Headings help you navigate, but every section is part of the agreement. Contact legal@duna.coach with questions.
1. Scope and roles
This Privacy Policy explains how Beach Elite LLC, doing business as Duna, processes personal information through Duna consumer, mobile, public-profile, Duna HQ, event, communications, rating, and support services.
Duna is generally the controller of consumer accounts, platform security, Sand Rating, public profiles, and product analytics. An organization using Duna HQ may separately control member, employee, coach, event, waiver, marketing, and facility information. In those cases, contact the organization first for organization-directed requests; Duna supports the organization as its service provider or processor.
2. Information we collect
We collect information you provide, information created through use of Duna, information from organizations and other users, public or licensed sports records, and technical information from your device and browser.
- Account and identity: name, display name, handle, email, phone, birth date, age band, guardian relationships, authentication identifiers, locale, and profile visibility.
- Player and professional details: height, playing experience, indoor and collegiate history, school, photos, ratings, rankings, match history, teams, scores, eligibility, source-profile URLs, and identity-resolution evidence.
- Transactions: orders, tickets, bookings, memberships, credits, refunds, payouts, tax status, processor identifiers, and immutable ledger entries. Duna does not store full payment-card numbers.
- Organization records: business, venue and court addresses, staff roles, schedules, compensation configuration, customer records, waivers, policies, inventory, campaign settings, and performance data.
- Device and usage: IP address, device and browser details, app version, logs, diagnostics, approximate or precise location when permitted, cookies, feature interactions, and security events.
- Content and communications: messages, forms, waivers, support requests, campaign engagement, uploaded media, voice or typed onboarding responses, and AI-derived profile suggestions.
- Optional Apple Health information: the performance categories you select, which may include heart rate and variability, sleep, respiratory and oxygen signals, body temperature, activity, energy, steps, distance, workouts, weight, body-fat percentage, and lean body mass. Duna does not write data to Apple Health.
3. Public and third-party sports sources
When you connect or claim a VolleyballLife, BVBInfo, FIVB-related, or other supported profile, Duna may retrieve the public profile, results, opponents, teams, rankings, events, and source identifiers. Discovering an opponent in a connected result may cause Duna to create an unclaimed player record so match history and ratings remain coherent.
Unclaimed profiles are labeled, limited to appropriate public sports information, and may be claimed, corrected, challenged, restricted, or removed where required. We preserve source provenance so corrections do not silently rewrite historical records.
4. How we use information
We use information to authenticate users; operate profiles, households, bookings, events, tickets, wallets, payments, subscriptions, notifications, and organization tools; calculate and explain ratings; import and reconcile records; prevent fraud; support safety; provide customer service; comply with law; and improve Duna.
We may use AI to structure information you provide, produce suggestions, detect anomalies, assist support, recommend schedules or offerings, and measure risk. Material account, payout, guardian, disciplinary, or employment decisions include appropriate rules, review, or appeal paths.
5. Legal bases
Depending on location and context, we process information to perform a contract, take steps you request before a contract, comply with law, protect vital interests, pursue legitimate interests such as security and service improvement, or based on consent. You may withdraw consent prospectively where consent is the basis.
6. Payments, identity verification, and taxes
Payment and identity providers process payment credentials, bank or payout details, government identifiers, documents, liveness or biometric signals, and risk information under their privacy terms. Duna normally receives payment tokens, account and transaction identifiers, verification status, requirements, and limited fraud signals—not complete card or identity-document data.
We retain transaction, payout, tax, consent, and dispute records for legally required periods and to maintain a balanced, auditable ledger.
7. Children and family accounts
Duna does not knowingly allow a child under 13 to independently consent to collection of personal information. If a birth date or other information indicates the user is under 13, we restrict the account and seek verifiable parental consent before collecting or using information beyond what is permitted to obtain that consent.
Parents and guardians can manage linked children, review key information, approve bookings and spending, fund organization wallets, and request access, correction, or deletion. If you believe a child supplied information without proper consent, contact privacy@duna.coach.
8. Apple Health and performance context
Duna imports Apple Health information only after you choose categories and complete Apple's system permission flow. We use imported information to build your private Health timeline, provide descriptive recovery and match context, and—when separately authorized—align heart rate with your Duna Vision recordings. These features are for fitness and performance context, not diagnosis, treatment, or medical advice.
Imported Health values are encrypted before database storage and are not used for advertising, marketing profiles, eligibility, credit, insurance, employment, or sale. Public profile or video visibility never makes Health information public. Duna shares Health information with another player, a coach, or authorized club staff only when you create a specific, expiring Duna grant identifying the recipient, categories, and allowed view. Current relationships and the grant are rechecked when information is viewed, and non-owner access is audited.
You can revoke a Duna sharing grant immediately or disconnect Duna Health to delete imported samples and revoke all grants. Apple separately controls source permission in Health and Settings; changing a Duna display grant does not change Apple's permission, and changing Apple's permission may limit future imports. Duna does not store Health data in iCloud.
9. How we disclose information
We disclose information to the organization, coach, facility, event host, teammate, parent, guardian, or user involved in a transaction or activity; to vendors that provide cloud hosting, payments, identity, messaging, maps, analytics, customer support, app distribution, and security; and to authorities or counterparties when reasonably necessary for law, safety, fraud, disputes, or corporate transactions.
We do not sell personal information for money and do not share it for cross-context behavioral advertising. If that practice changes, we will update this policy and provide legally required choices before the change applies.
10. Public visibility and search
Public profiles, ratings, event pages, rosters, professional results, and public match pages may be visible to search engines and AI answer systems. Private account fields, exact birth dates, payment details, guardian records, private messages, and protected forms are not intended for public display. Use visibility controls and contact us if a public field is inaccurate.
11. Communications and choices
Transactional messages include receipts, security alerts, booking changes, invitations, waitlist notices, guardian actions, and service notices. You cannot opt out of messages necessary to provide a requested service. Marketing email, SMS, WhatsApp, RCS, and push notifications use the consent and unsubscribe controls shown in Duna or the message.
13. Retention and deletion
We retain information only as long as reasonably necessary for the purpose collected, the life of your account, an organization instruction, and applicable tax, accounting, consumer-protection, employment, safeguarding, fraud, dispute, and legal obligations. Retention periods differ by record type.
An eligible account-deletion request immediately revokes Health sharing, remote-control sessions, public video visibility, share links, and live updates. Permanent deletion is scheduled seven days later and can be cancelled before that deadline. Cancellation does not automatically restore previously revoked sharing or public access.
After the recovery window, we delete the authentication identity, imported Health records, Duna-hosted videos and provider copies, posts, messages, forms, connected-account credentials, and other sensitive service data. Ledger, payment, tax, consent, moderation, dispute, fraud-prevention, and security records may be retained in restricted, de-identified form for their required period. Backups age out under controlled schedules and are not restored to production except for disaster recovery.
14. Your privacy rights
Depending on where you live, you may request access, correction, deletion, restriction, portability, or objection; withdraw consent; opt out of certain marketing or automated processing; or appeal a denied request. You may also submit a complaint to your local privacy regulator.
Use Account Settings to edit profile fields, export data, manage communications, or initiate deletion, or email privacy@duna.coach. We verify requests and may deny or limit them when permitted by law, such as to protect another person, preserve transaction integrity, or comply with retention duties. Authorized agents must provide proof of authority.
15. Security and international transfers
We use administrative, technical, and organizational safeguards appropriate to the sensitivity of the information, including scoped access, encryption in transit, audit trails, tenant isolation, and incident procedures. No system is perfectly secure.
Duna and its providers may process information in the United States and other countries. Where required, we use recognized transfer mechanisms and contractual safeguards.
16. Changes and contact
We may update this policy to reflect new features, providers, or laws. Material changes will be highlighted and renewed consent will be requested when required.
Contact the privacy team at privacy@duna.coach or Beach Elite LLC d/b/a Duna, United States. Organization-specific questions may also be directed to the relevant club, coach, facility, or event organizer.