Last updated: August 2026
Nobiru ("we", "us", "our") operates the nobiru.global platform — an invite-only professional network for elite athletes. We are committed to protecting your personal data and your right to privacy.
Data Controller: Nobiru LLC, a limited liability company organized under the laws of the State of Delaware, United States, is the data controller responsible for your personal data. For any privacy matter you can reach us at hola@nobiru.global.
This Policy explains how we handle personal data of all our users, and includes specific provisions for individuals located in the European Economic Area (EEA), the United Kingdom and Switzerland, whose data is protected by the General Data Protection Regulation (GDPR) and equivalent laws.
We collect the following types of information:
If you choose to support an athlete as an Angel, you may give us your email address so we can notify you when supporter features become available. You do not need a Nobiru account to do this. We use this email only to contact you about supporting athletes, and you can ask us to delete it at any time.
We use your data to:
Where GDPR applies, we process your personal data on the following legal bases:
We do not sell your personal data. We share data only with:
Your personal data is stored and processed in the European Union. Our database and authentication provider (Supabase) hosts your data in a data center located in Frankfurt, Germany (EU Central). Keeping athlete data within the EU means it benefits from the strong protections of European data protection law by default.
A limited number of supporting service providers may process certain data (for example, transactional email delivery) outside the European Economic Area, including in the United States. Where that happens, we rely on the Standard Contractual Clauses (SCCs) approved by the European Commission, together with the UK and Swiss equivalents, so that your data continues to receive a level of protection consistent with EU law. You may request more information about these safeguards at hola@nobiru.global.
We take athlete privacy seriously. Your full contact details (email, phone) are never shared with organizations without your explicit consent. Organizations must first request contact, which is reviewed by our team, and then approved by you personally before any details are disclosed.
We retain your data for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except where retention is required by law.
Specifically: account and profile data are kept while your account is active; messages are kept for the life of the account to preserve conversation history; usage logs are kept for a limited period for security and troubleshooting. Where we are legally required to retain certain records (for example, for tax or dispute-resolution purposes), we keep them only for as long as the law requires.
Nobiru is intended for adult elite athletes and for organizations. Where an athlete under the age of 18 (or under the age of digital consent in their country) is included in the Platform, we handle their data with heightened care: minors are not publicly listed to other members, are not contacted through automated invitations, and may only be contacted by their own federation. Where required by law, we obtain verifiable consent from a parent, guardian or the responsible sports federation before processing a minor's personal data. If you believe we hold data about a minor without an appropriate legal basis, contact us at hola@nobiru.global and we will act promptly.
You have the right to:
To exercise these rights, contact us at hola@nobiru.global. We will respond within the timeframes required by applicable law (under GDPR, normally within one month).
If you are in the EEA, the UK or Switzerland and believe we have not handled your data lawfully, you also have the right to lodge a complaint with your local data protection authority. We would appreciate the chance to address your concerns directly first.
We use only essential cookies required for authentication and session management. We do not use tracking cookies or advertising cookies.
We implement industry-standard security measures including encrypted connections (HTTPS), secure password hashing, and row-level security on all database tables. However, no system is 100% secure and we cannot guarantee absolute security.
We may update this Privacy Policy from time to time. We will notify you of significant changes via email. Your continued use of the Platform constitutes acceptance of the updated Policy.
For privacy questions or to exercise your rights, contact us at hola@nobiru.global.