1. Who This Applies To. This policy covers coaches who create an Envoiy account, and students whose information is entered into Envoiy by their coach. Students do not create their own Envoiy account or log in directly.

2. What We Collect.
From coaches: name, email address, phone number, a securely hashed password (we never store your actual password), confirmation of your license/permit status, and your connected Ziina account credentials (stored encrypted).
From students: name and phone number, entered by their coach. Envoiy does not collect any other student information, and students do not interact with Envoiy directly.
Payment data: Envoiy never collects or stores card numbers or other card details. Payments are completed entirely on Ziina's own hosted payment page.

3. A Note on Minors. Some students may be under 18. In these cases, the personal data we hold (a name and phone number) is entered by the student's coach, not by the minor directly, and is used solely to identify who a lesson package belongs to. We do not knowingly collect any other information about minors.

4. Why We Collect This Data. To operate the service — creating packages, generating payment links, tracking session balances, calculating and invoicing commission — and to communicate with coaches about their account.

5. Who We Share Data With. We share data only where necessary to run the service:

• Ziina, to process payments and generate payment links.
• Supabase, our database and hosting provider, which stores this data on our behalf.
• Analytics provider — TBD, which shows us aggregate, non-identifying usage patterns (e.g. how many people visited a page) and does not build a profile of any individual coach.
• Error monitoring provider — TBD, which alerts us automatically when something in the app breaks, so we can fix it.

We do not sell personal data to anyone, for any purpose.

6. Where Data Is Stored. To be confirmed once server region is finalized.

7. How Long We Keep Data. We retain account and transaction data for as long as a coach's account is active, and for a reasonable period afterward as required for our own accounting and tax obligations. Coaches can request deletion of their data as described below.

8. Your Rights. You can request access to, correction of, or deletion of your personal data, or object to how it's used, by contacting us at info@envoiy.com. We will respond within 30 days.

9. Changes to This Policy. If we update this policy, we will show you the updated version and, where the changes are significant, ask you to acknowledge it again.

10. Contact. Questions about this policy can be sent to info@envoiy.com.