Privacy Policy

1. Information We Collect

1.1 Account Information

When you create an account, we collect:

• Full name
• Email address
• Password (stored in hashed and salted form)
• Account role (coach, parent, or player)

1.2 Profile Information

You may choose to provide additional profile details, including:

• Phone number
• Profile photo
• Team affiliations and role preferences

1.3 Team & Roster Data

Coaches and team administrators may enter:

• Team names, sport type, and season information
• Player names, jersey numbers, and positions
• Depth chart assignments and roster configurations
• Playbook designs, formations, and play diagrams

1.4 Event & Schedule Data

We collect event information that users create, including:

• Practice and game schedules (dates, times, locations)
• RSVP responses and attendance records
• Announcements and team communications

1.5 Payment Information

Payment processing is handled entirely by Stripe, our third-party payment processor. We do not store credit card numbers, bank account details, or other sensitive financial information on our servers. Stripe collects and securely processes your payment details in accordance with PCI DSS standards.

1.6 AI Assistant Conversations

GameReadyX offers an optional AI coaching assistant powered by Anthropic. Conversations with the AI assistant are ephemeral and are not stored on our servers. They are processed in real time and discarded immediately after the response is delivered.

1.7 Usage Data & Analytics

We automatically collect information about how you interact with the Service, including:

• Pages viewed and features used
• Session duration and frequency of use
• Crash reports and error logs

1.8 Device & Technical Information

We may collect device-level information such as:

• Device type, operating system, and version
• Browser type and version
• IP address and general geographic location
• Unique device identifiers

2. How We Use Your Information

We use the information we collect for the following purposes:

• Account Management — To create and maintain your account, authenticate your identity, and manage your role-based access.
• Team Management — To enable coaches to create teams, manage rosters, build depth charts, and design playbooks.
• Team Communication — To facilitate announcements, event scheduling, and RSVP tracking among team members.
• AI Coaching Assistance — To provide real-time coaching suggestions and practice planning through our AI assistant.
• Payment Processing — To process subscription payments and manage billing through Stripe.
• Transactional Emails — To send account confirmations, password resets, subscription receipts, and important service notifications.
• Analytics & Improvement — To understand usage patterns, improve the Service, and develop new features.
• Fraud Detection & Prevention — To detect, prevent, and respond to fraud, abuse, security risks, and technical issues.
• Legal Compliance — To comply with applicable laws, regulations, and legal processes.

3. SMS / Text Messaging

GameReadyX allows coaches to send SMS text messages to parents and team members using the device’s native messaging application. These messages are not automated — they are initiated manually by the coach and sent directly through the device’s built-in SMS functionality.

• Consent: By providing your phone number to a coach within GameReadyX, you consent to receiving team-related text messages from that coach.
• Opt-Out: You may opt out at any time by requesting your coach remove your phone number or by contacting us at admin@gamereadyx.com.
• Message Frequency: Message frequency varies based on team activity and coach communication preferences.
• No Marketing: SMS messaging within GameReadyX is used exclusively for team communication. We do not send automated marketing messages via SMS.

4. Data Sharing & Third-Party Services

We do not sell, rent, or trade your personal information to third parties. We share information only with the following service providers who assist in operating the Service:

• Supabase — Database hosting, user authentication, and file storage.
• Firebase — Web hosting and analytics.
• Stripe — Secure payment processing for subscriptions.
• Anthropic — AI assistant processing (conversations are ephemeral and not retained).

We may also disclose your information if required to do so by law, court order, or governmental regulation, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

5. Children’s Privacy (COPPA Compliance)

GameReadyX is committed to protecting the privacy of children. We comply with the Children’s Online Privacy Protection Act (COPPA) and take the following measures:

5.1 How We Handle Children’s Data

• GameReadyX accounts may only be created by individuals who are 18 years of age or older.
• Player profiles for minors are created and managed by adult coaches or parents — children do not create their own accounts.
• Information collected about minors is limited to what is necessary for team management (name, jersey number, position).
• We do not engage in behavioral advertising directed at children.
• We do not provide social features, chat rooms, or public profiles for minors.

5.2 Parental Rights

Parents and legal guardians have the right to:

• Review the personal information we have collected about their child.
• Request correction of inaccurate information.
• Request deletion of their child’s personal information.
• Refuse further collection or use of their child’s information.
• Request that information be removed from team rosters.

5.3 Coach Responsibilities

Coaches who enter player data into GameReadyX represent and warrant that they have obtained appropriate consent from parents or legal guardians to collect and use player information for team management purposes.

6. Data Retention & Deletion

6.1 Account Data

We retain your account data for as long as your account is active. If you request account deletion, we will remove your personal data within 30 days. Billing records may be retained for up to 7 years as required for tax and legal compliance.

6.2 Team Data

Team data (rosters, schedules, playbooks) is retained for as long as the team exists within the Service. Coaches may delete team data at any time. Upon deletion, team data is removed from our active systems within 30 days.

6.3 AI Conversations

AI assistant conversations are ephemeral. They are processed in real time and are not stored on our servers or in any persistent database.

6.4 Backups

Encrypted backups of our database may persist for up to 90 days after data deletion for disaster recovery purposes. Backup data is encrypted at rest and is not used for any purpose other than system recovery.

7. Data Security

We implement industry-standard security measures to protect your data, including:

• Encryption in Transit — All data transmitted between your device and our servers is encrypted using TLS/SSL.
• Encryption at Rest — Data stored in our database is encrypted at rest.
• Password Security — Passwords are hashed and salted using industry-standard algorithms. We never store plaintext passwords.
• Row-Level Security (RLS) — Database-level security policies ensure users can only access data they are authorized to view.
• Access Controls — Role-based access controls restrict data access based on user roles (coach, parent, player).

8. Cookies & Tracking

GameReadyX uses the following technologies:

• Session Cookies — Essential cookies required for authentication and maintaining your logged-in session.
• Local Storage — Used to store your preferences and application settings on your device.
• Firebase Analytics — Used to collect anonymized usage data to help us understand how users interact with the Service and to improve performance.

We do not use advertising cookies, third-party tracking pixels, or cross-site tracking technologies.

9. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Right to Access — Request a copy of the personal information we hold about you.
• Right to Correction — Request correction of inaccurate or incomplete data.
• Right to Deletion — Request deletion of your personal information, subject to legal retention requirements.
• Right to Data Portability — Request a copy of your data in a structured, machine-readable format.
• Right to Opt Out — Opt out of non-essential data collection and analytics.
• Right to Withdraw Consent — Withdraw your consent to data processing at any time, where consent is the legal basis for processing.

10. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

• Right to Know — You may request disclosure of the categories and specific pieces of personal information we have collected about you.
• Right to Delete — You may request deletion of your personal information, subject to certain exceptions.
• Right to Correct — You may request correction of inaccurate personal information.
• Right to Opt Out of Sale or Sharing — We do not sell or share your personal information as defined under CCPA/CPRA. There is no need to opt out, but you may submit a request for confirmation.
• Right to Non-Discrimination — We will not discriminate against you for exercising any of your CCPA/CPRA rights.

11. International Data Transfers

GameReadyX is operated in the United States. If you access the Service from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your jurisdiction.

By using the Service, you consent to the transfer of your information to the United States and the processing of your data in accordance with this Privacy Policy.

12. Do Not Track Signals

GameReadyX does not currently respond to “Do Not Track” (DNT) browser signals, as there is no industry-standard protocol for DNT compliance. However, we do not engage in cross-site tracking of our users.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes:

• We will update the “Effective Date” at the top of this page.
• For material changes, we will notify you via email or through an in-app notification.
• The updated Privacy Policy will be posted at this URL.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: