Win Within Privacy Policy

Effective date: September 7, 2026

 

Win Within Mentality, Inc., a C Corporation ("we," "us," or "our"), operates the Win Within mobile application (the "App"). This policy explains what information the App collects, how it's used, who it's shared with, and the choices you have — written to match exactly what the App and its backend actually do.

 

If you don't agree with this policy, please don't use the App.

 

1. Age Requirement
 

Win Within is not directed at, and may not be used by, anyone under 13 years old. When you create an account, the App asks for your date of birth and calculates your age before you can do anything else in the App. If you enter a birth date indicating you are under 13:

 

• You cannot proceed past that screen or use any part of the App.

• We do not store that birth date at all. It's evaluated in the moment the App checks it and is discarded immediately if it fails the age check — nothing is written to our database.

 

We do not knowingly collect personal information from children under 13. If we ever learn that we have inadvertently collected information from a child under 13, we will delete it promptly. If you believe a child under 13 has provided us with personal information, contact us at the address in Section 9.
 

2. Information We Collect
 

Account information
 

When you sign up, we collect the email address and password you provide. Authentication is handled by our database provider, Supabase — we never see or store your password in plain text.
 

Athlete profile and questionnaire answers
 

To generate your personalized recordings, the App asks you a series of questions about yourself and your goals as an athlete, including (depending on which sections you complete):

 

• Your name, sport, age, position, team/school name, and years playing

• Your preferred motivational tone, what drives you, your biggest strength, an area you're working to improve, a personal mantra, and a role model

• Free-text answers about your goals: a long-term objective, a short-term goal and deadline, activities and habits tied to that goal, a past success that proves you can achieve it, and the emotions, gratitude, and character traits you associate with reaching it

• If you use the "Podium" visualization feature: sensory details about achieving your goal — where you are, who's there, and what you see, hear, smell, and feel
   

How you heard about us
 

During registration, we ask how you found Win Within (e.g. a specific event, social media platform, or word of mouth), including a free-text answer if you choose "Other."
 

AI-use consent and age verification records
 

We keep a record that you acknowledged how your answers are used to generate AI content (see Section 3), the date you did so, and the birth date you provided to pass the age check in Section 1.
 

Content you produce
 

Your choice of voice and background music, any custom title you give a recording, and the finished audio file itself (an MP3) are stored so you can play it back later from your Library.
 

What we don't collect
 

We do not request access to your camera, microphone, contacts, or location, and the App does not include any third-party advertising or analytics software development kits (SDKs). We do not collect payment information — Win Within does not currently process payments.
 

3. How Your Information Is Used
 

We use the information above to:

 

• Create and maintain your account

• Generate the spoken-word script and synthesized voice for each recording you produce, using the athlete profile and goal information you've entered — this is the main purpose the App's data collection serves

• Store your finished recordings so you can play them back in your Library

• Provide customer support and respond to your requests
   

4. AI-Generated Content and Third-Party Service Providers
 

Win Within uses third-party services to operate. Here is exactly what each one receives and why:

OpenAI

When you tap "Produce" to create a recording, the athlete profile and goal information described in Section 2 — including your name — is sent to OpenAI to:

 

1. Write the spoken-word script for your recording (via OpenAI's chat completion API), and

2. Generate the synthesized voice narrating that script (via OpenAI's text-to-speech API).

 

Every script and voice you hear in a Win Within recording is AI-generated from the answers you provide, and the App labels finished and library tracks accordingly. OpenAI processes this data under its own privacy policy and API terms, available at openai.com/policies. The App shows you a one-time explanation of this before you can produce your first recording, and asks you to acknowledge it.
 

Supabase
 

Supabase provides our account authentication, database, and file storage. Your account credentials, all profile/questionnaire data in Section 2, and your finished audio recordings are stored on Supabase's infrastructure. Supabase's own privacy practices are described at supabase.com/privacy.

Where your data is stored

Our database and file storage (Supabase) are hosted in the United States. Our application server (Railway) is hosted in the European Union. If you are located outside these regions, your information will be transferred to and processed in these locations.

 

We do not sell your personal information, and we do not share it with any third party for their own advertising or marketing purposes.
 

5. Data Retention
 

We retain your account information, profile/questionnaire answers, and generated recordings for as long as your account exists, so the App can continue to function and so you can keep listening to recordings you've already produced. As explained in Section 1, a rejected (under-13) date of birth is never retained.
 

6. Your Choices and Rights

• Access and correction: You can view and update most of your profile and questionnaire answers at any time from within the App.

• Deletion: You can permanently delete your account from the App's Home screen ("Delete Account"). This immediately and permanently deletes your account, profile, questionnaire answers, and all generated recordings — both the database records and the audio files themselves. This action cannot be undone.

• You can also request access to, correction of, or deletion of your information by contacting us at the address in Section 9.
   

7. Data Security
 

We use industry-standard measures to protect your information, including encryption in transit and at rest through our infrastructure providers. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
 

8. Changes to This Policy
 

We may update this policy from time to time. If we make material changes, we'll update the effective date above and, where required by law, provide additional notice.
 

9. Contact Us
 

Questions about this policy or your information? Contact us at:

 

Devin.price@winwithinmentality.com Win Within Mentality, Inc. 5688 Crater Lake Highway #4 Central Point, OR 97501