Arena Buddy is operated by Jamie Livingston Dierks ("we", "us", "Arena Buddy"). This Privacy Notice explains what personal data we collect when you use Arena Buddy, why we collect it, and your rights. We are the data controller for the information described below.
1. Information We Collect
- Account data: your name, email address, and login credentials.
- Profile & content: rider profile, horses, runs, events, expenses, and uploaded documents (e.g. Coggins certificates, health papers, photos).
- Support messages: messages you send us through the contact page or email.
- Usage & device data: IP address, device and browser type, pages viewed, and basic telemetry to keep the Service running and secure.
- Payment data: Paddle, our Merchant of Record, collects and processes payment information directly. We receive transaction metadata such as subscription status, plan, and renewal dates — not your full card details.
2. How We Use Your Data
- To create and operate your account and provide the Service (contract).
- To process subscriptions and entitlements through Paddle (contract).
- To send transactional emails such as deadline reminders and account notices (contract / legitimate interests).
- To prevent fraud, abuse, and security incidents (legitimate interests, legal obligation).
- To improve the Service and fix bugs (legitimate interests).
- To respond to your support requests (contract / legitimate interests).
3. Sharing Your Data
We share personal data only with the categories of recipients below:
- Hosting, database & storage infrastructure — Lovable Cloud (powered by Supabase) hosts the application, database, authentication, and uploaded files (e.g. Coggins certificates, health papers).
- Paddle, our Merchant of Record, for sale of subscriptions, billing, tax compliance, invoicing, and customer service for purchases.
- Resend, our transactional email provider, for deadline reminders and account notices sent from
notify.arenabuddy.app. - Professional advisers (legal, accounting) when needed.
- Authorities where required by law or to protect rights and safety.
We do not sell your personal data or share it with advertisers.
4. Data Retention
We keep your account and content for as long as your account is active. If you delete your account or ask us to delete your data, we will remove or anonymize it within a reasonable period, except where we are required to retain it for legal, tax, or fraud-prevention purposes.
5. Your Rights
Depending on where you live, you may have rights to access, correct, delete, restrict, or port your personal data, and to object to certain processing. You can exercise these rights from your Account page or by contacting us through the contact page. If you are in the UK or EEA, you also have the right to lodge a complaint with your local data protection authority.
6. International Transfers
Arena Buddy is operated from the United States, and our service providers may process data in other countries. Where data is transferred internationally, we rely on appropriate safeguards such as standard contractual clauses or equivalent mechanisms.
7. Security
We use appropriate technical and organizational measures to protect your data, including encryption in transit, access controls, and authenticated APIs. No system is perfectly secure; we encourage you to use a strong, unique password.
8. Cookies & Local Storage
Arena Buddy uses essential cookies and browser storage to keep you signed in and to make the app work. We do not use third-party advertising or tracking cookies.
9. Children
Arena Buddy is not directed to children under 13. If you believe a child has provided us personal data, contact us so we can remove it.
10. Changes
We may update this Privacy Notice from time to time. Material changes will be communicated through the Service or by email.
11. Contact
For privacy questions or requests, email Jamie Livingston Dierks at privacy@arenabuddy.app or reach out through the contact page.