Privacy Policy
My Athlete LLC · Last updated: July 22, 2026 · Added Optional Enhanced Growth Velocity disclosure
1. Our Service & Your Privacy
My Athlete LLC ("we", "our", or "the app") is a youth sports development tracking application that enables parents, guardians, and coaches to record physical measurements, sport-specific assessments, growth tracking, and team collaboration. This Privacy Policy describes what data we collect, how we use it, and your rights.
Data Protection Commitment: We do NOT sell your data. We do NOT use child data for behavioral advertising. We do NOT share data with third parties except as necessary to operate the app, and only under strict contractual obligations.
2. Information We Collect & Why
| Data Type | Why We Collect It | Whose | Retention |
|---|---|---|---|
| Email, Password | Account login & recovery | All users | Until account deletion + 30 days |
| Name, Role | Display & permission model | All users | Until account deletion + 30 days |
| Date of Birth (DOB) ⚠️ sensitive | Age-group assessment matching; age-appropriate developmental guidance per LTAD research; COPPA compliance | Athletes | Until account deletion + 30 days |
| Biological Sex ⚠️ sensitive | Sex-specific CDC percentiles & sport-category eligibility | Athletes | Until account deletion + 30 days |
| Height, Weight, BMI ⚠️ sensitive | Growth tracking & CDC percentile benchmarks; general training-safety awareness and age-appropriate exercise guidance | Athletes | Until account deletion + 30 days |
| Assessment Scores & Performance Metrics | Skill tracking & benchmarking | Athletes | Until account deletion + 30 days |
| Team Roster (name + role) | Coach collaboration & team leaderboards. A coach can view a rostered athlete's data only while on an active roster. When a season ends, the coach keeps read-only access limited to that season's records; when a parent/athlete leaves a team, the coach's access ends immediately. | Athletes | Until team deletion + 30 days |
| Coach-Created Play & Tactics Data | Plays, formations, and token layouts created by coaches on the Tactics Board. Not personal athlete data — linked to the coach's account and team only. | Coaches | Until team or account deletion + 30 days |
| Analytics Dashboard Activity | Aggregated views of existing assessment, roster, and growth data. No new data is collected — the dashboard computes summary statistics from records already listed above. | Coaches | Derived in real-time; underlying records follow their own retention schedule |
| Event Timestamps, Feature Usage | Product analytics (PostHog); anonymized after 30 days | All users | 90 days anonymized; then deleted |
| Crash Logs, Error Traces | Bug fixing & security (Sentry) | All users | 90 days; then deleted |
| IP Address, Device Type | Security & abuse prevention | All users | 180 days; then deleted |
Data We Do NOT Collect
- Precise GPS location (no location-based ads or tracking)
- Photos or videos of athletes (exercise library is curated, not user-generated)
- Biometric identifiers (fingerprints, face geometry, voiceprints)
- Government-issued identifiers (e.g., Social Security, driver's license, or passport numbers)
- Persistent identifiers used for cross-app tracking or ad targeting
- Sensitive health data beyond growth/performance (no psychiatric, sexual, or substance-abuse info)
3. Verifiable Parental Consent (COPPA)
Path A: Parent Adds Their Own Child
When a parent/guardian registers an account and enters their child's information (DOB, sex, measurements, assessments), by saving that data you provide verifiable parental consent under COPPA (15 U.S.C. § 6501) for us to store the child's date of birth and demographics, calculate developmental stage guidance and CDC growth percentiles, enable coach collaboration if the child joins a team, and provide exercise and wellness guidance.
What we log: Parent email address, account creation timestamp, athlete ID, and acceptance of this Privacy Policy. These records are retained for 30 days after account deletion for compliance audit purposes.
Path B: Coach Adds a Minor (Claim-Code Flow)
When a coach creates an athlete profile and generates a unique "claim code" to share with a parent/guardian:
- Coach creates a limited pending profile: The coach enters only the minimal placeholder information needed to generate a 6-character claim code (expires in 30 days) — for example, a first name or jersey label and the sport. Sensitive details such as full name, date of birth, biological sex, and measurements are not required and should not be entered at this step.
- Parent receives code: Parent registers an account (if needed) and agrees to our Terms and Privacy Policy.
- Parent enters claim code: Before the claim is final, we show a full COPPA consent screen confirming the parent/guardian relationship, authorizing storage of the athlete's name, age, sex, and performance data, accepting the Assumption of Risk for exercise content, and accepting the Terms and Privacy Policy.
- Consent recorded: Parent email, timestamp, claim code, athlete ID, coach email, and acceptance are logged.
- Unclaimed profiles auto-deleted: If a claim code is not redeemed within 30 days, the pending athlete profile and all associated placeholder data are automatically and permanently deleted. No personal data is retained for unclaimed profiles beyond the 30-day window.
Coach Responsibility for Consent
When a coach adds athletes, creates team rosters, or enters any personal information about individuals into the app, the coach — not My Athlete LLC — is solely responsible for ensuring that the necessary parental or guardian consent has been obtained before entering that information. By entering another person's data, the coach represents and warrants that they have the right to provide that information to us. My Athlete LLC is not liable for a coach's failure to obtain proper consent from athletes' families prior to data entry.
Annual Re-Consent: At each subscription renewal (or annually if free), before first access to the Exercise Library that period, we re-present the Assumption-of-Risk consent. This maintains fresh, informed consent for ongoing exercise access.
Parent Rights Under COPPA
- Review: Access all data we hold about your child via the Family Dashboard.
- Request Deletion: Delete your child's account (all profiles, scores, measurements deleted within 30 days).
- Request Export: Receive your child's data in CSV or JSON format.
- Opt-Out: Disable optional features (e.g., Combine Benchmarks, Cognitive Baseline) — some are required for app function.
To exercise these rights, contact us at support@myathlete.team.
4. Sensitive Health Data & DOB Justification
Age (Date of Birth): We collect DOB because it enables age-appropriate assessment recommendations and developmental guidance during growth-sensitive windows (typically ages 11–15). This is supported by published LTAD (Long-Term Athlete Development) frameworks.
Growth Measurements (Height/Weight/BMI): We collect these because CDC growth percentiles show how an athlete's development compares to age/sex peers. If you prefer not to provide DOB or growth data, some app features will be unavailable; the app will notify you of these limits.
Your Right to Limit Use of Sensitive Data
You may request that we limit the use of an athlete's sensitive data (date of birth, biological sex, height, weight, and BMI) solely to (1) providing the service you requested, (2) ensuring safety and security, and (3) complying with our legal obligations. We do not use sensitive data for advertising, profiling, or any secondary purpose. To exercise this right, contact support@myathlete.team.
Not Protected Health Information (PHI): My Athlete is not a healthcare provider and does not provide medical or healthcare services. The growth and performance data we collect is not "protected health information" (PHI) under HIPAA. However, we treat it as sensitive and protect it accordingly.
Optional Estimated Adult Height Range
My Athlete may offer an optional feature that estimates an athlete's possible adult-height range using the athlete's growth measurements, age, biological sex, publicly available CDC growth-reference data, and parent-entered biological parent heights. This feature is parent/guardian-controlled and may be disabled at any time. We store the parents' entered heights and a timestamped record of the opt-in consent; you may remove the parent heights or turn the feature off whenever you like.
The estimate is provided for general informational and educational purposes only. It is not a medical assessment, diagnosis, screening tool, growth evaluation, or guarantee of adult height. It does not determine whether an athlete's growth is normal, abnormal, delayed, advanced, or medically concerning. Many factors affect growth, and actual adult height may fall outside the estimated range. For individualized growth questions, consult a pediatrician or qualified healthcare professional.
How this data is handled: Only a parent or guardian may enable this feature or enter the biological parents' heights. We use the parent heights, the athlete's measurements, and the derived estimate only to provide and display the estimate and to keep the consent record — never for advertising, profiling, or any unrelated purpose, and we do not sell it. If you remove the parent heights or turn the feature off, we delete those height values and the derived estimate; we keep only the minimal opt-in/consent record as needed for security and legal compliance.
Optional Enhanced Growth Velocity
My Athlete offers an optional Enhanced Growth Velocity feature that lets a parent or legal guardian record an athlete's body measurements over time — standing height, weight, sitting height (and the height of the box/stool used), and optional left/right foot length — and view observed changes based on those measurements. Shoe size, if entered, is stored only as context and is never used in any calculation. From what you enter, we calculate raw change since a previous session, annualized observed rates of change, derived leg length and body-segment ratios, and a measurement-quality rating (how well the session was measured — not confidence in the athlete's biological status). This feature is informational and educational only.
It does not diagnose or detect peak height velocity, puberty, biological maturity, a growth disorder, abnormal growth, a medical condition, or injury risk, and it is not a substitute for a pediatrician or other qualified healthcare professional. Annualized rates are estimates and can be affected by measurement technique, equipment, posture, clothing, time of day, and the length of the interval between sessions.
Parent control & visibility: Enhanced Growth Velocity is parent-controlled and private by default. Growth-measurement data is not shown on public profiles or leaderboards and is not available to coaches. Any future option to give a coach access would require a separate, affirmative parent choice. You can edit or delete individual sessions, or delete the athlete's complete growth-measurement history, at any time. We record a versioned opt-in consent (who agreed, when, and to which text). We do not sell this data, disclose it to data brokers, or use it for targeted or cross-context behavioral advertising; we disclose it only to service providers that host, secure, and operate the app on our behalf, when you direct us to, or when legally required. Please do not enter medical diagnoses, Tanner stage, puberty status, or other intimate information in notes.
5. How We Use Your Information
- Calculate CDC growth percentiles and equivalent ages
- Grade and track athletic assessment progress
- Display developmental stage recommendations based on age and LTAD research
- Enable team collaboration between coaches and parents
- Provide age-appropriate exercise guidance and wellness resources
- Improve the app (anonymized analytics)
- Comply with legal obligations (data retention, breach notification)
We do NOT use child data for behavioral profiling, targeted advertising, or marketing. We do NOT share data with ad networks or data brokers.
Marketing Content & AI Tools: Some images, videos, or other marketing materials on our website, social media, or advertising may be created or edited using third-party design, editing, or generative-AI tools. We do not use personal information from children, athletes, parents, coaches, or other users to create synthetic marketing content.
No AI / Machine-Learning Training Without Consent
We do NOT use identifiable personal data, athlete health/fitness data, growth measurements, performance scores, images, or private support communications to train artificial-intelligence or machine-learning models, unless you provide a separate, explicit, opt-in consent for that specific purpose. We may use fully aggregated or anonymized data to improve the app and analyze performance.
6. Exercise & Wellness Content — Liability Disclaimer
My Athlete includes an Exercise Library with 1,900+ demonstration videos, coaching cues, and instructional content (licensed). This content is provided for educational reference only and is NOT medical advice, medical treatment, or rehabilitation protocol.
Important Safety Precautions
- Not a Substitute for Professional Coaching: Always consult a qualified coach, athletic trainer, or physician before beginning new training.
- Medical Clearance Required: Ensure the athlete has medical clearance for physical activity before performing any exercise or assessment.
- Adult Supervision: All exercise should be performed under the supervision of a qualified coach or responsible adult.
- Stop if Pain Occurs: Discontinue immediately on sharp pain, dizziness, shortness of breath, or other concerning symptoms.
- Age-Appropriateness: Screen content for the athlete's age, ability level, and available environment.
- Assumption of Risk: By accessing the Exercise Library, you accept full responsibility for any injury, loss, or damage arising from exercise use. My Athlete LLC is not liable for such injury.
7. Third-Party Processors & Data Sharing
We do NOT sell or rent your data. We share data only with trusted service providers who process data solely to operate the app:
- Supabase (database + Auth): Hosts athlete profiles, assessments, team data. AWS us-east-1; encrypted in transit (HTTPS) and at rest.
- Cloudflare (web hosting, video delivery): Serves the website and Exercise Library videos (static content; no personal data served with videos).
- PostHog (product analytics): Anonymized feature-usage events. Contractually limited to providing analytics on our behalf; does NOT profile children or serve targeted ads. PII is automatically scrubbed.
- Sentry (crash & error reporting): Crash logs and diagnostics to fix bugs. Contractually limited to providing crash diagnostics on our behalf; sensitive data is filtered.
- RevenueCat (subscription processing): Processes in-app subscriptions via Apple App Store and Google Play. Payment card data is NOT sent to us.
Service-Provider Obligations: Our service providers are contractually required to process personal information only on our behalf, only to provide their services, and not for targeted advertising, profiling, or independent commercial use.
Consent to Collection Is Separate from Third-Party Sharing: Your consent for us to collect and use a child's information does not authorize us to disclose that information to third parties for any purpose beyond operating the app (such as advertising or profiling). We do not make such disclosures. If we ever proposed to share a child's personal information with a third party for a non-core purpose, we would first obtain separate verifiable parental consent.
8. Data Deletion & Retention Schedule
When You Delete Your Account
- Immediate: All athlete profiles, assessment scores, growth measurements, team memberships, and exercise history removed from the live database.
- Within 30 days: Remaining application data purged from primary storage.
- Backup/Disaster Recovery: Backup copies may persist up to 180 days for system recovery; these are inaccessible to staff and auto-deleted after 180 days.
- Anonymized Analytics: Feature-usage events anonymized after 30 days, fully deleted after 90 days.
- Payment Records: Subscription/payment history retained for 7 years per IRS tax-retention rules.
Written Retention Policy: We do not retain personal information indefinitely. We maintain a written data-retention policy and delete or de-identify data once it is no longer needed for the purposes described above or as required by law.
Inactive Accounts
If your account has had no activity (no logins, assessments, or data changes) for 24 consecutive months, we will send a notification email to your registered address asking whether you wish to retain your account. If we do not receive a response within 30 days of that notice, your account will be deactivated and your personal data will be deleted in accordance with the schedule above. You may reactivate at any time before deactivation by logging in or contacting us at support@myathlete.team. Subscription/payment records are retained for 7 years regardless of account status per IRS requirements.
9. FERPA & School-Affiliated Data
If your team is school-affiliated, be aware of FERPA (Family Educational Rights and Privacy Act):
- My Athlete is NOT a "School Official": We do not maintain education records on behalf of your school. Parents own the data.
- Data Ownership: Parents retain ownership and can delete athlete profiles or revoke coach access anytime, regardless of school involvement.
- School Policy Compliance: If your school prohibits non-approved third-party tools, consult your administration first. My Athlete LLC is not liable for your violation of school policy.
- School DPA Available: If your school requests a Data Processing Agreement (DPA), contact us at support@myathlete.team. We can provide one at no cost.
10. Your Privacy Rights by State
California (CCPA/CPRA), Virginia (VCDPA), Colorado (CPA), Utah (UCPA), Connecticut (CTDPA), and Other U.S. State Privacy Laws (including Texas, Oregon, Montana, Delaware, New Jersey, Tennessee, Minnesota, Maryland, and others)
If you reside in a state with a comprehensive consumer-privacy law, you have the right to:
- Access: Request all personal information we hold about you.
- Correct: Request correction of inaccurate data.
- Delete: Request deletion of your data (subject to legal-obligation exceptions).
- Selling/Sharing & Targeted Advertising: We do NOT sell your data, share it for cross-context behavioral advertising, or use it for targeted advertising — so there is nothing to opt out of. If this ever changes, we will update this policy and provide an opt-out mechanism first.
- Limit Use of Sensitive Personal Information (California CPRA): You have the right to direct us to use sensitive personal information only for the purpose of providing the services you requested. We already do this — we use any sensitive or health-related data (as described in Section 11) solely to operate and provide the app. No additional action is needed to exercise this right, but you may confirm or request enforcement at support@myathlete.team.
To submit a request, email support@myathlete.team with "Privacy Request" in the subject line. Include your name, email, and state of residence. We will respond within 45 days.
California Minors
California residents under 18: do not post personal information on any public channels. If you do, you can request removal by contacting us.
Nevada
We do NOT sell personal information as defined by Nevada law. You can request confirmation at support@myathlete.team.
11. Consumer Health Data Notice
This section applies to information that may be considered Consumer Health Data under applicable U.S. state consumer-health-privacy laws (such as Washington's My Health My Data Act, Nevada's SB 370, and similar laws), to the extent they apply to us. A standalone Consumer Health Data Privacy notice is also published separately.
Consumer Health Data may include information linked or reasonably linkable to an athlete that relates to physical health or development — for example, body measurements, height, weight, BMI, sitting height, limb/body-segment and foot-length measurements, growth tracking, performance metrics, injury information you voluntarily provide, and related support communications.
We use Consumer Health Data only to:
- Provide and operate the app and its features
- Calculate growth percentiles, developmental guidance, and progress tracking
- Provide service communications and support
- Ensure safety, security, and fraud prevention
- Comply with legal obligations and protect legal rights
We do NOT sell Consumer Health Data; use it for targeted or cross-context behavioral advertising; or use it to train AI/ML models (without separate explicit opt-in). We disclose it only to service providers that process it on our behalf under our instructions (see Section 7). You may request access, deletion, correction, or withdrawal of consent at support@myathlete.team.
12. Do Not Sell or Share My Personal Information
We do NOT sell personal information for money. We do NOT use child or athlete data for cross-context behavioral advertising.
If we ever use advertising cookies, pixels, or similar technologies on our marketing website that could constitute "sharing" under California law, you may opt out by using the "Do Not Sell or Share My Personal Information" link on our website (when applicable), adjusting your cookie settings, contacting us at support@myathlete.team, or using a browser/extension that sends a Global Privacy Control (GPC) signal.
Global Privacy Control: Where required by applicable law, we honor GPC signals as a valid request to opt out of the sale or sharing of personal information. We do not knowingly sell or share the personal information of consumers under 16 without the required opt-in consent.
13. How to Submit a Privacy Request (Workflow & Appeals)
Submitting a Request
To exercise any privacy right (know, access, correct, delete, limit sensitive data, opt out), email support@myathlete.team with "Privacy Request" in the subject line. Include your name, account email, state of residence, and the nature of your request. An authorized agent may submit a request on your behalf with proof of authorization.
Identity Verification & Response Time
To protect your data, we verify your identity before fulfilling a request (typically by confirming control of the account email). We will respond within 45 days. If we need more time, we may extend by an additional 45 days and will notify you of the extension and the reason.
Appeals
If we deny your request, you may appeal by replying to our denial or emailing support@myathlete.team with "Privacy Appeal" in the subject line. If you remain unsatisfied, you may contact your state Attorney General or applicable privacy authority (for example, the California Privacy Protection Agency).
Non-Discrimination
We will not deny service, charge a different price, or provide a different quality of service because you exercised your privacy rights.
14. Push Notifications
We may send service notifications related to your account and use of the app (e.g., subscription confirmations, security alerts, assessment reminders, important updates). These are part of providing the service.
With your separate consent, we may also send marketing or informational notifications (e.g., feature announcements, tips). You can opt out of these at any time in your device settings or by contacting us; opting out of marketing does not stop essential service notifications.
Children: Notifications relating to a minor's profile are sent to the managing parent/guardian or coach account, not directly to children.
15. Third-Party Communication Channels
If you communicate with us or with a team through any third-party channel (e.g., email, SMS, or a messaging platform), your use of that channel is also governed by that provider's terms and privacy policy, which we do not control.
Do not post sensitive information in shared or group channels. You should not post medical records, government identification, payment/bank details, or other highly sensitive information in any team chat or group channel where it may be visible to others. To share sensitive information with us for support, use the private contact email above.
16. Children's Privacy (COPPA Comprehensive)
My Athlete is designed for parent/coach management of youth data, not for child-directed marketing. We do NOT:
- Allow children under 13 to create accounts directly
- Collect data directly from children
- Market to children
- Use child data for behavioral profiling or targeted ads
Parental Control: All child data is entered and managed by parents/guardians, or by coaches with the parent/guardian's authorization through our claim-code consent flow. If you believe we've collected unauthorized data from a child under 13, please contact us immediately at support@myathlete.team — we will respond within 48 hours and delete any unauthorized data without delay.
17. Security & Data Protection
- HTTPS encryption for all data in transit
- AES-256 encryption for data at rest
- Row-Level Security (RLS) policies: users can only access their own family or team data
- Regular security audits and vulnerability testing
- Limited staff access to production data (need-to-know basis)
Information Security Program: We maintain a written information security program, overseen by a designated member of our team, that includes administrative, technical, and physical safeguards reasonably designed to protect the confidentiality, integrity, and availability of personal information, appropriate to its sensitivity.
Data Breach Notification: In the event of a data breach, we will notify affected users and regulators as required by applicable law.
18. Changes to This Privacy Policy
We may update this policy from time to time. Significant changes (especially those affecting child data handling or consent) will be announced in-app or via email. Continued use of the app after changes take effect constitutes acceptance. We will update the "Last updated" date above. We review this policy at least once every 12 months.
19. Contact Us
Questions about this Privacy Policy or to exercise your data rights:
My Athlete LLC