Privacy Policy

We collect what we need to deliver training programming to the right athlete and to take payment for it. We do not sell your information, we do not share it for advertising, and there are no advertising or analytics trackers anywhere in this app.

Kula Worldwide LLC, which operates Built Different. Reach us at builtdifferent@kulasp.com.

Your name and email address. The email is your login and where receipts go. That is the required list — everything below is either optional or generated by using the product.

Optionally, a sport or position and a city, if you fill those in. They are not required and nothing stops working without them. They exist so Kula can tell two athletes apart on his roster.

Your billing authorization: the date and time you agreed to the recurring charge, and the exact wording that was on screen when you did. We keep the wording rather than a reference to it, so a record from before a price change still quotes the number you actually saw.

Account information: a password, which is stored only as a salted scrypt hash — we cannot read it, and neither can anyone who obtained a copy of our database. Also the time you last signed in and last opened the app, which is how we notice an athlete who has stopped training.

Payment information: handled entirely by Stripe. We never receive or store your card number. What we keep is the Stripe customer and subscription identifiers, and a record of invoices — amount, date and whether they were paid.

Training information: which programming has been assigned and released to the athlete.

We use one cookie to keep you signed in. It is HTTP-only, meaning scripts on the page cannot read it, and it holds a signed token rather than your details. Before public launch there was a second cookie that remembered you had entered the site's pre-launch password.

That is the complete list. No advertising cookies, no analytics cookies, no third-party tracking pixels.

We use a small number of service providers to run the product. They process information on our instructions and for no other purpose:

Stripe — payments, invoices and the billing portal. Your card details go to Stripe and not to us.

Supabase — the database holding your account and training information, hosted in the United States.

Vercel — hosting and delivery of the app itself.

Resend — sending transactional email, such as your welcome message and password resets. Marketing email is not sent through it.

Sentry — error monitoring. When something breaks, Sentry receives the technical details of the failure so it can be fixed.

YouTube — movement videos are embedded through youtube-nocookie.com, which is YouTube's privacy-enhanced mode: YouTube is not contacted at all until you tap play on a video, and it does not set tracking cookies for building an ad profile.

We do not sell personal information, and we do not share it with anyone for their own marketing.

Accounts are held by adults. You must be 18 or older to create one and to pay for it, and there is only one kind of account.

If you are an adult buying for a younger athlete, the account and the information on it are yours. We do not ask you for the athlete's name, their age, their birthday or anything else about them, and we have no way to know who is reading the programming. There is nothing for us to collect from a child because we never ask a child for anything.

We do not build advertising profiles, we do not show advertising, and no account is visible to any other customer.

We keep account and training information for as long as the account exists, so that a returning athlete finds their history where they left it. Records of payments are kept longer where tax and accounting rules require it.

Ask us to delete an account and we will, subject to those record-keeping obligations: builtdifferent@kulasp.com.

You can ask us for a copy of the information we hold about you, ask us to correct it, or ask us to delete it. Depending on where you live you may have additional rights under state privacy law.

Email builtdifferent@kulasp.com and we will respond. We will not treat you differently for exercising any of these rights.

Everything travels over an encrypted connection. Passwords are stored only as salted hashes. Access to the database is restricted, and each person signing in can only reach their own information — an athlete cannot see another athlete's account.

No system is perfectly secure, and we will not pretend otherwise. If a breach affects your information we will tell you as the law requires.

If we change this policy in a way that matters, we will tell you by email. The effective date at the top of this page always tells you which version you are reading.

Questions about privacy, or a request about your information: builtdifferent@kulasp.com.