Privacy Policy

Your privacy matters. VAMOS is built for professional coaches and the players who book with them. We collect only what we need to run the platform, we never sell your data, and we give you full control over your information.

1. Who We Are

VAMOS ("we," "us," or "our") is a sports coaching platform that connects coaches with players for session booking, payment, and scheduling. We operate as the data controller for information collected through our website, web application, and related services.

For questions about this policy, contact us at hello@vamos.app.

2. Information We Collect

From Coaches

Full name, contact number, and email address
Sport specialization, coaching credentials, and bio
Profile photo (stored via Cloudinary)
Payment receiving details (processed and held by Xendit — we do not store your full banking credentials)
Session availability, pricing, and booking preferences
Cancellation policy settings

From Players

Full name and contact number (for booking confirmation via SMS)
Email address (optional, for receipts)
Session booking history with coaches you have booked
Payment transaction references (processed by Xendit)

Automatically Collected

Device type, browser, and operating system
Pages visited and features used (via PostHog analytics)
IP address and approximate location (country/region level)
Session timestamps and error logs

3. How We Use Your Information

To operate the platform — process bookings, send confirmations, manage scheduling, and facilitate payments between coaches and players
To communicate with you — send booking confirmations, reminders, and important account updates via SMS (Semaphore) or email (Resend)
To process payments — pass transaction data to Xendit to facilitate coach payouts and player payments. Xendit is our licensed payment processor and handles card data, e-wallet data, and bank transfers directly
To improve the platform — analyze aggregated usage data to understand how coaches and players use VAMOS and identify areas for improvement
To prevent fraud — detect suspicious activity, verify accounts, and protect all users on the platform

4. Third-Party Services We Use

We share data with trusted third-party providers only to the extent necessary to deliver our services:

Xendit

Payment processing. Xendit handles all payment transactions, including credit/debit cards, e-wallets (GCash, Maya), and bank transfers. Xendit is a licensed payment service provider. When you make or receive a payment, your financial data goes directly to Xendit under their privacy policy. We receive only transaction status references — never your full card or bank details.

Supabase

Authentication and database. Your account credentials and platform data are stored securely on Supabase-managed infrastructure.

Cloudinary

Media storage. Profile photos and session media are stored and served via Cloudinary. Images are accessible via URL once uploaded.

Semaphore

SMS notifications. Booking confirmations, reminders, and alerts are sent to your registered mobile number via Semaphore.

Resend

Email delivery. Transactional emails (receipts, confirmations) are sent via Resend.

PostHog

Product analytics. We use PostHog to understand how users navigate the platform. Data is anonymized and aggregated. No personal identifying information is shared with PostHog dashboards.

Vercel

Hosting. Our web application is hosted on Vercel. Standard server logs (IP, request timestamps) are processed by Vercel's infrastructure.

5. Data Retention

We retain your data for as long as your account is active or as needed to provide services. Specifically:

Coach and player account data: retained while account is active, plus 2 years after deletion for legal and billing records
Booking records: 3 years from the booking date (for dispute resolution)
Payment transaction references: 7 years (legal/financial compliance)
Analytics data: 12 months, then aggregated and anonymized

You may request deletion of your account at any time. See Section 7 for your data rights.

6. Cookies and Tracking

We use minimal cookies necessary to operate the platform:

Session cookies — keep you logged in during your session
Analytics cookies — PostHog analytics to understand platform usage (you can opt out)

We do not use advertising cookies or sell data to advertisers.

7. Your Rights

You have the right to:

Access — request a copy of all personal data we hold about you
Correction — update inaccurate or incomplete information via your account settings
Deletion — request account deletion and erasure of personal data (subject to retention obligations)
Portability — receive your booking and account data in a machine-readable format
Opt-out of analytics — disable PostHog tracking by contacting us

To exercise any of these rights, email us at hello@vamos.app. We will respond within 14 business days.

8. Children's Privacy

VAMOS is not directed at children under 13. We do not knowingly collect personal information from anyone under 13. If you believe a minor has provided us with personal data, contact us immediately and we will delete it.

9. Security

We take reasonable technical and organizational measures to protect your data, including encrypted data transmission (HTTPS), access controls, and regular security reviews. No method of transmission over the internet is 100% secure, but we are committed to using industry-standard practices.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make significant changes, we will notify you via email or an in-app notice at least 14 days before the change takes effect. Continued use of VAMOS after that date constitutes acceptance of the updated policy.

11. Contact

Questions, requests, or concerns? Reach us at:

hello@vamos.app