Parent and rider privacy notice
Who runs MAD
Metabolix LTD TA The MAD Academy, company 15070218, 2 Snydale Hall, New Road, Old Snydale, Pontefract, West Yorkshire, WF7 6HD, United Kingdom. Contact support@themadacademy.com about privacy, consent or support.
Your account and your rider
An adult parent or legal guardian manages the membership for one rider aged 12–17. Use your own email and password. Do not share your password with the rider. We show this notice and record your agreement before collecting the rider's details. Your membership payment must use your own credit or debit card. Stripe sends a transaction receipt to your verified email. Do not enter the child's name, date of birth or health information in payment or consent fields.
Information used
After consent is verified, we use the rider's name, date of birth, sex, height and weight, training experience, availability, race calendar, food preferences and allergies, sleep, injuries, available equipment and session feedback. These details personalise the training, nutrition and race plan and let us adjust it when circumstances change. Do not send medical records or identity documents.
Service use and personal support
We record broad app sections visited, visit dates and counts for up to 90 days. We also count completed sessions by date and type for a private weekly service-use report. This helps authorised MAD staff understand how the membership is used and identify parents or riders who may benefit from a personal check-in. A person reviews suggested check-ins before deciding whether to contact you. The app does not automatically message riders or parents. The activity log does not contain full page addresses, search terms or programme content.
Health information
Injuries, allergies and related fitness information need separate, explicit agreement. Explain this notice to the rider and involve them in decisions. Contact us if the rider does not want information shared or wants to exercise their own privacy rights. Parental payment does not remove the rider's rights.
Who can see it
The managing parent can see the rider profile, calendar and feedback. Authorised MAD support can access information when needed to operate or support the service. Supabase provides authentication and storage; our hosting provider processes requests to run the app. Stripe processes the parent's payment details. We do not put the child's health details in Stripe, sell the child's information, publish it or use it for advertising.
Withdrawal and deletion
You can review the rider's information, withdraw consent or delete their profile in Family settings without an active paid membership. Withdrawal stops programme access and further profile updates. You can download the rider's personal inputs and history first. Subscription cancellation is separate: use Manage billing to stop renewal. Email support for help or to exercise privacy rights.
Turning 18
Parent-managed access ends when the rider turns 18. The rider must take control of their own account and choices before the programme resumes. A parent must not change the recorded date of birth to bypass this boundary.
Keeping and deleting information
An unfinished consent request expires after 30 days. Verified consent is renewed yearly or when this notice changes. On withdrawal, choose immediate profile deletion or download it during a 30-day retrieval period before automatic deletion. Expired consent also stops access; any remaining rider profile is deleted after 30 days. Consent audit records are retained for one year after withdrawal. A minimal withdrawal block remains while the account exists, to prevent old requests recreating deleted information. Billing records are handled separately. Provider backup and international-processing details are set out in the privacy policy.
Version: junior-notice-2026-10-07-v3
Back