Privacy Policy

Cohivo is accountable for personal information under its control. We collect the minimum information reasonably needed to help club members participate, connect and follow through. Our privacy contact is privacy@cohivo.app.

• Account: name, email address, authentication records and policy acceptance.
• Mobile number: if you verify one, your phone number, verification status, the SMS consent you gave and the date. Kept private and never shown to other members.
• Profile: optional photo, city, interests, biography and directory visibility choices.
• Participation and private training: memberships, RSVPs, goals, weekly plans, check-ins, wins, challenge progress, tennis session focuses and reflections, and practice or match time.
• Community activity: questions, replies, resource use, event responses and organizer actions.
• Private coordination: participant-only plans, support arrangements and contact-sharing choices.
• Technical: security logs, device/browser information, approximate network information and bounded product events.
• Integrations: encrypted tokens and event identifiers needed when you connect an external calendar or WHOOP. If you connect WHOOP, we import the objective workout, heart-rate, recovery and sleep metrics shown in your private training dashboard. If you add a SwingVision share link or statistics, we store the information you choose to enter; Cohivo does not scrape your SwingVision account. We do not ask for payment-card details from members.

Other than the limited WHOOP metrics you expressly choose to connect, do not submit diagnoses, detailed health or injury history, home addresses, government identifiers or precise live location.

• create and secure accounts;
• deliver communities, events, challenges, plans and matching requested by users;
• show content according to member and organizer permissions;
• send service, safety and participation notifications;
• provide your private training history, objective progress summaries and connected-provider synchronization;
• support users, prevent abuse and investigate security incidents;
• provide clubs with aggregate participation and retention outcomes; and
• improve reliability and usability using privacy-bounded product events.

We will request fresh consent before using personal information for a materially new purpose where required.

Your visibility choices control what peers can see. Organizers can manage membership, safety and community operations and receive aggregate outcome reporting. They do not receive private participant-only plans, private training goals or reflections, WHOOP metrics, SwingVision records, private replies, calendar or provider tokens, account email addresses or exact member-level product analytics unless a feature clearly tells you otherwise before you use it.

We do not sell or rent personal information. We share information only with: people you intentionally share with; authorized club organizers within the limits above; vendors that provide hosting, authentication, storage, email, monitoring and support; calendar calendar and fitness providers you connect; professional advisers under confidentiality; and authorities when law requires it or safety makes it reasonably necessary.

Providers may process information outside Canada. It may then be subject to the laws and lawful-access rules of that jurisdiction. We use contractual and technical measures intended to require protection comparable to our commitments.

If you verify a mobile number, we send a one-time code to confirm it (a transactional message you requested). Verifying a number does not by itself sign you up for ongoing texts.

Ongoing texts — such as urgent club alerts (rainouts, heat, air quality), play-together posts, private plan messages and a court booking-opening reminder you schedule — are optional and only sent if you separately opt in. When you do, messages are recurring and message and data rates may apply. You can choose which categories text you, turn them all off in Settings, or reply STOP to any message to stop, or HELP for help. We keep a record of the consent you gave and when. We do not send marketing texts, and we do not share your number with other members or sell it. SMS delivery is handled by our messaging provider (Twilio) acting on our behalf.

Account creation requires acknowledgement of the current policy. Optional profile fields, directory listing, contact sharing, calendars, WHOOP and non-essential communications remain under your control. You may withdraw an optional choice in the applicable settings. Disconnecting WHOOP revokes Cohivo access and removes imported WHOOP data. If information is necessary to provide the Service, withdrawing consent may require account closure.

Active account and community records are kept while needed to provide the Service. Disconnecting WHOOP removes imported WHOOP data from active systems. Deleted accounts are removed from active systems after required calendar and provider cleanup; limited security, transaction, consent and backup records may remain for legal, fraud-prevention or recovery periods. Operational logs are kept for the shortest practical security window, normally no more than 90 days. Backups rotate out on their normal schedule. We periodically review records and delete or de-identify information that no longer has a defined purpose.

Cohivo uses access controls, row-level data permissions, encryption in transit, encryption of provider access tokens, protected service credentials, audit records and least-privilege administration. No system is perfectly secure. We investigate suspected incidents, keep required breach records and notify affected people and regulators when law requires it.

You can update profile and privacy choices, download a portable copy of core account, training and imported WHOOP data, and delete your account from Settings. You may also request access, correction, information about use or disclosure, or challenge our handling of your information by writing to privacy@cohivo.app. We will verify identity and respond within the period required by applicable law. If we cannot fulfil a request, we will explain why and identify available recourse.

Cohivo does not currently offer accounts to people under 18. If you believe a minor has provided personal information, contact us so we can investigate and remove it where appropriate.

Contact the Cohivo privacy lead first at privacy@cohivo.app. You may also contact the Office of the Privacy Commissioner of Canada or the privacy regulator that applies where you live. This policy is available in an accessible format on request. Material changes will be highlighted and renewed consent will be requested where required.