Privacy Policy
Last updated: September 29, 2026
This Privacy Policy explains what information KeltiOS collects, how we use it, and who we share it with when you use our websites, our web application, and our mobile apps. KeltiOS is operated by JPT Catalyst LLC.
Who this policy applies to
KeltiOS is club management software used by sports clubs and the people around them. There are two ways to be involved:
If you use KeltiOS through a club, that club (the club owner or operator) controls most of the personal information in the system and decides how it is used. We process it on the club's behalf. If you have a question about your information as a member, your first point of contact is your club.
If you are a club owner or administrator signing up for KeltiOS directly, we act as the controller of the account and business information you give us.
Information we collect
- Account and profile details: your name, email address, phone number, date of birth, gender, and the role you hold (owner, staff, coach, parent, athlete, or referee).
- Club, athlete, and guardian records: membership and family relationships, guardian and emergency contacts, lesson credits, and the season or program a member is enrolled in.
- Activity records: class, camp, and private-lesson schedules, attendance and check-in history, competitions and results, rankings, coaching feedback, and invoices and other billing records.
- Communications: messages, announcements, and email you send or receive inside the platform.
- Content you upload: athlete and profile photos, and documents such as signed waivers.
- Payment information: handled by our payment processor. We store billing records, invoices, and receipts, but we do not store full card numbers.
- Technical information: log data such as IP address, browser or device type, and error reports, used to run and secure the service.
Photos, camera, and device features
The mobile apps ask for permission before using certain device features, and only use them for the purpose below:
- Camera: scanning club check-in QR codes and taking profile or athlete photos.
- Photo library: choosing an existing photo to use as an athlete or profile picture.
- Location (while in use): where a club has turned on location-based check-in, to confirm a check-in happened at a club location.
- Face ID / Touch ID: if you enable it, sign-in is handled entirely by your device's operating system. Biometric data never leaves your device and is never sent to us.
- Push notifications: we store a device push token so your club can send you notifications you have opted in to.
- On-device offline cache: to let the app keep working with a weak signal, a copy of some of your club's data (for example, a snapshot file and a pending check-in queue) is stored only on your own device. It is cleared when you sign out and can be removed by deleting the app.
Health and medical information
Some clubs collect liability and medical waivers so they can care for athletes safely. These are signed through Dropbox Sign and can contain health-adjacent information, which is sensitive.
What is stored: the waiver text, the signature, the signer's name and email, and the date signed. Who can see it: club owners and the staff or coaches the club has given waiver access. It is not used for advertising, not sold, and not shared with anyone except the parties needed to run the club's program and the signing service.
Clubs are responsible for collecting any consent or authorisation they need for this information, and for keeping it only as long as their own legal and safety obligations require. Waivers are kept with the member's club record for as long as the club keeps that record.
Payments and billing
Payments are processed by Stripe. When you pay a club, your card details are entered directly with Stripe and are not stored by KeltiOS. We keep the resulting billing records — amounts, invoices, receipts, and payment status — so that clubs, families, and their bookkeepers can see what was owed and paid.
How we use information
- To provide the service: schedules, enrollment, attendance, billing, communications, and reporting for your club.
- To send you the transactional messages you expect: enrollment confirmations, receipts, reminders, and notifications.
- To keep the service secure and working: detecting errors, preventing abuse, and supporting you when you ask for help.
- To meet our legal, tax, and accounting obligations.
Who we share it with
We do not sell personal information, and we do not share it for advertising. We share it only with the service providers that make KeltiOS work, and with the club you belong to:
| Provider | What it does | Data involved |
|---|---|---|
| Supabase | Authentication, database, and file storage | Account and club data, uploaded files |
| Vercel | Website and application hosting | Technical and log data |
| Stripe | Payments and club payouts | Payment and billing data |
| Resend | Transactional email | Name and email address |
| Dropbox Sign | Waiver signing and signatures | Signer name, email, and waiver content |
| Rematch | Fencing bout video embeds | Competition and bout references |
| Firebase Cloud Messaging / Apple Push Notification service | Delivery of push notifications | Device push token |
- The club you belong to can see the information you enter for that club.
- We may disclose information if the law requires it, to protect someone's safety, or as part of a merger or sale of the business (in which case we will tell you).
Children and guardian data
KeltiOS is meant for use by clubs and by adults on a member's behalf. Accounts for athletes under 18 are created and managed by a parent or guardian, who is responsible for the athlete's information and for agreeing to the club's terms on their behalf.
If you believe a child has given us personal information without a parent or guardian, contact us and we will help remove it.
How long we keep information
We keep information for as long as your club's account is active and for as long as needed to provide the service. When a club closes its account, or you ask us to delete your information, we delete or de-identify what we can.
Some records are kept longer because the law requires it. In particular, financial and tax records (invoices, payments, and receipts) are typically kept for several years, and signed waivers are kept as long as the club's own safety and legal obligations require. We may keep a limited record of a deletion request so we can honour it.
Managing and deleting your information
You can view and update much of your information in your profile settings, or by asking your club.
To request a copy, a correction, or the deletion of your information, email support@keltios.com, or ask your club administrator. We will respond within the time the law allows. If some information legally must be kept (for example, a financial record), we will tell you and delete the rest.
Security
We use administrative, technical, and physical safeguards to protect information, including encryption in transit and access controls that limit who can see what. No method of transmission or storage is completely secure, so we cannot promise absolute security.
Where we store and process information
We and our service providers may store and process information in the United States and in other countries where our providers operate. Where required, we take steps to protect information transferred across borders.
Changes to this policy
We may update this policy as the service changes. When we make a material change, we will update the date at the top of this page and, where appropriate, notify you in the app or by email.
Contact us
Questions or requests about privacy can be sent to support@keltios.com, or by post to JPT Catalyst LLC, 17350 State Highway 249, Ste 220, Houston, TX 77064, United States.