Volari Privacy Policy

Effective date: July 7, 2026 · Last updated: July 7, 2026

Volari ("we", "us", "our") provides a skill-progression and parent-communication app for gymnastics gyms. This policy explains what information the app handles, why, and the choices you have.

We built Volari to be data-minimal by design: we do not sell personal information, we do not use it for advertising, and we do not build marketing profiles. The sections below describe everything the app does with data.

1. Who controls the data (the gym relationship)

Volari is provided to gymnastics gyms for use by their staff and the parents of their athletes. When a gym uses Volari:

The gym decides which athletes, coaches, and parents are added, and what information about athletes is recorded. For the athlete information described below, the gym is the party responsible for that data (the "controller"), and Volari processes it on the gym's behalf (the "processor").
Volari is responsible for the account information of the adults who sign in (coaches, parents, gym owners) and for operating the service securely.

If you are a parent and have a question about your child's information, you can contact us (Section 11) or your gym directly.

2. Information the app handles

Account information (coaches, parents, gym owners).

Name and email address.
A password, which is set and stored by our authentication provider in hashed form. We never see or store your raw password.
Your role (coach, parent, or owner) and the gym you belong to.

Athlete information (entered by gym staff, not by athletes).
Athletes do not have accounts and do not sign in to Volari. Gym staff enter and maintain:

First and last name, and optionally date of birth.
Program and level (e.g. USAG, Xcel, recreational).
Skill-progress status, dates, and coach notes.

A parent can see this information only for the child or children the gym has linked to that parent's account. A coach can see it only for athletes in classes they are assigned to.

Communications.

Templated questions and answers exchanged between parents and coaches through the app's Q&A feature. (Volari does not offer free-form chat or messaging.)

Device and notification data.

A push-notification token for your device, so we can deliver milestone alerts and weekly summaries. This token is removed/deactivated when you sign out.

Usage and diagnostic data.

Basic product-analytics events (for example, that a coach opened an athlete screen) tied to your account identifier, used to understand whether the tool is working for gyms. See Section 6.
Crash and error reports, which may include your account identifier and technical details about the failure, used to fix bugs. See Section 6.

We do not collect precise location, contacts, photos, or advertising identifiers.

3. How we use information

We use the information above only to:

Provide the core service — let coaches record skill progress and let parents see their child's progress and milestones.
Send the notifications you'd expect (a milestone alert when a coach marks a skill mastered; a weekly summary; a coach's answer to a question).
Keep the service secure and isolate each gym's data from every other gym's.
Diagnose crashes and errors, and understand whether coaches are actively using the tool.

We do not use any of this information for advertising, and we do not sell or rent it.

4. Children's privacy

Volari records information about children (athletes), but is designed so that children do not use the app and do not provide information themselves:

Athletes have no login and cannot create accounts.
All athlete information is entered by the gym's staff.
Athlete information is visible only to that gym's assigned coaches and to the parent(s) the gym has linked to the athlete.
We do not knowingly collect information directly from children, and we do not use children's information for advertising or to build marketing profiles.

The gym is responsible for obtaining any parental consent required to record and share a child's information through the service. A parent may request access to, correction of, or deletion of their child's information at any time (Section 7), either through the gym or by contacting us.

5. How information is shared

We share information only with the service providers ("subprocessors") that make the app work. Each receives only what it needs for its function, and is bound to protect it. We do not share personal information with anyone else, except where required by law.

Provider	Purpose	What it handles
Supabase	Database, authentication, file storage (our hosting backend)	Account and athlete information, hashed passwords
Expo (Expo Application Services)	Delivery of push notifications; app builds	Device push tokens, notification contents
Apple Push Notification service / Google Firebase Cloud Messaging	Operating-system delivery of notifications	Device push tokens, notification contents
PostHog	Product analytics	Usage events tied to an account identifier
Sentry	Crash and error reporting	Error/diagnostic data, account identifier

6. Analytics and crash reporting

Product analytics (PostHog): We record basic in-app events (such as opening a screen or recording a skill update) associated with your account identifier, to understand whether coaches are actively using the tool. We do not use this for advertising.
Crash/error reporting (Sentry): When the app encounters an error, we receive a diagnostic report so we can fix it. It may include your account identifier and technical details, but not your password.

7. Your rights and choices

Depending on where you live, you may have the right to access, correct, export, or delete personal information, and to object to or restrict certain processing.

Access / correction / deletion: Contact us (Section 11) or your gym. We will respond within the time required by applicable law. For athlete information, requests can be made by a linked parent or by the gym.
Push notifications: You can turn these off in your device settings at any time, and they are deactivated when you sign out.
Delete your account (in-app): Open the Account screen and choose Delete account. This permanently removes your login and personal details. Your gym retains its own operational records (such as class and skill history), with your personal information removed from them, as described in Section 8.
Account closure: You can also ask us or your gym to close your account; we will delete or de-identify the associated personal information except where we must retain it to meet a legal obligation.

8. Data retention

We keep personal information for as long as the account or the gym's use of Volari is active, and then delete or de-identify it within a reasonable period, unless a longer period is required by law. Diagnostic and analytics data are retained for a limited period for debugging and product-improvement purposes.

9. Security

We protect information with measures including:

Encryption of data in transit (HTTPS/TLS).
Per-gym data isolation enforced at the database level (row-level security), so one gym cannot access another gym's data.
Storage of passwords only in hashed form, handled by our authentication provider.

No method of transmission or storage is completely secure, but we work to protect your information and to limit access to it.

10. International data transfers

Our service is hosted in the United States (our database provider's us-west-2 region). Our service providers may process and store information in countries other than the one you live in, including the United States. Where required, we rely on appropriate safeguards for such transfers.

11. Contact us

Questions, requests, or complaints about this policy or your information:

Email: privacy@volariapp.com

12. Changes to this policy

We may update this policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you in the app or by email. Continued use of Volari after a change means you accept the updated policy.