Privacy Policy

Last updated 13 September 2026

PlayerPlan is a training-management product operated by MJ Perform (Mario Jovanovic) in Croatia. This policy explains what we collect, why we collect it, and the choices you have. Questions: mario@player-plan.com.

Who this covers

Coaches create accounts and manage athletes. Players typically do not create accounts — they open a share link the coach sends. Player information is entered by the coach, or submitted by the player through that link (session logs, wellness check-ins, feedback, optional wearable connections the coach sets up).

What we collect

Account data: name, email, password (hashed), avatar, subscription and billing status.
Player profiles: name, date of birth, position, team, goals, notes, injury history, and training availability.
Training data: programs, sessions, prescriptions, completion, RPE, loads, tests, and maxes.
Wellness and device data: check-ins, and — if you connect them — Oura, Polar, and Firstbeat imports.
Payments: handled by Stripe. We store customer and subscription IDs, not full card numbers.
Product analytics: PostHog (EU) records page views and in-app events so we can see what breaks and what coaches actually use. Session recording is off.

Why we use it

To provide the product (sessions, sharing, monitoring, billing), keep the service secure, send transactional email (signup confirmation, password reset, trial/welcome messages), and improve PlayerPlan. We do not sell personal data. We do not use player training or wellness data to train public AI models.

If you use the AI assistant or insight reports, relevant player and session context is sent to our model providers (currently Google and Anthropic) solely to generate that response. Inputs are sanitized and scoped to your workspace.

Who processes data for us

We use subprocessors to run the product: Supabase (database and auth), Vercel (hosting), Stripe (payments), Resend (email), PostHog (product analytics), and AI providers named above. Wearable providers receive data only if you connect that integration.

Legal basis (GDPR)

We process coach account and billing data to perform our contract with you. We process player data on the coach's instructions as a processor — the coach is the controller of their roster. We rely on legitimate interests for security, fraud prevention, and product analytics that cannot identify a player to the public.

Retention and deletion

We keep your workspace while the account is active. You can delete your coach account in Settings; that archives players and stops access. Transactional email and billing records may be kept as required by law. Share links can be regenerated, which invalidates the old URL.

Your rights

You can access, correct, or delete personal data we hold, and object to or restrict certain processing. Email mario@player-plan.com. You may also lodge a complaint with the Croatian Personal Data Protection Agency (AZOP) or your local EU authority.

Cookies

We use essential cookies to keep you signed in. PostHog may set an analytics cookie so we can tell returning visits apart. The product is unusable without the auth cookie; analytics can be blocked with a standard browser tracker blocker.