Privacy Policy
Your privacy matters to us. This policy explains what data we collect, how we use it, who we share it with, and the controls you have over your information.
1. Introduction
Spike Science, LLC ("Spike Science," "we," "us," or "our") respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy explains how we collect, use, disclose, retain, and protect your personal information when you use the Spike Science platform, website, mobile applications, and related services (collectively, the "Service").
By using the Service, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our privacy practices, please do not use the Service.
This policy applies to all users of the Service globally. For users in the European Economic Area (EEA), additional rights under the General Data Protection Regulation (GDPR) are described in Section 9.
2. Information We Collect
We collect the following categories of personal information:
When you register, we collect your email address, display name, and password. Optionally, you may provide your position, graduation year, height, weight, wingspan, club or school affiliation, state, country, and profile photo. This information is used to create and manage your account and personalize your experience.
When you upload videos for analysis, we receive and temporarily process those video files. We store video metadata (file name, duration, resolution, file size, upload timestamp) and analysis session data associated with your uploads. You retain ownership of your video content.
We derive and store performance metrics from your video uploads, including joint angles, pose landmarks (skeletal keypoint coordinates), jump height, approach velocity, arm swing speed, kinematic chain scores, and other computed biomechanics indicators. This data forms the core of your performance profile.
We collect data you enter about your training programs, workout completions, exercise logs, calendar events, daily readiness, goals, and self-reported wellness metrics.
We automatically collect information about your interactions with the Service, including pages visited, features used, session timestamps and duration, device type, operating system, browser type and version, screen resolution, and IP address. This data is collected via server logs, cookies, and similar tracking technologies.
When you purchase a subscription, payment card details are collected and processed by our third-party payment processor (Stripe). We do not store full payment card numbers. We retain billing records including subscription tier, payment amount, and transaction history.
If you contact us via email, in-app chat, or support tickets, we retain the content of your messages and our responses for customer support and legal compliance purposes.
3. How We Use Your Information
We use the information we collect for the following purposes:
- Provide, operate, maintain, and improve the Service, including processing video uploads, generating biomechanics analysis, and delivering personalized training recommendations.
- Authenticate your identity, manage your account, and enforce our Terms of Service and other policies.
- Process subscription payments and manage billing, refunds, and subscription renewals.
- Send transactional communications, including account registration confirmations, security alerts, password resets, and service notifications.
- Send marketing communications where you have provided consent or where permitted by applicable law. You may opt out at any time.
- Improve and develop our AI models and biomechanics algorithms using anonymized, aggregated data derived from user activity. We do not use individually identifiable video content for model training without your explicit opt-in consent.
- Generate anonymized and aggregated performance benchmarks, position statistics, and athletic norms for use within the Service.
- Detect, investigate, and prevent fraudulent activity, abuse, security incidents, and other illegal activity.
- Comply with applicable laws, regulations, legal processes, and governmental requests.
- Enforce our Terms of Service and Subscriber Agreement.
4. Legal Basis for Processing (EEA/UK Users)
If you are located in the European Economic Area or United Kingdom, we process your personal information on the following legal bases:
Processing necessary to provide the Service to you, including account management, video analysis, and subscription billing.
Processing for fraud prevention, security, product improvement, and analytics, where our interests are not overridden by your rights.
Processing required to comply with applicable laws, regulations, and legal processes.
Processing based on your consent, such as for marketing communications or use of your video content for AI model training. You may withdraw consent at any time without affecting the lawfulness of prior processing.
6. Video Data and AI Processing
When you upload a video, it is transmitted over encrypted connections (TLS 1.2+) to our secure servers. Video analysis is performed by our AI pipeline, which extracts skeletal pose landmark data from video frames.
Raw video files are stored in encrypted cloud storage (AES-256 at rest). Videos are retained for as long as your account is active or until you delete them. Upon deletion, video files are removed from our storage systems within 30 days.
Pose landmark data (numerical joint coordinates) derived from your videos may be used in anonymized, aggregated form to improve our biomechanics models. This data is separated from personally identifying information before any such use.
We do not share raw video files with any third party except as required by law or with your explicit consent.
Video analysis occurs on our secure servers. We do not currently offer client-side-only processing, though analysis data is always transmitted over encrypted channels.
7. Data Retention
We retain personal information for as long as your account is active or as otherwise necessary to provide the Service. Specific retention periods are as follows:
Retained for the lifetime of your account. If you delete your account, profile data is deleted or anonymized within 90 days, subject to legal retention requirements.
Retained until you delete them or close your account. Upon deletion or account closure, video files are purged from our storage systems within 30 days.
Retained for the lifetime of your account. Anonymized, non-identifiable analysis data may be retained indefinitely for research and benchmarking purposes.
Retained for seven (7) years as required by financial regulations and tax laws.
Retained for up to 24 months for security, fraud prevention, and product improvement purposes.
8. Data Security
We implement industry-standard and commercially reasonable technical and organizational security measures designed to protect your personal information against unauthorized access, use, alteration, disclosure, or destruction.
Security measures include: TLS/HTTPS encryption for all data in transit; AES-256 encryption for data at rest; row-level security (RLS) controls on our database infrastructure; access controls restricting employee access to personal data on a need-to-know basis; regular security assessments and vulnerability scanning; and multi-factor authentication for administrative access.
Despite these measures, no data transmission over the internet and no storage system can be guaranteed to be 100% secure. You transmit information to us at your own risk. In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and applicable regulatory authorities as required by applicable law.
You are responsible for maintaining the security and confidentiality of your account credentials. Do not share your password with any third party.
9. Your Privacy Rights
Depending on your jurisdiction, you may have the following rights with respect to your personal information. To exercise any of these rights, contact us at privacy@spikescience.app.
You have the right to request a copy of the personal information we hold about you, including information about how it is being used.
You have the right to request correction of inaccurate or incomplete personal information. Many data fields can be updated directly in your account settings.
You have the right to request deletion of your personal information. We will delete or anonymize your data within 90 days of a verified deletion request, subject to legal retention obligations.
You have the right to receive your personal information in a structured, commonly used, machine-readable format and to transmit that data to another controller.
You have the right to restrict or object to certain processing of your personal information, including processing based on legitimate interests.
Where processing is based on consent, you may withdraw your consent at any time without affecting the lawfulness of processing prior to withdrawal.
California residents have the right to know what personal information is collected, used, and disclosed; the right to delete personal information; the right to correct inaccurate personal information; the right to opt out of the sale or sharing of personal information (we do not sell personal information); and the right not to be discriminated against for exercising these rights. To submit a CCPA request, contact privacy@spikescience.app.
EEA and UK residents may also lodge a complaint with the data protection supervisory authority in their member state or country.
We will respond to verified privacy requests within 30 days (or as otherwise required by applicable law). We may need to verify your identity before processing your request.
11. Children's Privacy
The Service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13 without verified parental consent, we will promptly delete that information.
Users between the ages of 13 and 17 may use the Service only with the consent of a parent or legal guardian. Parents and guardians are responsible for supervising their minor's use of the Service and are encouraged to contact us at privacy@spikescience.app with any concerns.
If you believe a child under 13 has provided personal information to us without parental consent, please contact us immediately at privacy@spikescience.app.
12. International Data Transfers
Spike Science is based in Ohio, United States. Your personal information is stored and processed in the United States and may be transferred to and processed in other countries where our service providers operate.
If you are accessing the Service from outside the United States, please be aware that your personal information will be transferred to, stored, and processed in the United States, which may have data protection laws that differ from those in your jurisdiction.
For users in the EEA and UK, we rely on adequacy decisions, standard contractual clauses (SCCs), and other appropriate safeguards approved under GDPR and UK GDPR to lawfully transfer personal data internationally.
13. Changes to This Policy
We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by posting the updated policy on this page with a revised "Effective date" and, where required by law or where changes materially affect your rights, by sending you an email notification or displaying a prominent in-app notice.
For non-material changes, we will update the policy without separate notification. We encourage you to review this policy periodically.
Your continued use of the Service after the effective date of an updated Privacy Policy constitutes your acceptance of the revised policy.
14. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact our Privacy Team:
Spike Science, LLC State: Ohio, United States Privacy Team: privacy@spikescience.app Support: support@spikescience.app Legal: legal@spikescience.app
For EEA/UK users, if you have concerns that are not resolved by contacting us directly, you have the right to lodge a complaint with your local data protection authority.
This Privacy Policy was last updated on May 24, 2026. Version 3.0.