Privacy Policy

1. Introduction

TheFacilityApp ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our sports performance and recruiting intelligence platform. Please read this policy carefully. If you disagree with its terms, please discontinue use of the App.

2. Information We Collect

We collect information in the following ways:

Information You Provide Directly

• Account registration details (name, email address, role, organization)
• Athlete performance data (metrics, assessment scores, training records)
• Recruiting profile information (academic records, athletic achievements)
• Wellness and health data (daily check-ins, injury logs)
• Payment information (processed securely via Stripe — we do not store card numbers)
• Communications you send to us or through the App

Information Collected Automatically

• Usage data (features accessed, pages visited, time spent)
• Device information (browser type, operating system, IP address)
• Log data (error reports, performance diagnostics)
• Cookies and similar tracking technologies

Information from Third Parties

• Authentication data from Supabase (our database and auth provider)
• Payment processing data from Stripe
• Communication delivery data from Resend (email) and Twilio (SMS)

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and improve the App and its features
• Generate AI-powered training recommendations and recruiting intelligence
• Process payments and manage subscriptions
• Send transactional emails and SMS notifications related to your account
• Respond to your inquiries and provide customer support
• Monitor and analyze usage patterns to enhance user experience
• Detect, prevent, and address technical issues or fraudulent activity
• Comply with legal obligations

4. Athlete Data and Minors

TheFacilityApp may contain data about athletes who are minors (under 18 years of age). We take special care with this data:

• Coaches and facility administrators are responsible for obtaining appropriate consent before entering minor athlete data
• We do not knowingly collect personal information directly from children under 13 without verifiable parental consent
• Athlete performance data is only accessible to authorized coaches, administrators, and the athlete's own account
• Parents may request access to or deletion of their child's data by contacting us

5. Sharing Your Information

We do not sell your personal information. We may share your information with:

• Service Providers: Supabase (database/auth), Stripe (payments), Resend (email), Twilio (SMS), OpenAI (AI features) — each bound by their own privacy policies and data processing agreements
• Within the Platform: Coaches can view athlete data for athletes assigned to them; administrators can view data for their facility's athletes
• Public Profiles: If you create a public recruiting profile, that information is accessible via a shareable link
• Legal Requirements: When required by law, court order, or governmental authority
• Business Transfers: In connection with a merger, acquisition, or sale of assets, with notice provided to affected users

6. Data Security

We implement industry-standard security measures to protect your information, including encrypted data transmission (TLS/SSL), secure database storage via Supabase with row-level security policies, and role-based access controls. However, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security of your data.

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide services. You may request deletion of your account and associated data at any time. We may retain certain information as required by law or for legitimate business purposes (e.g., billing records, fraud prevention).

8. Your Rights and Choices

Depending on your location, you may have the right to:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data ("right to be forgotten")
• Portability: Request your data in a portable format
• Opt-out: Unsubscribe from marketing communications at any time
• Restriction: Request restriction of processing in certain circumstances

To exercise these rights, contact us through the App or at thefacility.cloud.

9. Cookies and Tracking

We use cookies and similar technologies to maintain your session, remember your preferences, and analyze App usage. You can control cookie settings through your browser, though disabling certain cookies may affect App functionality. We use session cookies (deleted when you close your browser) and persistent cookies (remain until deleted or expired).

10. Third-Party Links

The App may contain links to third-party websites or services (e.g., college program websites, recruiting platforms). We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal information.

11. AI and Automated Decision-Making

TheFacilityApp uses AI to generate training recommendations, recruiting projections, and performance analyses. These are algorithmic outputs based on the data you provide. They are not binding decisions and do not replace professional coaching, medical, or recruiting advice. You have the right to request human review of any AI-generated output that significantly affects you.

12. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes via email or an in-app notification at least 30 days before they take effect. Your continued use of the App after changes take effect constitutes acceptance of the revised policy.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us through the App or visit thefacility.cloud.