For parents, guardians and young athletes

Your child's journal is theirs.

You will see their training, their injuries, their measurements and whether they are eating enough. You will not see their journal, their meal photos or their soreness log — and on the day-to-day you see less than their coach does. That is the design, not an oversight, and this page explains it.

The full privacy notice If you are under 18

What your child controls

The journal

What they write is encrypted and has exactly one reader: them. Not the coach, not you, not a club admin, not a welfare officer. There is no summary of it either — the coach receives nothing at all from the journal, no themes, no flags, no notification that an entry exists.

Food

They photograph a meal and describe it in their own words. The photo and the words stay with them. What reaches you and the coach is the verdict — whether it was enough — and the carbohydrate, protein and fat estimates. Never the picture. Never the description.

Their own body

Height, weight and sex are encrypted. A child under 18 is not shown a derived calorie figure for themselves — they see the method, not a number. Where a date of birth is missing, the system assumes the stricter case.

Being told first

If Recov raises a low-level wellbeing notice, the athlete is the one told. That tier is not visible to a coach, a parent, or even the club's welfare officer, and no adult can acknowledge it on the child's behalf. Today nothing produces such a notice — Recov does not monitor for welfare risk, and we say so plainly rather than let you assume someone is watching.

What you see

Guardian access, category by category

Data	You	Their coach
Training results and progress against a gold-standard time	Yes	Yes
Injury reports	Yes	Yes
Fuelling verdict, and carbohydrate, protein and fat estimates	Yes	Yes
Height, weight and sex	Yes	No
Soreness log	No	Yes
Resting heart rate and sleep	No	Yes
Meal photographs	No	No
What your child said they ate	No	No
Journal	No	No

On the day-to-day training and wellbeing record, a parent sees less than a coach: the coach needs the soreness log and the recovery numbers to plan the next session safely, and you do not. Growth runs the other way — height and weight go to you and not to the coach, because that is a family matter and a coach does not need it to write a training programme.

Why less, and not more

A record a child believes everyone will read is a record they manage rather than one they keep. The point of a private journal and a private meal photo is that the honest version gets written down at all — which is what makes the useful parts, the injuries and the fuelling verdicts, worth anything.

None of this displaces you. You are still the parent, they are still your child, and the conversation you have at home is not something a piece of software is entitled to hold.

Because your child is a minor, only a linked guardian can turn a consent switch on. Every switch starts off, and only an explicit yes is recorded. Either you or your child can withdraw at any time, whatever their age, and any one linked guardian can do so on their own.

Your email address comes from the club, from its own membership records. A child cannot type in an address and nominate a "parent".
The switches that gate real processing are meal photos, the fuelling verdicts derived from them, body measurements and wearable sync. The journal, the soreness log, injury reports and hand-typed recovery numbers are controlled by role rather than by a consent switch — who you are decides what you see.
Withdrawing consent stops what happens next. It does not delete what is already recorded. The next request that needed that consent is refused; earlier entries stay where they are.
The history of what was agreed, and when, is preserved. A withdrawal is a new entry, never an edit.
Consent is checked every time, not remembered from a login.
On their eighteenth birthday your access ends, that day, with no taper. They stay in your list as an adult with nothing for you to open.

Sharing a device

When a page is reloaded, Recov announces whose session it is, and leaving takes one tap. On a family iPad, that matters more than any other security feature on this page.

Wearable sync is different: it reads the health app on the phone or tablet where it is switched on, whoever's numbers are in it. It is switched on separately for each person on each device, but on a shared phone, or a shared family iPad, the numbers may not be your child's: an iPad's Health app can hold numbers from someone's iPhone or Apple Watch. Only switch it on on your child's own phone.

What you can ask us for

You can ask what we hold about your child, ask us to correct it, object to what we do with it, or complain about how we have handled it. Two things worth knowing before you do:

There is no export button. A copy of someone's data is put together by hand when it is asked for.
Deleting an account does not remove the training and wellbeing record. The name comes off; the entries stay against an identifier. We describe this properly rather than calling it anonymous, because it is not.

Your rights, and how to use them · How long we keep data · Make a request

If you are worried about a child

Recov is not a reporting route and no one at Recov is watching your club's athletes. Speak to your club's welfare officer, and where a child may be at immediate risk, contact the police and your local authority's children's services. More on that.