Privacy Policy

Account Data: Name, email address, password (hashed), role, language preference, account status.

Coach Profile Data: Phone number, club/federation affiliation, subscription tier, profile photo, sharing settings.

Athlete Data: Name, date of birth, gender, level, bow type, training history, scores, injuries, medications, biometric logs, WADA substance records.

Payment Data: Subscription plan, payment method, transaction reference or receipt file, request status. We do not store full credit card numbers.

Usage Data: Pages visited, features used, device type, browser type, IP address, session timestamps — collected for security and product improvement.

• To provide, maintain, and improve the AMS platform
• To authenticate your identity and manage your account
• To process subscription payments and send billing communications
• To send transactional emails (password resets, subscription confirmations, notifications)
• To generate analytics and ML-based training insights for coaches
• To comply with applicable laws and regulations

We do not sell your personal data. We share data only with:

• Paddle.com — our future payment processor for card/PayPal/Apple Pay transactions. Paddle acts as a Merchant of Record and processes payment data under their own privacy policy (paddle.com/legal/privacy). We do not share health or athlete data with Paddle.
• Email Provider (Gmail SMTP) — used to deliver transactional emails. Only the recipient email address and message content are transmitted.
• Hosting Infrastructure — our cloud hosting provider stores encrypted database and file backups.
• Legal Authorities — when required by law, court order, or government regulation in Kuwait.

Coaches who enter athlete data into AMS are the data controllers for that information and are responsible for obtaining appropriate consent from athletes (or their guardians for minors). AMS acts as a data processor on behalf of coaches for athlete-related data.

We retain your account data for as long as your account is active. If you request account deletion, we will delete your personal data within 30 days, except where retention is required by law. Athlete data is retained for the duration of the coach account and deleted with it upon account removal.

We implement industry-standard security measures including: bcrypt password hashing, JWT authentication with short-lived access tokens, refresh token rotation, HTTPS encryption in transit, and role-based access control. No security system is perfect; we encourage you to use a strong unique password and enable two-factor authentication when available.

AMS uses cookies and browser local storage to: maintain authentication sessions (refresh token, user role cookies), remember language preferences, and store UI state. We do not use advertising cookies or third-party tracking pixels.

You have the right to:

• Access a copy of your personal data
• Correct inaccurate personal data
• Request deletion of your account and associated data
• Export your athlete data in a portable format
• Withdraw consent for data processing (where applicable)

To exercise any of these rights, contact us at arabarcherykwt@gmail.com. We will respond within 14 business days.

AMS accounts are for coaches and federation administrators aged 18 and above. Athlete profiles may include minors; coaches are responsible for obtaining parental or guardian consent for athletes under 18.

We may update this Privacy Policy periodically. We will notify users by email of material changes. The "Last updated" date at the top of this page reflects the most recent revision.

For any privacy-related questions or requests: