Your rows are yours. The School does not train models on your data, does not sell it, and does not hand it to brokers. Deleting your account deletes it all. Everything below is detail on that.

An account is an email address and a password (or a Google/Apple sign-in). Coaching adds your questionnaire answers — event, mileage, goals, injury history — because the training plan is built from them. A Network application adds the answers you submit with it. Analytics (PostHog) records how the site is used; error reporting (Sentry) records crashes. Payments run through Stripe — card numbers never touch our servers.

The natal chart calculator computes your chart without saving your birth data anywhere. The only way birth data is stored is if you explicitly opt in to the Natal Data Vault — a single private row only you can read, removable in one click from Settings.

If you store your own model API key (BYOK), it is write-only from the moment you save it: it can be used on your behalf and deleted, but never read back out or shown to anyone — including you.

Supabase hosts the database and authentication. Stripe processes payments. Resend delivers transactional email. PostHog provides analytics; Sentry, error reporting. If you join the Network, Discord hosts the community under its own terms. Each processor receives only what its job requires.

Settings gives you a one-click export of everything we hold on you, stamped with a sha256 hash so you can verify what you downloaded. To delete your account and all its rows, use the deletion request in Settings or email us — we confirm and remove everything.

We send transactional email — welcome notes, training plans, receipts, membership decisions. No marketing lists; nothing you didn’t sign up for.

Material changes to this policy will be dated here. Questions or requests: goninoschool@gmail.com.