SNAPMIND AI BACK

PRIVACY POLICY

Effective: May 8, 2026

This Privacy Policy describes how SnapMind™ AI ("we", "us", "our") collects, uses, and protects information when you use our website (usesnapmind.com) and mobile application (collectively, the "Service"). By using the Service, you agree to this policy. Special rules for users under 18 and for accounts associated with school or athletic-program team bundles are in Sections 7 and 8.

1. Who We Are

SnapMind AI LLC is a Florida limited liability company. We provide a digital fitness, recovery, nutrition, and mental-performance platform, including an AI Coach feature, through our website and mobile application. This Privacy Policy is part of our overall agreement with you, alongside our Terms of Service. Where this policy conflicts with the Terms of Service on a privacy matter, this policy controls.

2. Information We Collect

Account information. When you create an account, we collect your email address and a password. Passwords are stored in salted, hashed form. We never see them in plain text. We also collect your date of birth (used to confirm age and apply the appropriate signup flow under Section 7) and your first and last name where provided.

Athlete profile. We collect your sport, position, school or program, training history, and performance goals to the extent you choose to enter them, plus voluntary self-reported metrics such as height, weight, training availability, and recovery preferences. If you joined through a Team Bundle, we record the team enrollment code used at signup.

AI Coach interactions. Messages you send to the AI Coach and the AI Coach's responses, including conversation history, are used to maintain context within a conversation and to operate, monitor, and improve the Service. AI Coach messages are processed by Anthropic to generate responses; Anthropic's handling of those messages is governed by Anthropic's privacy and data-handling policies.

Program and recovery data. Workouts viewed and completed, mobility and recovery sessions logged, optional sleep and nutrition entries, and similar engagement data generated by your use of the Service.

Purchase and billing information. Purchase confirmations and the email address used at checkout. Payment-card details are processed by our third-party payment provider (currently Gumroad for individual program purchases). We do not store full payment-card numbers. As we add subscription billing for team bundles we may add additional providers (e.g., Stripe); this policy will be updated to reflect that change.

Communications. Messages you send to us through email, support forms, feedback, surveys, or social channels. Email subscription preferences are managed through our email provider, Kit.

Push notification tokens. If you enable push notifications in the SnapMind mobile app, we collect a device push token from Apple Push Notification Service (iOS) or Firebase Cloud Messaging (Android) used to deliver notifications to your device. We do not read or collect notifications generated by other apps on your device.

Information from team and school accounts. If your access to the Service is provided through a coach, athletic department, school, booster club, or other team-bundle customer, that customer may provide us with limited roster information (such as your name, the team you belong to, and your role on the team) to enable account creation. We do not pull data from school information systems, grade books, attendance systems, or other school-managed records.

Legal records. Signed Liability Waiver and, where applicable, signed Parent / Legal Guardian Consent, including the typed name, date, IP address, device user-agent, document version, and a snapshot of the document text as displayed at signing. These records are retained permanently as legal evidence per Section 9.

Usage and device information. Browser type, operating system, device type, app version, language, time zone, and general feature interactions. IP address and approximate (city / region) location derived from IP. Diagnostic and crash data.

3. How We Use Your Information

We use information to provide, maintain, secure, and improve the Service; to authenticate you and grant access to programs, content, and features you are entitled to; to respond to your AI Coach messages; to send you account, product, program-access, billing, and other transactional communications; to deliver push notifications about your account, AI Coach responses, program reminders, and product updates (where you have not disabled them); to send you marketing communications where you have not opted out (you can opt out at any time); to detect, investigate, and prevent fraud, abuse, security incidents, and violations of our Terms of Service; to comply with our legal obligations, respond to valid legal requests, and enforce our agreements; and to create aggregated and de-identified data for product analytics and product improvement. Aggregated and de-identified data is not personal information and is not subject to the deletion rights in Sections 11 and 12.

4. Third-Party Service Providers

We rely on the following service providers to operate the Service. Each provider receives only the information needed to perform its function and is bound by its own privacy and security commitments. We recommend reviewing their policies.

We may add or change service providers as the Service evolves. Material changes will be reflected in an updated version of this Privacy Policy.

5. We Do Not Sell Your Personal Information

We do not sell, rent, or trade your personal information to third parties for monetary or other valuable consideration. We do not share personal information for cross-context behavioral advertising. We share information only with the service providers listed in Section 4, only as needed to operate the Service, with your direction or consent, or where required by law (Section 6).

6. When We May Disclose Information

In addition to the service-provider relationships in Section 4, we may disclose information to comply with applicable law, regulation, subpoena, court order, or other valid legal process; to protect the rights, safety, or property of SnapMind, our users, or the public, for example, to investigate fraud, prevent harm, or enforce our Terms of Service; in connection with a merger, acquisition, financing, sale of assets, or similar transaction, in which case the recipient will be bound by privacy commitments at least as protective as this policy; or with your direction or consent.

7. Children, Minors, and Parental Consent

Under 13. The Service is not directed to and is not available to children under 13. We do not knowingly collect personal information from children under 13. If we learn we have collected information from a child under 13, we will delete it promptly. If you believe a child under 13 has provided us information, please contact us using the information in Section 19.

Ages 13 to 17. Users between the ages of 13 and 17 may use the Service only with verified parental or legal-guardian consent. Where required, consent is collected through our Parent / Legal Guardian Consent process at signup. The parent or legal guardian becomes the account holder of record for billing, account management, and the right to access, correct, or delete the minor's personal information. The parent or legal guardian may withdraw consent at any time by contacting us at the address in Section 19; on withdrawal, the minor's account will be deactivated and the minor's personal data handled in accordance with this policy and applicable law.

Turning 18. When a minor user reaches the age of 18, parental consent automatically converts. The user may continue using the Service under the consumer Terms of Service and this Privacy Policy in their own right and may then exercise the rights described in Sections 11 and 12 directly.

Parental rights. A parent or legal guardian who has consented on behalf of a minor may, with respect to that minor's information, review the personal information we have collected; request correction of inaccurate information; request deletion of the minor's account and information (subject to the legal-records exception in Section 9); and refuse further collection or use of the minor's information.

8. School and Team Bundle Purchases

Some users access the Service through a Team Bundle purchased by a coach, athletic department, school, booster club, or similar organization (a "Team Customer").

Individual consent still required. Each athlete (or, where applicable, the athlete's parent or legal guardian) creates an individual account and consents to this Privacy Policy and our Terms of Service directly. Team Customer purchase does not substitute for individual user consent.

No school-system data pulls. We do not pull data from a Team Customer's school information systems, grade books, attendance systems, or other school-managed records. Information collected through the Service comes from the athlete (or the athlete's parent or legal guardian) directly.

FERPA position. We are not an educational institution and do not act as a "school official" under the Family Educational Rights and Privacy Act (FERPA) or any state-equivalent rule. The Service is a private, opt-in athletic supplemental tool, not a system of education records.

What we share with the Team Customer. We may share with the Team Customer aggregated, roster-level, or individual engagement data (such as program completion, attendance, or feature use) consistent with the Master Service Agreement between SnapMind and the Team Customer and the consents obtained at athlete signup. We do not share AI Coach conversation content with the Team Customer.

Data Privacy Agreements. If a Team Customer requests, we will sign a reasonable Data Privacy Agreement (DPA) governing handling of athlete information under the Team Bundle.

9. Data Retention

General retention. We retain personal information for as long as your account is active and as needed to provide the Service. After account closure, we retain personal information only as long as needed for our legitimate business purposes (such as resolving disputes, enforcing agreements, complying with legal obligations, or detecting fraud), after which we delete or de-identify it.

Permanent retention of legal records. Records of signed Liability Waivers and Parent / Legal Guardian Consents, including the typed name, signature timestamp, IP address, device user-agent, document version, and waiver text snapshot, are retained permanently as legal evidence and are not deleted on account closure. This applies even if the underlying account is deleted at the user's request. Other personal information associated with the account is deleted or de-identified per the general retention rule above.

AI Coach conversations. AI Coach conversation history is retained for as long as your account is active to provide context for ongoing conversations. On account deletion we delete stored conversation content from our active systems, subject to backups that are overwritten on our normal backup rotation.

Backups. Personal information may persist in routine backup copies for a limited period after deletion from active systems. We do not actively use backed-up data after deletion is requested, and backups are overwritten in the normal course.

10. Security and Breach Notification

We use industry-standard administrative, technical, and physical measures to protect personal information, including encryption in transit, encryption at rest for sensitive fields, hashed passwords, access controls, and provider-level security commitments from our service providers (Section 4). No system is completely secure and we cannot guarantee absolute security.

If we determine that a security incident has resulted in unauthorized access to your personal information that triggers notification under applicable law, we will notify affected users and any required regulatory authorities in the manner and within the timeframes required by that law (including, where applicable, Florida's information-security breach-notification statute).

11. Your Rights

Subject to limitations under applicable law, you have the right to access the personal information we have collected about you; request correction of personal information that is inaccurate or out of date; request deletion of your personal information (subject to the permanent legal-records retention in Section 9 and other limited exceptions allowed by law); withdraw any consent you previously provided, and opt out of marketing communications; receive a portable copy of personal information you have provided to us, where required by law; and request that we not use your information for purposes inconsistent with this policy.

To exercise these rights, contact us using the information in Section 19. We will respond within the timeframe required by applicable law (typically 30 to 45 days). We may need to verify your identity before fulfilling certain requests.

12. State-Specific Rights

California (CCPA / CPRA). California residents have the right to know what categories of personal information we collect, why we collect it, and to whom we disclose it; the right to access, delete, and correct personal information; the right to opt out of any "sale" or "sharing" of personal information (we do not sell or share personal information for cross-context behavioral advertising as those terms are defined in California law); and the right to non-discrimination for exercising privacy rights. Authorized agents may submit requests on your behalf with appropriate verification.

Florida Digital Bill of Rights. Florida residents who meet the statute's threshold criteria have the right to access, correct, delete, and obtain a portable copy of personal information; the right to opt out of certain targeted advertising, sale of personal information, and profiling that produces legal effects; and the right to appeal a denial of a privacy request. We do not engage in the targeted advertising, sale, or profiling activities the statute regulates, but we will honor opt-out requests as required.

Other states. Residents of Virginia, Colorado, Connecticut, Utah, and other states with comprehensive consumer privacy laws have substantially similar rights to access, correct, delete, and obtain a portable copy of their personal information, and to opt out of certain processing. We will honor these rights as required by the applicable state law.

How to exercise. To exercise any state-specific right, contact us using the information in Section 19 and identify the state-law right you are exercising. We will respond within the timeframe required by the applicable law.

13. The AI Coach

The AI Coach is an automated software feature, not a licensed professional. It does not provide medical advice, individualized prescriptive nutrition advice from a Registered Dietitian, psychotherapy, or any service that requires a licensed professional. Output from the AI Coach should be treated as general educational information only.

The AI Coach is configured with safety guardrails that route certain categories of question, including potential medical emergencies, suicidal ideation, signs of disordered eating, and similar safety-critical topics, to professional resources rather than answering them.

Conversations with the AI Coach are processed by Anthropic to generate responses. Anthropic's handling of those messages is governed by Anthropic's published privacy and data-handling policies. AI Coach output may be incorrect, incomplete, or outdated. Do not rely on the AI Coach as a substitute for advice from your coaches, trainers, or licensed healthcare providers.

14. Cookies, Push Notifications, and Tracking Technologies

Cookies. We and our service providers use cookies and similar technologies (such as local storage and pixel tags) to operate the Service, remember your preferences, keep you signed in, measure feature use, and detect fraud or abuse. Most browsers allow you to refuse or delete cookies through your browser settings, though doing so may affect Service functionality. We do not use cookies for cross-site advertising or for sharing data with third-party advertisers.

Push notifications. The SnapMind mobile app may send push notifications about your account, AI Coach replies, program reminders, and product updates. You can disable push notifications at any time in your device's notification settings or in the app's notification preferences. Disabling push notifications does not stop transactional emails sent to your account email address; manage email preferences separately through the unsubscribe link in our emails or by contacting us.

15. International Users

The Service is operated from the United States. If you access the Service from outside the United States, your personal information will be transferred to, stored, and processed in the United States and any other country where our service providers operate. By using the Service you acknowledge this transfer. Where required by applicable law (including the EU/UK GDPR), we will rely on an appropriate transfer mechanism.

16. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by an updated effective date at the top of this policy. For material changes that affect how we handle your information, we will provide reasonable advance notice, for example, by email or through an in-Service notice, before the changes take effect, where required by law.

17. Governing Law

This Privacy Policy is governed by the laws of the State of Florida, without regard to conflict-of-laws principles. Any dispute arising from or relating to this Privacy Policy will be resolved exclusively in the state or federal courts located in Pinellas County, Florida, except as otherwise required by your state's privacy law.

18. Designated Privacy Contact

Privacy contact: Hunter Carver, Chief Business Officer, SnapMind AI LLC.

Email: hunter@usesnapmind.com

Mailing address: SnapMind AI LLC, 7901 4th St N, Suite 300, St. Petersburg, FL 33702.

19. Contact

Questions about this policy, requests to exercise rights, or concerns about how your information is handled, contact us at:

Email: hunter@usesnapmind.com

Mail: SnapMind AI LLC · 7901 4th St N, Suite 300 · St. Petersburg, FL 33702

We aim to acknowledge privacy requests within 5 business days and to respond substantively within the timeframe required by the applicable law.