This Privacy Policy explains how Menty LLC ("Menty," "we," "us," or "our") collects, uses, discloses, and safeguards personal information when you use mentyelevate.com and our related services (the "Services"). Menty is a technology platform that connects families and athletes with independent coaches and mentors for in-person camps, training, and virtual mentorship.
We designed the Services for use in the United States. By using the Services, you agree to this Policy. If you do not agree, please do not use the Services.
Who is responsible for your information
Menty LLC is the controller of the personal information described here. For privacy questions or requests, contact us at mentyelevate@gmail.com.
Information we collect
Information you give us
- Account information — your name, email address, password, and role (parent/guardian, mentor, or athlete 16+). Authentication is handled by our provider, Supabase.
- Athlete profiles — for each athlete a parent or guardian adds: name, age or date of birth, sport(s), and emergency-contact details.
- Health and safety information — allergies, medical conditions, or medications you voluntarily provide on a waiver so a mentor can plan sessions safely. We treat this as sensitive information.
- Payment information — payments are processed by Stripe. We receive limited details such as the amount, date, status, and the last four digits and card brand. We never see or store full card numbers.
- Content you submit — waiver signatures, messages, session reflections and check-ins, reviews, goals, and any film, photos, or files you or a mentor upload.
- Communications — messages you send us or through the platform, and your email preferences.
Information we collect automatically
- Usage and device data — IP address, browser type, device information, pages viewed, and interactions, collected through server logs and strictly necessary cookies.
- Cookies — we use essential cookies to keep you logged in and to secure the site. See our Cookie Policy.
How we use your information
- Create and manage accounts and athlete profiles.
- Enable bookings, scheduling, check-ins, waivers, and mentorship.
- Process payments and mentor payouts through Stripe.
- Send transactional messages (confirmations, reminders, receipts, security notices).
- Provide support and respond to your requests.
- Keep the Services safe, prevent fraud and abuse, and enforce our Terms.
- Comply with legal obligations, including child-safety laws.
- Improve and maintain the Services.
We send marketing or promotional email only where permitted, and every marketing message includes an unsubscribe link. We do not use children's information for behavioral advertising, and we do not build advertising profiles.
Children's privacy
Menty is built for youth athletes, and protecting their information is central to how we operate. Accounts are created and controlled by parents/guardians (or by athletes who are 16 or older). Children under 13 do not create their own accounts; a parent or guardian sets up and manages the athlete's profile and provides consent. We collect only the information reasonably necessary to provide the Services and never require a child to disclose more than is needed to participate.
Parents and guardians can review, correct, or delete their child's information and withdraw consent at any time by emailing mentyelevate@gmail.com. For full details, see our Children's Privacy Notice, which describes our practices under the Children's Online Privacy Protection Act (COPPA).
How we share information
We share personal information only as described here:
- With the mentor you book — a mentor receives the information they need to deliver the session (athlete name, relevant scheduling and waiver details, and any health notes you provide for safety). Mentors are independent and are required to use this information only to provide the service.
- Service providers (sub-processors) — we use trusted vendors to run the Services: Stripe (payments and payouts), Supabase (database, authentication, and file storage), Vercel (application hosting), LiveKit (live video sessions), Resend (email delivery), and Upstash (rate limiting and abuse prevention). They may process personal information only on our instructions.
- Legal and safety — to comply with law or valid legal process, to protect the rights, property, or safety of users (especially children), and to report suspected child abuse or exploitation to the appropriate authorities.
- Business transfers — in connection with a merger, acquisition, or sale of assets, with notice as required by law.
We do not sell your personal information, and we do not share it for cross-context behavioral advertising.
How long we keep information
We keep personal information only for as long as reasonably necessary to provide the Services, meet the purposes described in this Policy, and satisfy legal, accounting, or safety obligations (for example, payment records and signed waivers may be retained for a limited period as evidence). When information is no longer needed, we delete or de-identify it. You can request deletion at any time, subject to obligations that require us to retain certain records.
How we protect information
We use technical and organizational safeguards designed to protect personal information, including encryption in transit (HTTPS), row-level security that restricts database access by role, access controls, and payment handling by Stripe so card data never touches our servers. We maintain a written security program for children's information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
Your privacy rights
Depending on where you live, you may have some or all of the following rights regarding your personal information:
- Know / access — request a copy of the personal information we hold about you.
- Correct — ask us to fix inaccurate information.
- Delete — ask us to delete your information.
- Portability — receive your information in a portable format.
- Opt out of sale or targeted advertising — we do not sell personal information or use it for targeted advertising, so there is nothing to opt out of, but you may still contact us to confirm.
- Non-discrimination — we will not treat you differently for exercising your rights.
To exercise any right, email mentyelevate@gmail.com. We will verify your request (typically by confirming control of your account email) and respond within the timeframe required by applicable law. An authorized agent may submit a request on your behalf with proof of authorization. If we decline a request, you may ask us to reconsider. California residents may also have rights under the California Consumer Privacy Act, including the "Shine the Light" law regarding disclosures for third-party direct marketing (which we do not do).
Do Not Track and Global Privacy Control
Because we do not track users across third-party websites for advertising, we do not respond differently to "Do Not Track" signals. Where required, we honor recognized opt-out preference signals such as Global Privacy Control.
Third-party links
The Services may link to third-party sites or services (for example, Stripe's checkout). Their privacy practices are governed by their own policies, and we encourage you to review them.
Changes to this Policy
We may update this Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you. Your continued use of the Services after an update means you accept the revised Policy.
Contact us
Menty LLC
Email: mentyelevate@gmail.com