Privacy Policy

Last updated: September 2026

CuePoint is operated by:

RASC – Sport Consulting
Organisation number: 197402211457
Sweden

RASC – Sport Consulting is the data controller for personal data processed through CuePoint.

1. What this policy covers

This Privacy Policy explains what personal data CuePoint collects, why we use it, how it is stored, who may process it on our behalf, and what rights you have.

We aim to collect only the information needed to provide, secure, improve, and operate CuePoint.

2. Information we may process

Depending on how you use CuePoint, we may process information such as:

Account information

name
email address
authentication information and account identifiers
profile information
profile image or avatar, where available

Frameworks and Activities

Information you create or use inside CuePoint, including:

Framework titles and descriptions
processes
Cue and Transition content
settings
Activities
Framework snapshots
reminder settings
shared Frameworks and Activity Setups

Reviews and Moments

Information you choose to record, including:

process ratings
result ratings
scores
conditions
perceived pressure
duration
notes and other free-text information

Sharing information

Where you use CuePoint's sharing functions, we may process information required to:

create a share or invitation
identify the sender
deliver the shared Framework or Activity Setup
record whether shared material has been received or adopted

We do not use sharing features to give the sender access to another user's private Activity history.

Notifications

If you enable reminders or push notifications, CuePoint may store technical push-subscription information required to deliver notifications to your browser or device.

Notification delivery may also involve infrastructure provided by the browser or operating-system provider.

Technical and security information

We may process limited technical information needed to operate and protect the service, including:

browser and device information
error and diagnostic information
security logs
service and request logs

Analytics

CuePoint may use privacy-oriented analytics to understand how public pages are used, such as:

page views
popular pages
referral sources
browser and operating-system information
broad geographic information
selected interaction or conversion events

Our intended analytics approach is to use a privacy-conscious first-party solution such as Vercel Web Analytics.

We do not intend to use analytics to build advertising profiles.

Payments

If you purchase a paid CuePoint plan, we may process:

subscription level
subscription status
billing period
transaction identifiers
payment-provider customer identifiers
information required for accounting and customer support

Payment-card details should be handled by the selected payment provider and should not be stored directly by CuePoint.

The payment provider will be named here when the payment system is launched.

3. Why we process personal data

We process personal data where necessary to:

create and manage your account
provide CuePoint's features
save your Frameworks, Activities, Moments, and settings
provide sharing functionality
send reminders you have requested
provide support
secure and maintain the service
prevent misuse
fulfil legal and accounting obligations
improve CuePoint in a privacy-conscious way

Depending on the situation, the legal basis may include performance of a contract, legitimate interests, compliance with legal obligations, or consent where consent is required.

4. Service providers

CuePoint relies on third-party infrastructure providers to operate the service.

These currently include:

Supabase

Used for services such as database, authentication, and backend infrastructure.

Vercel

Used for hosting, deployment, server-side execution, and related technical infrastructure.

Loopia

Used for domain-name and email services.

Payment provider

To be added when CuePoint launches paid subscriptions.

Analytics

CuePoint may use Vercel Web Analytics or another privacy-oriented analytics service.

Development tools such as coding assistants may be used when developing CuePoint, but they are not part of the live CuePoint service unless explicitly integrated with production data.

We do not sell personal data to advertisers.

5. International data processing

Some service providers may process data outside Sweden or the European Economic Area.

Where required, we rely on appropriate safeguards under applicable data-protection law, such as adequacy decisions or approved contractual safeguards.

6. How long we keep information

We retain personal data only for as long as it is reasonably needed for the purposes described in this policy.

Account and user-created data is generally kept while the account is active.

When an account is deleted, personal account data and user-created content should be deleted or anonymised, except where information must be retained for legal, security, accounting, dispute-resolution, or fraud-prevention purposes.

We will continue to improve CuePoint's account-deletion process so users can exercise this right clearly.

7. Your content

CuePoint does not claim ownership of Frameworks, notes, Activities, or other content that you create.

You remain responsible for the information you choose to enter.

Please avoid entering unnecessary personal information about other people, particularly sensitive information.

This is especially important for coaches, teachers, therapists, leaders, and others who may work with third parties.

8. Children and young users

CuePoint is intended primarily for users aged 14 and older.

CuePoint is not designed as a service for young children.

Coaches, teachers, parents, and other adults may use CuePoint in work involving younger people, but should avoid entering unnecessary personal information about children.

9. Your rights

Depending on applicable law, you may have the right to:

access your personal data
correct inaccurate information
request deletion
restrict certain processing
object to certain processing
receive certain information in portable form
withdraw consent where processing is based on consent
lodge a complaint with a data-protection authority

In Sweden, the supervisory authority is the Swedish Authority for Privacy Protection, IMY.

To exercise your rights, contact:

contact@cuepoint.one

10. Security

We use reasonable technical and organisational measures to protect CuePoint and the information stored in it.

No online system can be guaranteed to be completely secure, but we work to reduce risks and limit access to information to what is needed.

11. Changes to this policy

CuePoint will continue to develop.

We may update this Privacy Policy when the product, technology, legal requirements, or service providers change.

The current version will always be available on CuePoint's public website.