MatReturnRx, LLC ("MatReturnRx," "we," "us," or "our") operates the MatReturnRx mobile application (the "App"). This Privacy Policy explains what information we collect, how we use it, how we protect it, and the choices you have — including special protections for users under 18 and, specifically, children under 13.

1. Scope of This Policy

This Policy applies to the MatReturnRx iOS App and any related services. It does not apply to third-party services we link to or that you access separately (for example, Apple's App Store or payment systems), which have their own privacy policies.

2. Information We Collect

2.1 Account Information

• Email address
• Name
• Date of birth (used to determine age-appropriate handling, including COPPA and parental consent requirements — see Section 6)
• Password (stored in encrypted/hashed form via AWS Cognito; we never store your password in plain text)

2.2 Profile Information

• Sport, experience level (high school, college, professional)
• Training phase (off-season, pre-season, in-season)
• Training goals and available equipment

2.3 Fitness & Wellness Information

• Daily check-in responses: discomfort/soreness level, sleep, stress, energy, mood, and motivation
• Where you enable it, health and activity data synced from Apple HealthKit (for example, sleep or activity data)
• Exercise performance data: completed sets/reps, RPE (rate of perceived exertion), and discomfort reported during exercise

Apple HealthKit data: If you connect Apple Health, we access only the categories of data necessary for the App's features, and — consistent with Apple's requirements — we do not use HealthKit data for advertising, marketing, or data-mining purposes unrelated to providing the App's fitness functionality, and we do not sell HealthKit data to third parties, including advertising platforms and data brokers.

2.4 Device & Technical Information

• Device push-notification token (used solely to deliver notifications you've opted into)
• Basic device/app diagnostic information (e.g., app version, crash data) if you enable crash reporting

2.5 Usage & Analytics Information

Anonymous or pseudonymous usage events (e.g., feature usage, session length, subscription conversion), collected via AWS Pinpoint, to help us understand how the App is used and improve it.

2.6 Payment Information

We do not collect or store your payment card information. All purchases are processed by Apple through StoreKit / the App Store, under Apple's own privacy and payment terms. We receive a purchase receipt and subscription status (e.g., "active," "expired") from Apple, not your card details.

2.7 Team / Coach Information

If you join a team, your check-in and readiness data (as described above) becomes visible to your team's coach through the coach dashboard, as described in Section 5.

3. How We Use Information

We use the information described above to:

• Provide, operate, and maintain the App's features (readiness scoring, adaptive training recommendations, exercise modules, progress tracking, team dashboards)
• Personalize your experience, including AI-generated training plans
• Send you notifications you've opted into
• Analyze and improve the App
• Process subscriptions and manage entitlements
• Comply with legal obligations and enforce our Terms of Service
• Communicate with you about your account or support requests

On-device AI processing: AI-generated training plans use Apple's on-device Foundation Models framework. This processing occurs locally on your device — the specific data you provide to generate a plan is not transmitted to MatReturnRx's servers or any third party for this feature.

4. How We Share Information

We do not sell your personal information or fitness data to advertisers or data brokers.

We share information only in the following circumstances:

• Service providers: With vendors who process data on our behalf under contractual confidentiality and security obligations, including Amazon Web Services (authentication, database, backend infrastructure, notifications, analytics) and Apple (payments, push notifications, on-device AI, HealthKit integration).
• Coaches (team accounts): If you join a team, your readiness and check-in data is visible to your coach through the team dashboard, for the purpose of monitoring team readiness.
• Legal requirements: If required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of MatReturnRx, our users, or others.
• Business transfers: In connection with a merger, acquisition, or sale of assets, subject to standard confidentiality protections and this Policy (or a materially similar one) continuing to apply.
• With your consent: For any other purpose disclosed to you at the time of collection, with your consent.

5. Team & Coach Accounts

When an athlete joins a team using an invite code, their check-in and readiness data becomes visible to that team's coach through the dashboard. This is a core function of the Team plan. Athletes (or, for minors, their parent/guardian — see Section 6) should understand that joining a team shares this data with the coach before doing so. Coaches are responsible for handling athlete data appropriately and are prohibited under our Terms of Service from using it for any purpose other than team readiness monitoring.

6. Children's Privacy and Parental Consent (COPPA)

We take children's privacy seriously. This section applies specifically to users under the age of 18, with additional, stricter requirements for children under 13 as required by the U.S. Children's Online Privacy Protection Act ("COPPA").

6.1 Users Under 13

MatReturnRx does not knowingly collect personal information from children under 13 without verifiable parental consent, as required by COPPA. If our onboarding process identifies that a user is under 13:

• The account cannot be activated, and no personal information beyond what is minimally necessary to initiate the consent process will be collected or retained, until we obtain verifiable consent from a parent or legal guardian.
• We will provide the parent/guardian with direct notice describing what information we collect from the child, how we use it, and how they can review, consent, or refuse.
• Verifiable parental consent will be obtained through [method to be finalized with counsel — e.g., a signed consent form returned via email, a verified payment method, or a video-call verification].
• A parent or guardian may, at any time: review the personal information we have collected from their child; request that we delete it; and refuse to permit further collection or use, which will result in the child's account being deactivated.
• We do not condition a child's participation in the App on the child disclosing more information than is reasonably necessary for the activity.
• We do not knowingly use children's information for behavioral advertising or share it for advertising purposes.
• If we learn we have collected personal information from a child under 13 without verifiable parental consent, we will delete that information promptly.

Parents/guardians can exercise these rights or ask questions by contacting main@matreturnrx.com.

6.2 Users Age 13–17

Users between 13 and 17 may use the App only with the involvement and consent of a parent or legal guardian, consistent with our Terms of Service. Parents/guardians of users in this age range are encouraged to review this Policy and monitor their teen's use of the App, including their participation on any team and the data visible to a coach as described in Section 5.

6.3 Fitness Data and Minors

Because the App collects fitness-related information (such as discomfort/soreness levels) from minor users, parents/guardians should be aware that this data may be visible to a team coach if the minor joins a team, and that the App is not a substitute for professional medical evaluation or care (see Section 9).

7. Data Security

• All data in transit is encrypted via HTTPS.
• Data at rest in our database (AWS DynamoDB) is encrypted.
• All API requests require a valid authentication token (issued via AWS Cognito).
• We limit data collection to what is reasonably necessary for the App's functionality.
• No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

8. Data Retention

We retain personal information for as long as your account is active or as needed to provide the App's services. If you delete your account, we will delete or anonymize your personal information within a reasonable period, except where we are required to retain it to comply with legal obligations, resolve disputes, or enforce our agreements.

9. Not a Medical Device; No Medical Advice

MatReturnRx is intended for general fitness and wellness purposes. It is not a medical device, is not intended to diagnose, treat, cure, mitigate, or prevent any disease or medical condition, and is not a substitute for professional medical advice, diagnosis, or treatment. Always consult a qualified healthcare provider regarding any persistent discomfort, injury, or medical condition. The App's collection of fitness-related information (such as HealthKit data) does not make MatReturnRx a "covered entity" under HIPAA, and MatReturnRx is not currently HIPAA-compliant.

10. Your Rights and Choices

Depending on your location, you may have rights to:

• Access the personal information we hold about you
• Export your data in a portable format
• Correct inaccurate information
• Delete your account and associated data
• Opt out of push notifications (via your device settings or in-app settings)
• Withdraw consent for HealthKit data sharing (via iOS Settings > Health > Data Access & Devices)

To exercise these rights, contact us at main@matreturnrx.com. We will respond within a reasonable time and consistent with applicable law.

11. International Users

The App is currently intended for users in the United States. If you access the App from outside the United States, your information will be transferred to and processed in the United States, where data protection laws may differ from those in your country.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via the App or by email, and will update the "Last Updated" date above. Continued use of the App after changes take effect constitutes acceptance of the revised Policy.

13. Contact Us