Privacy Policy.
1. Overview & Scope
Explosive AS ("we", "us", "our") provides a suite of tools for measuring and tracking athletic sprint performance. This Privacy Policy covers all services operated by Explosive AS:
- Explosive Sprint Timer — the iOS and Android app for frame-accurate sprint timing
- Explosive Score — the web platform at score.explosive.app for athlete profiles, leaderboards, and coach review
- Explosive Community & Courses — community and course content hosted on Kajabi at explosive.app
We are committed to protecting your privacy in accordance with the EU General Data Protection Regulation (GDPR), the Norwegian Personal Data Act, and other applicable privacy laws.
2. Data Controller
Explosive AS
Organisation No.: 998 021 383
Norway
Email: privacy@explosive.app
For all privacy-related requests — including access, correction, and deletion — contact us at the email address above.
3. Services Covered
Explosive Sprint Timer (app)
The Sprint Timer app processes video entirely on your device. We do not upload, receive, or store any videos or timing data from standalone app use. No personal data is collected through the app itself.
Explosive Score (score.explosive.app)
When you submit sprint results or videos through the app to the Score platform, or when a coach registers you as an athlete on a team, personal data is processed on our servers.
Kajabi Community & Courses
Our community and educational courses are hosted on Kajabi. When you join, enrol in a course, or make a purchase, personal data is processed by both Explosive AS and Kajabi Inc.
4. What We Collect & Why
Explosive Score — Athlete Profile
| Data | Purpose |
|---|---|
| Full name | Identify athlete on profile and leaderboard |
| Year of birth | Age-group scoring and children's privacy compliance |
| Gender | Gender-appropriate performance benchmarks |
| Country | Leaderboard filtering and display |
| Sport & position | Relevant benchmarking and filtering |
| Profile photo | Optional — displayed on your athlete profile |
| Email address | Sending your login link and service notifications |
Explosive Score — Test Results & Videos
| Data | Purpose |
|---|---|
| Sprint times | Score calculation and leaderboard ranking |
| Computed scores & percentiles | Performance tracking over time |
| Test date and type | Historical tracking |
| Submitted videos | Coach review and verification of results |
Kajabi Community & Courses
| Data | Purpose |
|---|---|
| Full name & email | Account creation and communication |
| Purchase history | Access to paid content |
| Community activity | Community participation |
| Course progress | Tracking completion |
We never collect payment card details. Payments are handled by Apple, Google, or Kajabi's payment partner (Stripe).
5. Legal Basis (GDPR Art. 6)
| Processing activity | Legal basis |
|---|---|
| Athlete profile, test results, login | Contract (Art. 6(1)(b)) |
| Public leaderboard display | Consent (Art. 6(1)(a)) — opt-in |
| Coach review of submitted videos | Consent (Art. 6(1)(a)) |
| Service notifications | Contract (Art. 6(1)(b)) |
| Kajabi community & courses | Contract (Art. 6(1)(b)) |
| Service improvement & security | Legitimate interest (Art. 6(1)(f)) |
6. Third-Party Processors
| Processor | Purpose | Location |
|---|---|---|
| Supabase Inc. | Database & file storage | USA (SCCs) |
| Netlify Inc. | Web hosting | USA (SCCs) |
| Kajabi LLC | Community & courses | USA (SCCs) |
| Resend Inc. | Transactional email | USA (SCCs) |
| Apple / Google | App distribution & payments | USA |
We do not sell your personal data. We do not use your data for advertising purposes.
7. International Transfers
Our service providers are based in the United States. Data transfers are safeguarded through EU Standard Contractual Clauses (SCCs) under GDPR Art. 46.
8. Data Retention
| Data type | Retention |
|---|---|
| Athlete profiles & results | Active + 12 months after deletion request |
| Submitted videos (pending) | Deleted within 90 days of coach decision |
| Login tokens (magic links) | 24 hours or until used |
| Device session identifiers | 12 months from last use |
| License & purchase records | 5 years (legal obligation) |
9. Children's Privacy
Individuals aged 13 and over may consent to digital services themselves under Norwegian law and GDPR Art. 8. Children under 13 require verifiable parental consent.
If you believe a child under 13 has created a profile without parental consent, contact us at privacy@explosive.app and we will delete the profile promptly.
10. Your Rights
Under GDPR, you have the right to: access your data, correct inaccuracies, request deletion, receive a portable copy, object to processing, restrict processing, and withdraw consent at any time.
Contact privacy@explosive.app to exercise any of these rights. We respond within 30 days.
You may also lodge a complaint with the Norwegian Data Protection Authority: www.datatilsynet.no
11. Cookies & Local Storage
The Explosive Score platform does not use tracking or advertising cookies. We use browser local storage solely to keep you logged in. These identifiers are stored only on your device and are not used for tracking.
The Kajabi platform (explosive.app) uses its own cookies for session management. Please refer to Kajabi's privacy policy for details.
12. Security
We use encrypted HTTPS connections, row-level database security, passwordless login (single-use magic links), and access-controlled cloud storage. If you believe your data has been compromised, contact privacy@explosive.app immediately.
13. Changes to This Policy
We may update this policy from time to time. When we make significant changes, we will update the effective date and, where appropriate, notify you by email. Continued use of our services after changes are posted constitutes acceptance.
14. Contact
Explosive AS
Privacy: privacy@explosive.app
Support: support@explosive.app
Org. No.: 998 021 383 — Norway
Last updated: 17 May 2026