Information Collection Notice

Y Performance · Effective Date: January 1, 2025

This Information Collection Notice supplements our Privacy Policy and provides a structured summary of the categories of personal information Y Performance collects, the purposes for which it is collected, the sources from which it is obtained, and how it may be disclosed. This notice is provided in accordance with applicable consumer privacy laws, including the California Consumer Privacy Act (CCPA) and similar regulations.

1. Categories of Personal Information Collected

In the preceding 12 months, Y Performance has collected the following categories of personal information:

IdentifiersYes

Name, email address, IP address, account ID

Account CredentialsYes

Password (stored in hashed form only)

Profile & Role DataYes

User role (coach or athlete), profile name

Fitness & Health DataYes

Workout logs including sets, reps, weight, RPE, and timestamps voluntarily entered by users

Training ContentYes

Programs, phases, weeks, training days, exercises, and notes created by coaches

Internet / Network ActivityYes

Browser type, OS, referring URLs, pages viewed, session duration, error logs

Geolocation DataNo

Precise geolocation

Biometric DataNo

Fingerprints, facial recognition data

Medical / Health RecordsNo

Clinical health records, diagnoses, prescriptions

Financial InformationNo — handled by third-party payment processors if applicable

Payment card numbers, bank account details

Sensitive Personal InformationNo

Race, ethnicity, religion, sexual orientation, union membership

2. Sources of Personal Information

We collect personal information from the following sources:

  • Directly from you: information you provide when you register, set up your profile, create training content, or log workouts.
  • Automatically from your device: usage data, log files, and session identifiers collected as you interact with the Service.
  • From other users: coaches may add athletes to their programs; this generates a coach-athlete relationship linked to your account.

3. Business Purposes for Collection

We collect personal information for the following business or commercial purposes:

  • Providing, operating, and maintaining the Y Performance platform
  • Authenticating users and maintaining account security
  • Enabling coaches to build and assign training programs to athletes
  • Enabling athletes to view, execute, and log their assigned workouts
  • Generating workout history and performance analytics for coaches and athletes
  • Delivering transactional communications (account confirmation, password reset)
  • Detecting, preventing, and addressing fraud, abuse, or security incidents
  • Complying with applicable legal obligations
  • Improving the Service through aggregated, de-identified analytics

We do not use personal information for cross-context behavioral advertising or to build advertising profiles.

4. Disclosure of Personal Information

In the preceding 12 months, Y Performance has disclosed the following categories of personal information for business purposes:

  • Identifiers — disclosed to cloud infrastructure providers (hosting) and email service providers (transactional email) under data processing agreements.
  • Internet / Network Activity — disclosed to error-tracking and log-management service providers for debugging and security.
  • Fitness & Training Data — shared between coaches and their enrolled athletes within the platform as part of the core Service functionality.

We do not sell personal information. We do not share personal information for cross-context behavioral advertising.

4.5 Named Third-Party Processors

We disclose the limited categories of personal information described in Section 4 to the named processors below. Each acts on our instructions under a data processing agreement and is not permitted to use your data for its own purposes.

Microsoft Clarity

Processor: Microsoft Corporation

Location: United States

Purpose: User-experience analytics: session replays and click / scroll heatmaps for UX improvement and bug reproduction.

Categories shared: Identifiers (anonymous Clarity session ID; no email or name) and Internet / Network Activity (pages viewed, click positions, viewport, device, OS).

Categories not shared: Form input text (passwords, athlete names, workout notes are masked at capture in Strict mode), images, account email, account password.

Retention by processor: Up to 13 months.

Cross-border transfer: Data is transferred from your country of residence to Microsoft data centres in the United States. For mainland China users, your continued use of the Service constitutes the separate consent to cross-border transfer required by PIPL Article 38. For Australian users, Microsoft is treated as an overseas recipient under APP 8 and remains under Y Performance's accountability per APP 8.1.

Opt-out: email y-performance-support@corevinus.com to be excluded from Clarity collection going forward.

中文摘要:本节披露 Y Performance 使用的具名第三方数据处理方。当前唯一具名处理方为 Microsoft Clarity(微软公司,美国),用于会话回放和点击热图的产品体验分析。共享数据:匿名会话标识符、访问页面、点击位置、设备与浏览器信息;不共享:表单输入文字(密码、姓名、训练记录已遮蔽)、图片、账号邮箱与密码。保存期最长 13 个月。中国大陆用户请注意:相关数据出境至美国,继续使用本服务即视为按《个人信息保护法》第 38 条提供单独同意;如需撤回,请邮件 y-performance-support@corevinus.com

5. Retention Periods

We retain personal information only as long as necessary for the purposes described above or as required by law:

  • Account and profile data: retained for the life of your account and up to 12 months after closure.
  • Workout logs and training content: retained for the life of the coach-athlete relationship and up to 12 months after account closure.
  • Server and access logs: retained for up to 90 days.
  • Aggregated, de-identified analytics data: may be retained indefinitely.

6. Your Privacy Rights

Depending on your jurisdiction, you may have rights to:

  • Know / Access: request disclosure of the categories and specific pieces of personal information collected about you, the sources, the business purposes, and the categories of third parties with whom we share it.
  • Delete: request deletion of personal information we have collected about you, subject to exceptions (e.g., information needed to complete a transaction, comply with law, or detect fraud).
  • Correct: request correction of inaccurate personal information.
  • Opt-Out of Sale / Sharing: we do not sell or share personal information for cross-context behavioral advertising, so no opt-out is needed for this purpose.
  • Non-Discrimination: we will not discriminate against you for exercising any of these rights.
  • Portability: receive your data in a structured, commonly used format.

California residents may also designate an authorized agent to make requests on their behalf. We will verify the identity of the requestor before processing any request.

7. How to Submit a Request

To exercise any of the privacy rights described above, please contact us using one of the following methods:

Please include your name, email address associated with your account, and a description of your request. We will acknowledge receipt within 10 business days and provide a substantive response within 45 calendar days (extendable by an additional 45 days where reasonably necessary, with notice to you).

8. Changes to This Notice

We may update this Information Collection Notice periodically to reflect changes in our data practices or applicable law. The effective date at the top of this page indicates when the notice was last revised. Material changes will be communicated to registered users via email or prominent in-app notification.

9. Contact

For questions about this notice or our privacy practices:

y-performance-support@corevinus.com

Y Performance