NextLevel Athlete

Legal

Privacy Policy

Last updated: September 27, 2026

1. Who we are

NextLevel Athlete is the data controller responsible for your personal data in connection with this website and the training Service it provides. This Privacy Policy explains what we collect, why, how we use it, who we share it with, and the rights you have over it. Payment-related data collected by our payment provider is not covered here — see Section 6.

2. Personal data we collect

  • Account data: name, email address, and login credentials when you register.
  • Profile and training data: sport, position, experience, goals, workout history, and progress metrics you log.
  • Community content: posts and comments you submit to community features.
  • Support messages: the content of any messages you send us.
  • Usage and device data: approximate location (country), device type, browser, and how you interact with the Service.
  • Technical data: IP address and similar identifiers collected automatically when you use the Service.

3. Why we use your data

  • To create and manage your account and provide the training Service to you.
  • To personalize and deliver programs, workouts, and schedules based on your inputs.
  • To operate community features and display content you submit.
  • To provide customer support and respond to your inquiries.
  • To keep the Service secure and prevent fraud or abuse.
  • To improve, maintain, and develop the Service and its content.
  • To comply with legal obligations.

4. Legal basis for processing

We process your personal data on the following legal bases:

  • Contract performance: to provide the Service you requested, including your account and subscription.
  • Legitimate interests: for security, fraud prevention, service improvement, and analytics, where these do not override your rights.
  • Consent: for optional analytics or marketing, which you can withdraw at any time.
  • Legal obligation: where we are required to retain or disclose data.

5. How long we keep your data

We keep your personal data only as long as needed for the purposes described above and to meet legal or accounting requirements. Account and training data is retained while your account is active and for a reasonable period after deletion or account closure, after which it is deleted or anonymised. You can request earlier deletion as described in Section 8.

6. Sharing your data

We do not sell your personal data. We may share it with the following categories of recipients:

  • Service providers and subprocessors: hosting, database, analytics, and support tooling that help us operate the Service.
  • Merchant of Record (Paddle): Paddle acts as Merchant of Record for our sales, handling subscription management, payments, tax compliance, and invoicing. Paddle collects and processes payment data under its own terms and policies.
  • Professional advisers: legal, accounting, and audit advisors where necessary.
  • Authorities: where required by law or to protect our rights and the safety of others.

7. International transfers

Your data may be processed outside your country of residence, including in the United States or other regions where our service providers operate. Where data leaves the UK or EEA, we rely on recognized safeguards such as Standard Contractual Clauses or applicable adequacy decisions, or another lawful transfer mechanism.

8. Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict, or object to the processing of your personal data, to port your data to another provider, and to withdraw consent at any time without affecting processing already carried out. You can exercise these rights from your account settings or by contacting us through the details on our site. We will respond within one month, as required by applicable law. If you are in the UK or EEA and unhappy with our response, you have the right to complain to your local data protection authority.

9. Security

We take appropriate technical and organizational measures to protect your personal data, including encryption in transit, access controls, and regular review of our systems. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Cookies

We use cookies and similar technologies for essential functions (such as keeping you signed in), analytics (understanding how the Service is used), and, where enabled, marketing. You can manage or disable non-essential cookies through your browser settings. Some cookies are required for the Service to function and cannot be disabled.

11. Children's privacy

The Service is designed for high-school and developing athletes. Where a user is under the age of majority, we process their data on the basis of consent from a parent or guardian, or as necessary to provide the Service requested. We do not knowingly collect data from children below the minimum age required to use the Service.

12. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be posted here with an updated date. Continued use of the Service after changes take effect constitutes acceptance of the revised policy.

See also our Terms of Service and Refund Policy.