Privacy Policy

Who we are

Monaco Labs GmbH (“Supapod”, “we”, “us”) makes the SupaPod wearable GPS tracker, vest, and companion app for rugby athletes. This policy explains what data we collect through the app, the pod, and this website, how we use it, and who we share it with.

Data we collect

Account & profile: name, email address, and optional profile details (height, weight, playing position) you add to personalise your experience.

Session & performance data: GPS position, accelerometer readings, and metrics derived from them (speed, distance, impact forces) recorded by your pod during a session.

Device data: basic pod identifiers and connection status needed to pair and sync over Bluetooth and Wi‑Fi.

Order & shipping data: the shipping address and order details you provide at checkout for the pod rental or vest. Payment card details are entered directly into Stripe’s checkout and never reach our servers.

How we use your data

We use your data to provide personalised performance analytics, track your progress over time, fulfil and manage your pod rental or vest order, and provide account and customer support. We do not sell your data, and we do not use it for advertising.

Who we share data with

We only share data with the following, and only as needed to run the service:

• AWS (Amazon Web Services): our hosting and infrastructure provider. All account, session, and order data is stored on AWS with encryption at rest and in transit.
• Stripe: processes payments for pod rentals and vest purchases. We never see or store your card details.
• Apple and Google, via Amazon Cognito: if you sign in with Apple or Google, authentication is handled by Cognito and we receive only the name and email these providers share with us.
• Strava: session data is uploaded to Strava only if you explicitly connect your Strava account and choose to upload that session. Nothing is sent to Strava until you authorise it, and you can disconnect at any time.

Other than these, we do not share your personal data with any third party.

Data storage & security

All data is stored on AWS infrastructure with encryption at rest and in transit. Access is restricted to your account and to the Supapod team members who need it to operate the service.

Your rights

You can review and update your profile at any time from the app. You may request deletion of your account and all associated data from the Personal Info section of your profile, or by emailing us — sessions, metrics, and account data are permanently removed. Disconnecting Strava in the app stops any further uploads immediately.

Changes to this policy

If we make material changes to this policy, we’ll update the date above and, where appropriate, notify you in the app.

Contact

For any privacy questions or requests, email us at privacy@supapod.app.