Privacy Policy

1. What we collect

Account information

When you create a Debrief account, we collect your email address and password. Your password is handled entirely by our authentication provider (Supabase Auth) and stored only as a salted hash — we never see or store it in plain text. If you don't set a display name, your email address is used as your display name within the app.

Training notes and other content you create

Debrief's core purpose is to store the training notes ("debriefs") you write. This includes the original text you submit, the AI-cleaned version of it, and structured fields extracted from it (title, summary, topics, key points, action items, reflections, and, for martial-arts notes, technique/position data).

Club and sharing data

If you join or create a club, we store your club membership and role. If you choose to share a note — with your whole club or with specific teammates — we store that sharing relationship. If another club member rates a shared note, we store their rating; only the aggregate rating and your own rating are ever shown back to you, never who gave which score.

Information collected automatically

Our hosting provider (Vercel) automatically logs standard technical information for every request, such as IP address and browser type, for security and reliability purposes — the same as most websites.

Local device storage

Debrief does not use tracking cookies and has no advertising or analytics trackers of any kind. We use your browser's local storage only for things the app needs to function: keeping you signed in (via a session token issued by our authentication provider) and remembering whether you've dismissed a one-time onboarding message. Nothing in local storage is shared with third parties or used to track you across other sites.

2. How we use your information

• To create and secure your account, and let you sign in.
• To store, organize, and let you search your own training notes.
• To extract structured information (topics, techniques, summaries) from notes you submit, so you can search and review them more easily.
• To operate club features you opt into: shared feeds, targeted sharing, and ratings.
• To send account-related email, such as confirming your email address or resetting your password.
• To maintain the security, integrity, and reliability of the service.

We do not sell your personal information or your training notes, and we do not use your content to serve you advertising.

3. Sharing inside Debrief

Your notes are private by default. A note only becomes visible to anyone else if you explicitly choose to share it — either with your entire club or with specific people you select. You can change a note's sharing status at any time. Star ratings left by other club members on your shared notes are aggregated (and, below a small number of ratings, suppressed entirely) so an individual rating can't be reverse-engineered.

4. Third-party service providers

We use a small number of service providers to run Debrief. Each only receives the data it needs to do its job:

• Supabase — our database, authentication, and backend hosting provider. Supabase stores your account record, your notes, and all app data described above.
• Anthropic (Claude) — when you submit a training note, the text is sent to Anthropic's API to extract a title, summary, topics, and (for martial-arts notes) technique details. Anthropic processes this text to return the extracted result; see Anthropic's privacy policy.
• Vercel — hosts the Debrief website and app, and generates standard server logs as described above.
• Resend — sends account-related emails (email confirmation, password reset) on our behalf using your email address.

We do not currently use any advertising, analytics, or tracking-pixel services. A separate, owner-only analytics dashboard exists to help us understand overall app usage; it is computed entirely from our own database and is not shared with or provided by any outside analytics company.

5. Payments

At this time, Debrief does not process any payments and has no billing integration — all accounts are free-tier or trial-only. If and when paid plans become active, we will update this section to name the payment processor used and what information it collects (Debrief itself will never see or store your full card details).

6. Data retention and your rights

We keep your account and notes for as long as your account is active. You can export a copy of your own notes at any time (available on paid plans) as a CSV file containing the full content of each note.

You can delete your account and everything in it yourself, at any time. In the app, open the … menu and choose Delete Account; you can also do it on the web at debriefapp.ca/delete-account without installing anything. Deletion removes your profile, your notes, your shares and your ratings, along with any report files we have stored for you. It is immediate and it cannot be undone.

To access or correct your personal information, or if you would rather we handled a deletion for you, contact us using the details below.

7. International data transfers

Debrief is operated from Ontario, Canada. Our service providers (listed in Section 4) may store or process data on servers located outside of Canada, including in the United States. By using Debrief, you understand that your information may be transferred to and processed in countries other than your own, which may have different data protection laws.

8. Children's privacy

Debrief is not directed at children and is not intended for use by anyone under the age of 13. We do not knowingly collect personal information from anyone under 13. If you believe a child under 13 has created an account, please contact us and we will delete it.

9. Security

We use industry-standard measures to protect your information, including encryption in transit (HTTPS) and database-level access controls that restrict each user to their own data and whatever they've explicitly chosen to share. No method of transmission or storage is 100% secure, and we can't guarantee absolute security.

10. Changes to this policy

We may update this policy from time to time as the app changes — for example, when we add a new feature or service provider. We'll update the "Last updated" date above, and for material changes we'll make a reasonable effort to notify active users.

11. Contact us

Questions about this policy, or a request about your own data? Get in touch.

Debrief is operated by Mike Ginn, a sole proprietor based in Ontario, Canada,
who is accountable for the personal information described in this policy.
Email: bigmikeginn@gmail.com