Privacy Policy

2. Data we process

• Account data: name, email, coaching license and role.
• Team data you enter: players (name, number, position, contact details and photo), sessions, matches, attendance, statistics and evaluations.
• Wellness data players record in their portal: sleep, soreness, mood, weight and notes. This may be considered health data.
• Payment data: handled by Stripe. MísterLab does not store your card details.
• Technical and usage data: server logs, device and, only if you agree, analytics and advertising cookies.

3. Purposes and legal basis

• Providing the service (account, teams, sessions, AI features): performance of the contract (Art. 6(1)(b) GDPR).
• Payments and invoicing: performance of the contract and legal obligations (Art. 6(1)(b) and 6(1)(c) GDPR).
• Emails about your account and trial: performance of the contract. You can unsubscribe from marketing emails in every message.
• Analytics and campaign measurement: only with your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.
• Security and abuse prevention: legitimate interest (Art. 6(1)(f) GDPR).

4. Player data and minors

When you record your players' data, you (or your club) are the controller of that data and MísterLab acts as processor (Art. 28 GDPR): it processes the data only to provide the service and on your instructions, under the conditions set out in the Terms of Service. If your players are under 14, you need their parents' or guardians' consent, and for wellness data, the explicit consent of the player or their guardians. MísterLab does not use this data for any other purpose.

5. Service providers (processors)

• Supabase: database, authentication and files. Servers in the EU (Ireland).
• Vercel: application hosting.
• Stripe: payments.
• Anthropic: AI models that process the content you send to AI features. It does not use it to train its models.
• Resend and Zoho: email delivery.
• Google Analytics and Meta: analytics and ad measurement, only if you accept cookies.

6. International transfers

Some providers (Vercel, Stripe, Anthropic, Google and Meta) may process data in the United States. These transfers rely on the EU-U.S. Data Privacy Framework or on the standard contractual clauses approved by the European Commission.

7. Retention

We keep your data while your account is active. If you delete it, we erase your data within 30 days at most, except data we must keep by law (for example, invoices, for the tax retention periods).

8. Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw your consent at any time, by writing to hola@misterlab.app. If you believe we have not handled your request properly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) or your local supervisory authority.

9. Cookies

We use technical cookies needed for the service to work and, only with your consent, analytics (Google Analytics) and advertising (Meta) cookies.