access their own client information; authorized administrators and customer-support staff can access information needed to operate the service; and coaches can access information for clients and sessions assigned to their work.
We do not sell or trade your personal information. We disclose information only to authorized Orca Sports staff and assigned coaches who need it to provide the service, and to the service providers listed below that process data on our behalf. We may also disclose information when required by law or when necessary to protect users, the service, or our legal rights.
We retain account, profile, contact, health, coaching, session, and device-token data for as long as your Orca Sports account is active and as needed to provide the service.
You can request deletion at any time from the Profile screen in the app or by contacting us at the email address below. After we receive and verify a valid request, we delete or de-identify the account and its associated personal data from our active systems within 30 days. This includes authentication data, profile and contact information, health information and medical attachments, training plans, assessments, and device tokens.
For operational and financial reporting, we may retain de-identified attendance, session, ticket-category, payment-status, payment-amount, and timestamp records after removing the client ID, name, email, phone number, Auth identifier, health details, and other information that links the record to you. Session-level attendance ticket or receipt photos uploaded by authorized staff may be retained with the related operational and financial session records for as long as they are needed for accounting, dispute resolution, fraud prevention, or legal obligations; access remains restricted.
We may also retain only the specific information required for a longer period when necessary to comply with law, prevent fraud or abuse, maintain security, resolve disputes, or enforce agreements. Information retained for one of these purposes is restricted from other use and deleted when the applicable obligation ends. Historical pseudonymous diagnostic events may remain for the service provider's configured troubleshooting and security retention period and are automatically removed when that period expires.
Our service providers may keep protected residual copies for a limited period under their backup, security, and legal-retention procedures. Those copies are isolated from routine use and removed according to the provider's retention schedule.
The app uses the following third-party services:
We do not use personal information for third-party advertising or cross-app tracking.
Children under 13 may not create or manage an Orca Sports account themselves. When coaching services are arranged for a child under 13, a parent or legal guardian must provide the child's information, consent to its use for the service, and manage the account and deletion requests on the child's behalf. We handle that information under the same protections and retention practices described in this policy.
You may access or update profile data through the app, request a copy of your data, or request correction or deletion by contacting us. Requests are handled subject to applicable law and the limited retention practices described above.
We may update this policy from time to time. Any changes will be posted on this page with an updated date.
If you have questions about this privacy policy, contact us at: yahiaa.aglan@gmail.com