Privacy Policy

Last updated: September 2026

This Privacy Policy describes how Bravo Sports Technologies Inc. (“Bravo”) collects, uses, and discloses personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation.

1. Information We Collect

We collect information you provide when creating an account (name, email), managing athlete profiles, and using program features. We also collect usage data and device information to operate and improve the platform.

2. How We Use Your Information

We use your information to provide the Bravo platform, communicate with you about your account, send push notifications (with your consent), and comply with legal obligations.

3. Data Retention & Deletion

You may request export or deletion of your personal data at any time from your account settings. We retain data for as long as required by law or as needed to provide the service.

4. Children's Privacy

Athlete profiles for users under 18 require parental consent. We do not knowingly collect personal information from children under 13 without verified parental consent.

5. Where Your Data Lives — Cross-Border Transfers

Bravo's primary infrastructure runs in Canada (Toronto for compute + database + cache, Beauharnois Quebec for object storage, Canada for transactional email). However, certain features depend on third-party service providers operating in other jurisdictions. We disclose each cross-border transfer below as required by Quebec Law 25 and PIPEDA.

• Sentry(error monitoring, European Union) — when Bravo encounters an error, technical details about the error are sent to Sentry's EU data centre (Frankfurt). We aggressively strip personal information from these reports before they leave our servers (email addresses, session tokens, request bodies, and cookies are removed). Stack traces and exception types do reach Sentry.
• Anthropic(AI translation, United States) — Bravo is used by French- and English-speaking families in the same club, so a member reading the feed in one language can translate a post written in the other. When they do, the post text is sent to Anthropic's Claude AI service. Anthropic processes it under a data-processing agreement, does not retain it, and does not use it to train AI models. Only the post text is sent — never your name, your email, or any other account information.
  
  Translation is available on posts by default, so the feed is readable by every family in the club. If you would rather your own posts were never sent for translation, you can turn this off at any time in Settings → AI Translation; your posts will then only ever appear in the language you wrote them. Turning it off does not affect posts already translated before you changed the setting.
• Stripe (payment processing, United States) — operators who subscribe to a paid plan have their billing details processed by Stripe. Bravo never stores card numbers; Stripe holds the cardholder data under PCI DSS Level 1 compliance.
• Mapbox(geocoding and map imagery, United States) — when you search for programs by address or city, and when a club or event address is saved, that text is sent to Mapbox's servers in the United States to convert it into coordinates. Those requests are made by Bravo's own servers, so they carry no IP address of yours and are not associated with your account. The map in the Bravo mobile app works differently: your device loads the map imagery from Mapbox directly, so Mapbox receives your device's IP address and the area of the map you are viewing. Mapbox builds on OpenStreetMap data, credited on the map itself.
• Firebase Authentication(Google, global) — your user identity record (uid, email, display name) is managed by Google's global identity infrastructure. Firebase Auth does not offer a Canadian-only region.
• Firebase Realtime Database(Google, Belgium / europe-west1) — chat messages and celebration-wall events are temporarily stored in Firebase Realtime Database. We picked the EU region (the closest GDPR-protected option) because Realtime Database does not offer a Canadian region. We're migrating this data to Firestore (which IS available in Montreal) in a planned future update.

We do not transfer your personal data to any third party for any purpose other than what is listed above. If we add a new service provider, this section is updated before the new transfer begins.

6. Contact

For privacy inquiries, contact our Privacy Officer at privacy@bravoplus.ca.

Full legal text pending review by counsel and privacy officer. This placeholder establishes page structure for Story 1.5.