Privacy Notice

SURGE Fuel is operated by Mericle Collective, LLC, based in Northglenn, Colorado, United States, trading as SURGE Fuel and The Surge Athletics. We are the data controller for the personal information described in this notice — meaning we decide what personal data is collected and how it is used.

• Account details (email address, login credentials, password hash) — to create and secure your account and let you sign in. Legal basis: performance of our contract with you.
• Athlete profile information (first name or nickname, age, sex used for the fueling calculation, height, weight, activity level, sport) — to generate personalized fueling estimates, serving guidance, and meal recommendations. Legal basis: performance of our contract with you.
• App activity you enter (meal completion logs, hydration logs, events and game times, meal plans, shopping lists, badges and streaks) — to provide the tracking, planning, and history features. Legal basis: performance of our contract with you.
• Support messages — to answer your questions and resolve issues. Legal basis: legitimate interests in supporting our customers.
• Usage and technical data (device and browser type, IP address, pages viewed, error and performance logs) — to keep the service secure, prevent fraud and abuse, and improve the product. Legal basis: legitimate interests.
• Subscription status (plan, trial and renewal dates, subscription identifiers returned by our payment provider) — to give you access to paid features. Legal basis: performance of our contract with you.

We collect information about a child athlete only when a parent or guardian enters it into their own account. We do not knowingly allow children to create their own accounts, and we do not use athlete data for advertising.

Card and billing details are collected and processed directly by Paddle.com, our Merchant of Record. We do not see or store your full card details. Paddle handles payment, billing, tax compliance, invoicing, and refunds, and processes your data under its own privacy policy.

• Service providers and subprocessors — hosting, database and authentication infrastructure, error monitoring, and support tooling, acting on our instructions.
• Merchant of Record — Paddle.com, for the sale of the product, subscription management, payments, tax compliance, and invoicing.
• Professional advisers — legal and accounting advisers where needed.
• Authorities — where we are required to disclose information by law, or to protect our rights and the safety of our users.

We do not sell your personal data.

We keep account and athlete data for as long as your account is active. If you close your account, we delete or anonymise your athlete profiles and logs within 90 days, except where we need to keep limited records (such as transaction records) to meet legal, tax, or accounting obligations.

Depending on where you live, you may have the right to access the personal data we hold about you, correct inaccurate data, request deletion, request a portable copy, object to or restrict certain processing, and withdraw consent where we rely on it. Colorado residents have these rights under the Colorado Privacy Act, including the right to opt out of targeted advertising and profiling and to appeal a decision we make on a request. You will never be discriminated against for exercising a privacy right.

To make a request, contact us through the support contact in the app. We will respond within the time limits required by applicable law (generally 45 days, or one month for users in the UK/EEA).

We are based in the United States and our infrastructure providers may process data in the United States and other countries. Where personal data is transferred from the UK or EEA, we rely on appropriate safeguards such as Standard Contractual Clauses or an applicable adequacy decision.

We use appropriate technical and organisational measures to protect your data, including encryption in transit, encrypted storage, row-level access controls so each account can only reach its own athlete data, and restricted administrative access. No system is completely secure, but we work to keep risk low and will notify you if a breach affects you in a way the law requires.

We use essential cookies and browser storage to keep you signed in, remember your selected athlete, and keep the checkout secure. These are required for the app to work. Our payment provider also sets cookies needed to complete checkout. We do not use advertising or cross-site tracking cookies. You can clear or block cookies in your browser settings, but the app may not function correctly without the essential ones.

We may update this notice as the service changes; the date at the top shows when it was last revised. Mericle Collective, LLC — Northglenn, Colorado, United States. See also our Terms & Conditions and Refund Policy.