Privacy Policy

1. Who we are

Eleve is operated by Borba 2994 LLC, 1014 Bellingham Drive, Oceanside, CA 92057, United States. Where this policy says “we” or “Eleve”, it means that company.

You can reach us at support@tryeleve.com about anything in this policy.

Representative

We value your privacy and your rights as a data subject and have therefore appointed Prighter Group with its local partners as our privacy representative and your point of contact for the following regions: the European Union (EU) and the United Kingdom (UK). Prighter gives you an easy way to exercise your privacy-related rights (e.g. requests to access or erase personal data). If you want to contact us via our representative, Prighter or make use of your data subject rights, please visit the following website: https://app.prighter.com/portal/eleve.

2. What we collect

2.1 Recorded by a school or coach (Mode A)

• Name, date of birth, sport and discipline
• Enrollment: which organization, which group or level, attendance
• Session records, per-skill progress, assessments and training plans
• Video recorded by a coach during a school session
• Coach notes and behavior notes
• Judged competition results, placements and scores

2.2 Created by you (Mode B)

• Video you film and upload yourself
• Practice you log on your own time, at home or at the park
• Goals and run plans you set for yourself
• Competition results you enter yourself
• Your account details: name, email, and your relationship to the athlete
• Your phone number, and an emergency contact's name and phone number, when you register an athlete for a competition or event
• Subscription and payment records, if you subscribe

We use phone numbers only to reach you about the event, application or account you gave them for, including in an emergency at an event. We do not send text messages, and we do not share phone numbers with anyone for their marketing.

2.3 Health information

If an injury is recorded, we store the type of injury, the body part, how severe it is, the dates, the return-to-activity stage, and any notes, treatment plan or activity restrictions a coach or administrator adds. We treat this as sensitive information and it is never included in a share with another organization unless that specific category was granted.

Injury records can come from two places. When a school or federation records one (Mode A), the organization is responsible for having a valid reason to record health information, which under the GDPR is normally the explicit consent of the athlete or their parent or guardian (Article 9(2)(a)), and we process it only on its instructions. When a parent or athlete reports an injury themselves (Mode B), we keep it because they chose to enter it, so our basis is their explicit consent (Article 9(2)(a)). They can withdraw it at any time by deleting the record. If the athlete trains with a school, that school's coaches can see injuries the family reports, so they can adjust training. Otherwise only the family sees them.

Two other places hold health information. Wellness check-ins, where a parent or athlete records mood, sleep, soreness or stress, work the same way as family-reported injuries: they are entered by choice, our basis is explicit consent, and the athlete's school coaches can see them. Registration for competitions Eleve runs can ask for medical details such as allergies, conditions, medications or accommodations, so the event can keep the athlete safe. Giving them is optional, our basis is the explicit consent of the parent or guardian who enters them, and they are used only for that event.

2.4 Technical information

• Sign-in and session data
• Device tokens, so we can send you notifications
• IP address, device and browser information
• Usage and error logs

3. How we use it

In Mode A, we process records on the instructions of the school or federation, to run coaching: tracking progress, letting coaches give feedback, letting parents follow along, producing reports, and supporting communication between coaches and families.

In Mode B, we process your records to give you the product you signed up for: storing your clips, keeping your practice history, tracking your goals, running your subscription, and sending you notifications you asked for.

In both modes we also process data to keep the service secure, prevent abuse, fix problems, and meet legal obligations.

3.1 Our legal reasons (GDPR)

Mode A. We process school and federation records under our Data Processing Agreement with that organization. The organization decides the legal reason for its processing, typically its agreement with the family or its legitimate interest in running its program.

Mode B. When you use Eleve directly, we rely on:

• Our contract with you (Article 6(1)(b)) for your account, your clips, practice history, goals and plans, the AI summaries and search that are part of the product, and your subscription.
• Legal obligations (Article 6(1)(c)) for payment and tax records.
• Legitimate interests (Article 6(1)(f)) for keeping the service secure, preventing abuse, fixing errors, and understanding which features are used. Our analytics are tied to your account id, role and organization rather than your name or email, and we do not record your screen. The same interest covers occasional emails about features of the product you use, which you can stop with the unsubscribe link in each one.

Our AI progress summaries never receive an athlete's name: it is replaced with a placeholder before the request. Two features send text as it was written: the skill assistant, which receives whatever a coach types to it, and live commentary at competitions Eleve runs, where the commentator's words can include an athlete's name. Our AI provider does not use what we send it to train its models, and keeps it for at most 30 days to detect abuse.

4. Sharing between organizations

Nothing is shared between organizations because they both use Eleve. A school cannot see another school's athletes, sessions, videos or notes. Every request to our servers is checked against the account making it.

When a federation or another organization does get access, two separate things must happen:

• An organization-to-organization agreement. On its own this shows volume only, such as how many sessions were run. No athlete, no name, no video.
• A grant for a specific athlete. It lists exactly which categories are included and can carry an end date. Nothing outside that list is visible.

Categories are split by who owns them. A school can only grant what the school recorded. Anything you created can only be granted by you. If a school shares its own records about your athlete, a guardian can still withdraw that share afterwards. Coach notes are excluded from every category.

Federations follow the same rules. A club belonging to a federation does not give the federation access to its athletes. The federation sees only what has been granted for a specific athlete, category by category, under the two steps above.

You can see every share affecting your athlete, and who holds it, on the Shared data page in your account.

5. Service providers

We use these companies to run Eleve. They may only use data to provide services to us, never for their own purposes.

We will tell customers before this list changes. We may also disclose information when the law requires it, such as a court order, and we will notify the organization unless we are prohibited from doing so.

6. Where your data is stored

In the United States. We are a United States company and all of the providers above are United States providers. We do not currently offer hosting inside the European Union.

If you are in the European Economic Area, the United Kingdom or Switzerland, your data is processed in the United States. This is how it is protected:

• Through a school or federation (Mode A). The organization sends data to us under our Data Processing Agreement. For organizations in the European Economic Area, the United Kingdom or Switzerland, we put a GDPR addendum to that agreement in place, which incorporates the European Commission's Standard Contractual Clauses (Module 2, controller to processor), the UK International Data Transfer Addendum, and the amendments needed for Switzerland.
• Directly with us (Mode B). You give your data straight to a United States company, and we apply this policy and the GDPR wherever it applies to us.
• Our providers. Each one is bound by a data processing agreement that includes the Standard Contractual Clauses (Module 3 where we pass on an organization's data) or relies on the EU-U.S. Data Privacy Framework.

You can ask us for a copy of these safeguards.

7. How we protect it

• Encrypted in transit (TLS) and at rest (AES-256)
• Role-based access, checked on the server for every request
• Time-limited signed links for video, so files are never publicly readable
• Multi-factor authentication support
• Access logging, security monitoring and an incident response procedure
• Least-privilege access for our staff, under confidentiality obligations

No system is perfectly secure. Protect your login, and tell us immediately if you think something is wrong.

8. Children

Most athletes on Eleve are children, and we designed it on that basis. We do not show them advertising, and we do not build marketing profiles of them.

In Mode A, a school may provide consent on behalf of parents for educational purposes where the law allows it. In Mode B, an account for a child is created and controlled by their parent or guardian.

Athletes can create their own account only from age 18. Anyone younger has an account created and managed by a parent or guardian, or is enrolled by their school or federation. We do not ask children to agree to anything on their own. Before 13 October 2026 a small number of athletes under 18 created their own accounts; we are moving those accounts to a parent or guardian.

Where a school or federation relies on consent for a child, it collects that consent from the parent or guardian, following the age set by its own country's law (for example, 15 in France).

9. Your rights

9.1 If you use Eleve directly (Mode B)

Come to us. Do not go to a school. You can:

• Ask for a copy of what we hold about you and your children
• Correct anything wrong
• Delete your account from inside the app, or ask us to delete it
• Withdraw a share you previously granted
• Object to or ask us to restrict certain processing
• Opt out of non-essential email using the unsubscribe link

Email support@tryeleve.com and we will respond within the time the law allows.

9.2 If your athlete is enrolled somewhere (Mode A)

For records the school created, the school decides. Ask them first, because they are the ones who can authorize a change. But you can always come to us too. If you contact us about school records, we will pass your request to the school promptly and help them act on it. We will not leave you without a route.

9.3 Wherever you are

We give the rights above to everyone, wherever you live. If you are in the European Economic Area, the United Kingdom or Switzerland, you can also complain to your data protection authority, for example the CNIL in France or the ICO in the United Kingdom. We would appreciate the chance to put it right first.

10. How long we keep it

In Mode A, for as long as the organization needs it, under their retention rules. If they leave Eleve, their records are available to export for 30 days and are then deleted. Backups are cleared on our ordinary cycle, within 90 days.

In Mode B, for as long as your account is open. When you delete your account, your login is removed straight away and the rest of your personal data within 30 days. Records a school or federation created about an athlete stay with that organization, with your name and contact details removed. Backups are cleared within 90 days.

Payment and tax records are kept for as long as the law requires, which can be up to seven years.

11. United States schools

For institutions subject to FERPA, we act as a “school official” with legitimate educational interests, use education records only to provide the service, and do not re-disclose them without consent or as FERPA permits. For children under 13 we comply with COPPA, collecting information only at the institution's direction for educational purposes and deleting it on request.

12. Changes

We may update this policy. We will tell organizations about material changes by email at least 30 days beforehand, and the date at the top shows when it last changed.

13. Contact us

Related