Introduction

Lights Out Lab ("we," "us," or "our") operates the Lights Out Lab platform, an AI-powered basketball training service available at lightsoutlab.app (the "Service"). This Privacy Policy explains what personal information we collect, how we use it, and your rights regarding that information.

By creating an account or using the Service, you agree to the collection and use of information as described in this policy. If you do not agree, please do not use the Service.

Information We Collect

We collect the following categories of information when you use Lights Out Lab:

• Account information: Your email address and encrypted password when you create an account.
• Profile data: Optional information you provide about yourself, such as your playing position, skill level, and name, used to personalize your coaching experience.
• Video uploads: Video files you voluntarily upload to the Service for AI analysis of your basketball form or game film.
• Usage data: Information about how you interact with the Service, including pages visited, features used, drill completions, analysis history, and session timestamps.
• Payment information: When you subscribe to a paid plan, payment is processed by Stripe. We do not store your full credit card number. We receive and store your subscription plan, billing status, and associated Stripe customer ID.
• Device and technical data: Browser type, operating system, IP address, and other standard web server logs collected automatically when you access the Service.

How We Use Your Information

We use the information we collect for the following purposes:

• Provide the Service: To authenticate your account, deliver AI-powered coaching feedback, display your training history, and personalize your experience based on your profile and past analyses.
• Process payments: To create and manage your subscription through Stripe, including billing, trial periods, and cancellations.
• Improve the Service: To understand how users interact with Lights Out Lab, diagnose technical issues, and improve features over time. We may use aggregated, de-identified usage data for product analytics.
• Communicate with you: To send transactional emails related to your account, such as password resets or subscription confirmations. We do not send marketing emails without your consent.
• Legal compliance: To comply with applicable laws, respond to lawful requests, and protect the rights and safety of Lights Out Lab and its users.

Video Data and AI Analysis

When you upload a video to Lights Out Lab, it is transmitted to our AI analysis pipeline for the sole purpose of generating coaching feedback. We want to be transparent about how your video data is handled:

• Not permanently stored: Uploaded video files are processed in memory and are not retained on our servers after analysis is complete. We store the AI-generated analysis results (scores, feedback text) in your account, not the raw video file.
• Not used to train AI models: Your video uploads are not used to train or fine-tune AI models. The video is sent to Anthropic's Claude API for analysis and is subject to Anthropic's data handling policies.
• Frame extraction: For game film analysis, the Service extracts still frames from your video to send to the AI. These frames are handled with the same privacy protections as full video uploads.
• Your control: You may delete your analysis history at any time from your account settings, which removes the associated AI-generated results from our database.

Third-Party Services

Lights Out Lab relies on the following third-party services to operate. Each has its own privacy policy that governs how they handle data:

• Supabase — provides our authentication, database, and user management infrastructure. Your account data and analysis history are stored in Supabase's secure cloud database. See supabase.com/privacy.
• Stripe — processes all subscription payments. When you subscribe, you interact directly with Stripe's secure checkout and your payment details are governed by Stripe's privacy policy at stripe.com/privacy.
• Anthropic (Claude AI) — powers the AI coaching feedback. Video frames and coaching context are sent to Anthropic's Claude API for analysis. See anthropic.com/privacy.
• Google Analytics — we use Google Analytics to understand how users interact with Lights Out Lab in aggregate. Google Analytics sets cookies to track sessions. You can opt out using the Google Analytics opt-out browser add-on.

We do not sell, rent, or share your personal information with any third party for their own marketing purposes.

Data Retention

We retain your personal information for as long as your account remains active or as needed to provide you with the Service. Specifically:

• Account data (email, profile) is retained until you delete your account.
• Analysis history (form analysis results, game film analysis results, training plan data) is retained in your account until you delete it or delete your account.
• Video files are not stored after analysis is complete — see the Video Data section above.
• Payment records may be retained for longer periods as required by accounting and legal obligations, even after account deletion.
• When you delete your account, we delete your personal data from our active databases within 30 days, subject to legal retention requirements.

Your Rights and Choices

You have the following rights regarding your personal information:

• Access and correction: You can view and update your profile information at any time from your account settings.
• Delete your account: You can permanently delete your Lights Out Lab account from the Settings page. This removes your email, profile, and analysis history from our systems.
• Cancel your subscription: You can cancel your paid subscription at any time from your account settings. Cancellation takes effect at the end of your current billing period.
• Data portability: You may request a copy of the personal data we hold about you by contacting us at privacy@lightsoutlab.app.
• Opt out of analytics: You can opt out of Google Analytics tracking using browser settings or the Google Analytics opt-out tool.

Cookies and Tracking

Lights Out Lab uses the following types of cookies and local storage:

• Authentication cookies: Set by Supabase to maintain your login session. These are essential for the Service to function and cannot be disabled while logged in.
• Analytics cookies: Set by Google Analytics to track aggregate usage patterns. These are non-essential and can be blocked via browser settings or the Google opt-out tool.
• Local storage: We use browser local storage to temporarily cache your session state and preferences. This data stays on your device.

We do not use advertising cookies or third-party tracking pixels beyond Google Analytics.

Children's Privacy

Lights Out Lab is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you are under 13, please do not create an account or use the Service.

If you are between 13 and 18 years of age, you may use Lights Out Lab only with the involvement and consent of a parent or legal guardian.

If we become aware that we have inadvertently collected personal information from a child under 13, we will delete that information promptly. If you believe we may have collected information from a child under 13, please contact us at privacy@lightsoutlab.app.

US Privacy Rights

Lights Out Lab is operated in the United States. If you are a resident of California or another US state with privacy legislation, you may have additional rights under applicable law, including:

• The right to know what personal information is collected about you and how it is used.
• The right to request deletion of your personal information, subject to certain exceptions.
• The right to non-discrimination for exercising your privacy rights.
• The right to opt out of the sale or sharing of personal information. We do not sell or share your personal information with third parties for monetary consideration.

To exercise any of these rights, please contact us at privacy@lightsoutlab.app. We will respond to verifiable requests within 45 days.

Data Security

We take reasonable technical and organizational measures to protect your personal information against unauthorized access, disclosure, alteration, or destruction. These measures include encrypted data transmission (HTTPS), secure authentication via Supabase, and row-level security on our database.

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically.

Continued use of the Service after any changes constitutes your acceptance of the updated policy.