PALESTRA
Privacy Policy
Last updated: 22 October 2026. This notice explains how personal data is handled for the PALESTRA wrestling coach-assistant app on iOS and Android, and for the website at palestra.global. The app is planned to launch on 1 November 2026.
Who is responsible
The controller is EVERBLUE & GREEN S.A., Voula, Greece. Tax ID: EL801408712. GEMI No: 156191601000. Registered office: Leoforos Vouliagmenis 32, 3rd floor, 166 73 Voula, Attica, Greece.
Privacy and account requests: info@palestra.global. Questions about a gear order: shop@palestra.global.
What this notice covers
PALESTRA has three parts.
- The app. You sign in through Auth0, with email, Google, or Apple. The app stores the account and training information listed below.
- This website. palestra.global is a static site. The Log in control is a preview. It does not create an account or collect a password.
- The gear store at palestrashop.com. Checkout and payment happen on Shopify. Shopify is the processor for orders and payments. The app does not handle card numbers. If the store is used from the app, the app stores a Shopify cart ID.
The store has its own pages for privacy, terms of service, shipping, refunds, and its legal notice.
Children and parental consent
PALESTRA has training programs for ages 12–14, 15–17, and 18 and over. High-school, college, and club wrestlers may use it, including people under 18.
The training, health and safety notice on this website says that, where someone under 18 is allowed to use PALESTRA, a parent or legal guardian must authorise that use. That authorisation does not replace a qualified coach or medical advice.
Where an information-society service is offered directly to a child and the processing relies on consent, the GDPR default age is 16. A country may set a lower age, not below 13. Greece has set that age at 15, in Law 4624/2019, Article 21. Below the age that applies, a parent or the legal representative has to give consent.
Wrestlers in the 12–14 program are under 15. Consent-based processing for that age group needs a parent or legal guardian. A 15- or 16-year-old may be able to consent alone under Greek law and still be under the GDPR default of 16 if they use PALESTRA from another EU country.
Information the app stores
Account and sign-in
- Email address
- Auth0 user ID
- Name
- Sign-in through Auth0 with email, Google, or Apple
Auth tokens are kept in secure storage on the device.
Profile and wrestling
- Sex
- Age
- Country, as a label you choose. This is not a GPS location.
- Team or club
- Wrestling details
- Device timezone
Health and fitness
This information is sensitive. It is special-category data under the GDPR. It includes:
- Height
- Body weight and target weight
- Injuries and training limits
- Daily check-ins: readiness, fatigue, mood, soreness, and sleep quality
- Training sessions and program results
Competition
- Competition date
- Location as text you enter. This is not taken from GPS.
- Notes
Store
A Shopify cart ID, if you use the store. The app does not store card numbers.
What the app does not collect
The app does not include analytics, advertising, or tracking SDKs. It does not access GPS location, the camera, photos, or the microphone.
Why we use it
We use the account, profile, wrestling, training, competition, and cart information to provide the PALESTRA account and the features you use: sign-in, the program for your age group, check-ins, training records, competition notes, and a store cart.
For ordinary personal data, we use it to perform the contract to provide the app (GDPR Article 6(1)(b)). Where a field is optional, we use consent (Article 6(1)(a)), which can be withdrawn.
Health and fitness data needs an extra condition under GDPR Article 9.
The app’s server keeps request logs with the method, path, status, and duration of a request. The logs do not record the email address. They are used to run the service and to investigate faults.
The app does not use personal data for advertising.
Who else processes it
- Auth0 processes sign-in and the account identity. If you choose Google or Apple, that company also processes the sign-in.
- The PALESTRA backend stores the app data listed above.
- Shopify processes gear orders and payments. The app does not receive card data.
- Apple and Google distribute the app through the App Store and Google Play when it is available. Downloads are not available yet.
- Netlify hosts this website. The website does not run accounts.
Account deletion
You can ask for the account to be deleted. The steps are on the Delete account page. Delete account in the app removes the account through Auth0 and from the PALESTRA backend.
Shop orders stay with Shopify.
Your rights
Where the GDPR applies, you can ask to access your personal data, correct it, delete it, restrict its use, or receive a portable copy of data you provided where that right applies. You can object to processing based on legitimate interests. You can withdraw consent. Withdrawal does not affect processing that was lawful before the withdrawal.
Email info@palestra.global. A parent or legal guardian can write for a child.
You can also complain to the Hellenic Data Protection Authority at www.dpa.gr, or to the authority in the EU country where you live or work.
This website
palestra.global does not include analytics or advertising scripts. The Log in preview does not send a password. The App Store and Google Play buttons do not start a download. They show a notice that the app is still in development.
If you email us, we receive the address you write from and the message you send, and we use that to reply.
Security
Auth tokens are kept in secure storage on the device.
Changes
We will post changes on this page and update the date at the top.
Contact
EVERBLUE & GREEN S.A., Voula, Greece
info@palestra.global
Read the Terms of Use and the Delete account page with this notice.